Privacy Policy

I. Scope

This Privacy Policy applies to all information of visitors to, and users of, SENA Health websites and SENA Health services (collectively, “SENA Health’s products and services”).

II. Purpose

We collect information from and about users of SENA Health kits and services. This Privacy Policy defines the types of information we may collect from users, or that they may provide, and our practices for collecting, using, keeping, protecting, and sharing that information. The information we collect includes information about a user’s health such as medical history, age, health conditions, and laboratory test results (Protected Health Information or PHI). It also includes personal information such as name, phone number, and home address (Personally Identifiable Information or PII). The complete definitions of PHI and PII are in the Terms and Definitions section at the end of this document.

SENA Health respects the privacy of all visitors and users of SENA Health’s products and Services and is committed to protecting privacy by following this Privacy Policy. We understand that PHI and PII are private, and we are dedicated to keeping this information accessible, confidential and consistent. Users will, by using a user name, password and/or other security methods, have access to and can use SENA Health products and services.

When using SENA Health’s products and services, we may collect and use or share PHI and PII, but only to the extent minimally necessary and in line with our Notice of Privacy Practices. The user can accept that we may collect this PHI and PII from the user directly, or from third parties that share his/her PHI or PII with SENA Health. It is fully the user’s choice whether to give PHI and PII through SENA Health’s products and services. If he/she chooses not to give PHI or PII we need, he/she may not be able to use some features of SENA Health products and services.

A. Protected Health Information (PHI) As used in this Privacy Policy, “Protected Health Information” means information related to physical or mental health, such as: the user’s medical history, family history, medical diagnosis, health background, and current health status; age, gender, sexual behavior and sexual orientation; information related to the diagnosis and treatment of health conditions, over-the-counter and prescription medications, laboratory test results, and payments for treatment and health insurance information; and other information under an applicable law such as HIPAA or an equal State law covering the use or sharing of PHI and as defined by HIPAA.

B. Personally Identifiable Information (PII) As used in this Privacy Policy, “Personally Identifiable Information (PII)” means any information that may be used to identify the user, such as: first and last name, age, and gender; postal address, email address, telephone number, and other contact information; certain health information; and other personally identifiable information under any law that applies, such as HIPAA or an equivalent State law covering the use or sharing of health information.

C. Technical Information We may collect and use technical data (data from the user’s device hardware or software) and related information (“Technical Information”), including but not limited to: technical information about devices the user may receive such as manufacturer, service provider, IP address, operating system, browser type, and mobile number; system and application software and peripherals; the user’s interactions with SENA Health’s products and services, including automatically recording the dates and times of visits and traffic data and search queries. We sometimes gather Technical Information to help perform software updates and product support; improve products and services related to SENA Health; measure the number of our users and how they use our products and services; store information about the user’s preferences, allowing us to customize our products and services to his/her interests; and speed up searches and recognize when the user returns to our website. We may also automatically receive and record information on our server logs from the user’s browser or mobile device, which could include IP address, cookie information, browser information, and the pages the user visits/requests. SENA Health does not consider nor intend Technical Information to constitute PHI or PII. SENA Health may use Technical Information in any way it believes is proper and lawful.

We may also use artificial intelligence (AI) technologies to enhance the delivery of our services, improve customer support, and streamline healthcare processes. Our AI agent is fully HIPAA compliant and operates within strict privacy and security protocols to ensure the confidentiality, integrity, and lawful use of Protected Health Information (PHI) and Personally Identifiable Information (PII).

III. Data and information collection

SENA Health services exist to simplify healthcare experience and help our business partners (health plans, direct service providers, and community partners) to collectively provide seamless service. SENA Health’s exclusive software platform connects a nationwide network of community organizations and digital solutions for its programs with technology that manages service referrals, telemedicine, collects data, and simplifies processes while supporting greater participant engagement and choice. To support this, we need to ensure that each user who gives Information clearly allows it to be used or shared, whether we get it directly from the user, the user’s caregiver or, if applicable, from third parties the user identifies.

IV. Ways of data and information collection

We may collect information: (a) on our website; (b) through email, text, video, AI telephonic agents and voice communications between user and us; (c) through offline community activities and communications; (d) from physicians, hospitals, clinics, schools, and any other organizations or groups that the user gives permission to share information with SENA Health; and (e) through any or all of SENA Health’s kits and services.

V. Data and information usage

We use the user’s data and information to: help give SENA Health services to and on behalf of the user; give information, products, or services upon the user’s request; give notices and communications found suitable by us or the attending physician; carry out our duties from any contracts we have executed related to the user; let users know about changes to SENA Health’s Privacy Policy, products and services; allow customers, partners and others to join in interactive or educational features on our website; obey any court order, law, or legal process, including responding to any government or regulatory request; enforce or apply our Terms of Use; protect SENA Health’s rights, privacy, security, property, and access to information if we believe sharing Information is needed; and for any other purpose the user is told of at the time Information is given, or with the user’s lawful consent.

We may also use artificial intelligence (AI) technologies to enhance the delivery of our services, improve customer support, and streamline healthcare processes. Our AI agent is fully HIPAA compliant and operates within strict privacy and security protocols to ensure the confidentiality, integrity, and lawful use of Protected Health Information (PHI) and Personally Identifiable Information (PII).

VI. We collect and share only the data we need

Except as described in this Privacy Policy or in our Terms of Use, PHI, PII, Technical information, location-based information and behavior-tracking information (collectively, “Information”) that the user gives or that we collect from third parties, will be kept private and used or shared only to the extent minimally necessary to support SENA Health services. At all times, we will only use or share PHI and PII to the extent minimally necessary for the intended use or disclosure. SENA Health will never share personal information with third parties without prior authorization from the information owner or subject. SENA Health’s minimum necessary policy follows the current industry standard that PHI and PII shouldn’t be used or shared when it is not necessary to satisfy a certain purpose or carry out a function. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

VII. Agreement

By using our services, the user agrees to our Privacy Policy. When we have the user’s consent, he/she accepts that we may collect this PHI from him/her directly or from third parties that the user may allow to share PHI with SENA Health. It is fully the user’s choice whether he/she gives PHI through SENA Health products and services. If the user chooses not to give the PHI we need, he/she may not be able to use some parts of SENA Health products and services. The user also gives SENA Health a lasting, non-exclusive, transferable, sub-licensable, royalty-free license to use their Information and other data we collect to develop, create, and extract statistics and other information, and to use this information and de-identified data known as “blinded data.” Aside from any contractual obligations contrary to this Privacy Policy, any blinded data SENA Health collects or creates will be owned solely by SENA Health. This data may be used for any lawful business purpose without the user’s consent if this data is not PHI or PII and doesn’t identify the source of such data.

VIII. Securing data

We have applied reasonable and suitable administrative, technical, and physical safeguards designed to protect the user’s Information from illegal access, use or sharing. All Information provided to us by the user is stored with an approved cloud services provider. These safeguards include, without limitation, encrypting all PHI and PII. The safety and security of Information also depends upon the user, who is also responsible for keeping this information private. It is in his/her best interest to not share a SENA Health user name, password, or other security factor with anyone. If Information was willingly shared on message boards or other public forums and features, or through email or group messaging, that Information can be collected and used by others who may or may not have consent. We are not responsible for the security or privacy of any Information sent outside the scope of SENA Health’s products and services.

a. Data storage

Information collected from a user in the United States will be stored and processed in the United States. For data originating outside the US in which SENA Health or its affiliates, subsidiaries, agents or contractors are located, the Information will also be stored and processed within the US. If the user is accessing SENA Health products or services from other regions with laws governing data collection and use, please note that the user is agreeing to the transfer of his/her data to the United States, and processing globally.

b. Third-Party Products, Services and Technologies

Links may be provided to third-party websites within SENA Health products and services. Note that other websites and services, including the websites of third parties that the user connects with through SENA Health products and services, may collect PII about the user. This Privacy Policy does not cover the information practices of those third-party websites, services, or applications and SENA Health cannot control and is not responsible for the information collection practices of any such websites, services or applications. The user should carefully review the terms of use, privacy policies, and any other legal notices on such websites before using or giving Information to them.

c. Physicians or other health care providers

Physicians or other health care providers, to the extent they are “Covered Entities” under HIPAA (as such term is defined in HIPAA), are responsible for having their own privacy and security policies with respect to our users’ PHI and PII. For more information about HIPAA rights, see www.hhs.gov/ocr/privacy/.

IX. Policy management

All SENA Health websites will post this Privacy Policy. All users of SENA Health websites will get a prompt to review the SENA Health Privacy Policy and Notice. The Privacy Officer will review and update this policy at least once a year.

a. Policy modification

This Privacy Policy and our Terms of Use may change from time to time, and while we will do our best to let users know of any changes, it is up to the user to review this Privacy Policy and the Terms of Use over time. Continued use of SENA Health products and services after we make changes is considered acceptance of those changes. When the Privacy Policy or Terms of Use are changed, the “Effective” date will also be updated on the relevant document. If material changes to how we treat users’ PHI or PII are made, we will let the user know by emailing the primary email address provided, and/or through a notice on the home page of our website.

X. Terms and definitions

Disclosure – The sharing, release, transfer, provision of access to, or divulging in any other manner of information to others outside the entity holding the information.

HIPAA – (United States Health Insurance Portability and Accountability Act of 1996) – two sections: HIPAA Title I deals with protecting health insurance coverage for people who lose or change jobs; HIPAA Title II includes an administrative simplification section which deals with the standardization of healthcare-related information systems. For more information, visit www.hhs.gov/ocr/privacy/.

HITECH Act (Health Information Technology for Economic and Clinical Health Act) – legislation created to stimulate the adoption of electronic health records (EHR) and the supporting technology in the United States. The HITECH Act also expands the standards that aid in electronic exchange of health information nationally and provides incentives for covered entities that adopt EHRs.

Individual – shall mean the person who is the subject of the Protected Health Information or Personally Identifiable Information.

Information – All aspects of Protected Health Information, Personally Identifiable Information, Technical Information, Location-Based Information, and Behavior Tracking Information (collectively known as “Information”).

Minimum Necessary (Need to Know) – A key protection of the HIPAA Privacy Rule. The SENA Health minimum necessary policy adheres to the current industry standard that PHI and PII should not be used or disclosed when it is not necessary to satisfy a particular purpose or carry out a function. When using or disclosing PHI and/or PII, or when requesting PHI and/or PII from another health care provider or health organization, SENA Health will limit the request to the minimum necessary to accomplish the intended purpose. Minimum Necessary does not apply to: disclosures by a health care provider for treatment; uses and disclosures based on valid consent or authorization; disclosures made to the Secretary (or designee) of HHS or another State or Federal agency requesting disclosure under prevailing law; and uses and disclosures required by law or other sections of the HIPAA privacy regulations.

Privacy and Security Officials (PSOs) – The SENA Health Privacy Officer is responsible for HIPAA privacy and security compliance issues.

Personally Identifiable Information (PII) / Protected Health Information (PHI) – Information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context including health information transmitted or maintained in any form or medium, including oral, written, and electronic. PHI relates to an individual’s health status or condition, furnishing health services to an individual, or paying or administering health care benefits to an individual. Information is considered PII where there is a reasonable basis to believe the information can be used to identify an individual.