IL Makiage

Health Information Privacy Policy

Effective July 10^th, 2023

This Health Information Privacy Policy (the “Notice”) describes how Beluga Health, PA and its technology partner, IM Pro Makeup NY LP (collectively “IL MAKIAGE”, “we”, “us”, or “our”) may use and disclose your health information. We are not regulated businesses under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (“HIPAA”) and therefore HIPAA will not apply to health information we collect through your participation in the Acne Focus Group. However, we believe that your health information should have heightened privacy protections, which are also required by certain state privacy laws. We understand that information about you and your health is personal. We will abide by applicable state privacy laws with respect to your health information and maintain your health information as set forth in this Notice. 

This Notice supplements the IL Makiage Privacy Policy but applies to health information only. To the extent this Notice conflicts with the IL Makiage Privacy Policy, this Notice shall control.  

What information do we collect about children under age 18? 

Our services are not available for use by children (under 18 years of age). Children are not authorized to participate in the Acne Focus Group.  Please contact us at [email protected] if you are a parent or legal guardian of an individual under the age of eighteen (18) who you believe has participated in the Acne Focus Group.

What health information do we collect and maintain?

The health information that we collect or maintain may include:

• Your name, age, gender, phone number, date of birth, email address, mailing address, username, password, and other registration information.
• Health information that you provide us, which may include information or records relating to your medical or health history, health status and laboratory testing results, photos, videos, diagnostic images, and other health related information.
• Health information about you prepared or obtained by the clinical professionals and support staff who provide clinical services through Beluga Health such as medical and records, treatment notes and other health related information.

How do we use and disclose health information?  

We may use and disclose your health information for the normal business activities falling in the categories of treatment, payment and healthcare operations. Generally, we do not need your permission for these disclosures under applicable laws. Below we provide examples of those activities, although not every use or disclosure falling within each category is listed:

• Treatment – We keep a record of the health information you provide us. This record may include your test results, diagnoses, medications, your response to medications or other therapies, and information we learn about your medical condition through our services. We may disclose this information so that other doctors, nurses, and entities such as laboratories can meet your healthcare needs. 
• Payment (if applicable) – We document the services and supplies you receive when we are providing care to you so that you or another third party can pay us. 
• Health Care Operations – Health information is used by us to improve the services we provide, to train staff, for business management, quality assessment and improvement, and for customer service. For example, we may use your health information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also use health information to train our machine learning algorithm to improve the services we provide. 

We may also use and disclose your health information to:

• Provide the services and customer support.
• Comply with federal, state or local laws and regulations.
• Assist in public health activities such as tracking diseases.
• Inform authorities to protect suspected victims of abuse or neglect.
• Comply with federal and state health oversight activities such as fraud investigations, audits, and requests for information.
• Respond to law enforcement officials or to judicial orders, subpoenas or other processes.
• Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.
• Conduct research following internal review protocols to ensure the balancing of privacy and research needs.
• Avert a serious threat to health or safety.
• Assist in specialized government functions such as national security, intelligence and protective services.
• Inform military and veteran authorities if you are an armed forces member (active or reserve).
• Inform a correctional institution if you are an inmate.
• Inform workers’ compensation carriers or your employer if you are injured at work.
• Recommend treatment alternatives.
• Tell you about health-related products and services.
• To enforce compliance with our agreements and policies.
• Communicate within our organizations for treatment, payment, or healthcare operations.
• Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals. 
• Provide information to your pharmacy to fill prescriptions.
• Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.
• We may also use or disclose your personal or health information for operational purposes. For example, we may communicate with individuals involved in your care or payment for that care, such as family or guardians and send appointment reminders.
• For business analytics purposes.

All other uses and disclosures, not previously described, may only be done with your written authorization. We will also obtain your authorization before we otherwise use or disclose your health information for marketing purposes or before we would sell your information. You may revoke your authorization at any time; however, this will not affect prior uses and disclosures. 

How will health information be communicated?

We use standard physical, electronic, and business security methods to help prevent access to your health information by people who should not see it. But we cannot promise that data sent over the Internet, SMS text, or through a data storage facility will be secure. So, although we try to protect your personal information, we cannot guarantee the security of any information you send to us.

What are our Responsibilities?  

We will:

• Maintain the privacy of your health information.
• Provide this Notice of our duties and privacy practices.
• Abide by the terms of the Notice currently in effect.
• Tell you if there has been a breach that compromises your health information.

We reserve the right to change our privacy practices and make the new practices effective for all the information we maintain. Revised notices will be communicated to you via email from an official oddity.com email address and will be reflected in the most revised Health Information Privacy Policy on our www.ilmakiage.com website.

By contacting us at [email protected], you may: 

• Inspect and copy certain portions of your health information. We may deny your request under limited circumstances. You may request that we provide your health records to you in an electronic format.
• Request amendment of your health information if you feel the health information is incorrect or incomplete. However, under certain circumstances we may deny your request.
• Receive an accounting of certain disclosures of your health information made for the prior six (6) years, although this excludes certain disclosures for treatment, payment, and health care operations. (Fees may apply to this request.)
• Request that we restrict how we use or disclose your health information. However, we are not required to agree with your requests, unless you request that we restrict information provided to a payor, the disclosure would be for the payor’s payment or healthcare operations, and you have paid for the health care services completely out of pocket.
• Request that we communicate with you at a specific telephone number or address.
• Obtain a paper copy of this notice even if you receive it electronically.

We may ask that you make some of these requests in writing.   

What if I have a complaint?  

If you believe that your privacy has been violated, you may contact us at [email protected]. We will not retaliate or penalize you for filing a complaint with us or a government authority. To file a complaint with us or receive more information contact:

Phone: +1 (551) 751-7495 

Email: [email protected] 

Address: IM Pro Makeup NY LP, 110 Greene St., 2nd Floor, New York, N.Y. 10012 

Who will follow this Notice?

This Notice describes the health care practices of:

• Any healthcare professional or member of our organizations authorized to access and/or enter information into your health record;
• All departments and units within our organizations that have access to your health information; and
• All affiliates and volunteers who have access to your health information.