1. Introduction At Fashioned Health, we believe your privacy is fundamental to your trust in our care. This Privacy Policy explains how we collect, use, disclose, and protect your personal and health information in full compliance with the Health Insurance Portability and Accountability Act (HIPAA), as well as applicable Illinois laws such as the Personal Information Protection Act (PIPA), Genetic Information Privacy Act (GIPA), Biometric Information Privacy Act (BIPA), and the Mental Health and Developmental Disabilities Confidentiality Act (MHDDCA).

2. Information We Collect We collect information necessary to provide high-quality care and service, including:

• Account information such as your name, contact details, and registration data.
• Self-reported information you voluntarily provide through surveys, feedback, or preferences.
• Health information including physical and mental health conditions, medications, lab results, diagnoses, and care interactions.
• Device and technical data such as your IP address, browser type, operating system, and device IDs.
• Log and usage data, such as clicks, pages viewed, time spent on services, and navigation history.
• Location data estimated from your device or IP address.
• Information collected through cookies and tracking technologies.

3. How We Collect Information We collect information through direct input from you, automated tracking during your use of our services, and trusted third-party sources such as labs and technology vendors. All data collection practices are transparent and purpose-driven.

4. How We Use Information Your information is used solely to:

• Deliver and manage healthcare, telehealth, and wellness services.
• Schedule appointments and provide customer support.
• Improve the user experience through personalization.
• Ensure operational security and integrity.
• Comply with regulatory and legal obligations.
• Monitor system performance and analyze usage trends.
• Prevent fraud and protect the health and safety of patients.

5. How We Share Information Fashioned Health does not sell or rent your personal data. We may share information:

• With your express consent or at your request.
• With service providers who assist with billing, IT, security, storage, or communications.
• With pharmacies and licensed providers coordinating your treatment.
• When required by law (e.g., subpoenas, legal orders, public health mandates).
• In the event of a business transfer or corporate restructuring.

6. Data Security and Secure Disposal We implement and maintain rigorous physical, technical, and administrative safeguards in line with PIPA. All data scheduled for disposal is destroyed in a manner that renders it unreadable and irretrievable.

7. Data Breach Notification In the event of a breach involving your personal or health information, we will notify you without unreasonable delay, in accordance with federal HIPAA rules and Illinois PIPA.

8. Additional Illinois-Specific Privacy Protections

• Under the MHDDCA, mental health and developmental disability records are held to higher confidentiality standards and are only disclosed with your explicit written consent, unless required by law.
• In compliance with GIPA, genetic information will never be disclosed without a signed, specific authorization from you.
• If biometric data is ever collected (e.g., facial scan, fingerprints), we will comply with BIPA by obtaining written consent and publishing a retention and destruction policy.
• We submit controlled substance prescriptions to the Illinois Prescription Monitoring Program (PMP) as mandated by state law.

9. Medical Record Retention We retain medical records for a minimum of 10 years from the date of last treatment, in accordance with Illinois state regulations.

10. Children’s Privacy We do not knowingly collect personal data from individuals under 13. If we learn that we have inadvertently collected such data, we will delete it immediately. Parents or guardians can contact us at support@fashionedhealth.com.

11. Your Privacy Rights You have the right to:

• Access and obtain a copy of your personal or medical information.
• Request corrections to inaccuracies in your information.
• Request deletion of your account and associated information (subject to legal limitations).
• Receive a report of disclosures made in the past 12 months.
• Request restrictions on the sharing of your PHI.
• Choose how and where we communicate with you.
• Revoke your authorization or communication preferences in writing at any time.

12. Medical Record Policy Medical records include data used in treatment and healthcare operations. We use or share this data:

• As part of treatment, coordination, and follow-up care.
• To support care quality, patient safety, and compliance audits.
• With your consent or legal representative’s consent.
• When legally mandated, including public health reporting or court orders. Sensitive data such as genetic information, STI results, psychotherapy notes, or HIV status will never be shared without your signed, specific authorization.

13. SMS Communication Policy By opting into SMS notifications, you agree to receive periodic automated messages. Message frequency varies. You can opt out at any time by calling our office. Standard message and data rates may apply. We do not share your phone number with third parties for marketing.

14. Changes to This Policy We reserve the right to update this policy at any time. Material changes will be communicated through email or website notices. Your continued use of our services indicates acceptance of the updated terms.

15. Our Legal Responsibilities Fashioned Health is legally obligated to:

• Maintain the confidentiality and security of your PHI.
• Notify you promptly of any data breach involving your health information.
• Follow the terms outlined in this policy.

16. Contact Us Privacy Official: Christian Perez
Email: privacy@fashionedhealth.com
Phone: 630-448-2724
Address: 105 S York Street, Suite 215, Elmhurst, IL 60126