Noma Health Privacy Policy

Medical information created or maintained as part of clinical care may be subject to additional privacy protections and the applicable healthcare provider's Notice of Privacy Practices. This Privacy Policy is separate from that Notice.

Contact information: Name, email address, telephone number, mailing address, shipping address, and billing information.

Account information: Login credentials, account settings, preferences, and related account information.

Identity and eligibility information: Date of birth, identity-verification information, physical location, and other information needed to establish eligibility or comply with applicable requirements.

Health-related information: Information you submit when seeking healthcare services, including medical history, symptoms, current and previous medications, allergies, health conditions, treatment history, questionnaire responses, photographs, laboratory information, medical records, and other information you choose to provide.

Transaction information: Information regarding purchases, subscriptions, charges, refunds, orders, and payment status. Complete payment-card information may be processed directly by third-party payment processors rather than stored by Noma Health.

Device and usage information: IP address, device type, browser, operating system, pages visited, referral information, website interactions, and similar technical information.

Communications: Messages and other communications sent to Noma Health, customer support, healthcare professionals, or other service participants.

Information may be used to:

• operate Noma Health;
• create and maintain accounts;
• facilitate access to telehealth services;
• connect patients with healthcare professionals participating in the Scriptful, Inc. provider network;
• support clinical-care workflows;
• facilitate prescriptions and pharmacy fulfillment through ScriptfulRx;
• process transactions;
• provide customer support;
• communicate regarding services, orders, prescriptions, shipping, appointments, billing, and security;
• verify identity and location;
• prevent fraud;
• maintain security;
• comply with applicable law;
• and improve services.

Health information generated or maintained in connection with healthcare services may be subject to additional federal and state privacy requirements.

Where HIPAA applies, Protected Health Information is handled in accordance with applicable HIPAA requirements and the applicable healthcare provider's Notice of Privacy Practices.

Not all information collected through a consumer-facing website necessarily constitutes Protected Health Information under HIPAA.

Other privacy laws may apply.

Information necessary to facilitate healthcare may be disclosed to Scriptful, Inc., participating healthcare professionals, and associated service providers as necessary to facilitate patient evaluation, treatment, care coordination, and healthcare operations permitted by applicable law.

When necessary to facilitate a prescription, appropriate patient and prescription information may be transmitted to:

ScriptfulRx, 416 Clematis Street, Suite B, West Palm Beach, FL 33401

ScriptfulRx uses patient information as necessary to perform pharmacy services, dispense prescriptions, communicate with patients and prescribers, satisfy legal requirements, and perform other lawful pharmacy functions.

Information may also be disclosed as appropriate to:

• healthcare professionals;
• payment processors;
• hosting and technology providers;
• communications providers;
• laboratories where applicable;
• shipping and logistics providers;
• security and fraud-prevention providers;
• professional advisers;
• regulatory authorities;
• government authorities where legally required;
• and other vendors necessary to operate the Services.

Information may also be disclosed at your direction or with authorization where required.

Noma Health may use cookies and similar technologies for essential functionality, security, authentication, preferences, performance, and analytics. Cookie controls are provided where required by applicable law.

Noma Health does not deploy advertising pixels, session-replay technology, or other tracking technology on authenticated patient pages, intake pages, or pages containing sensitive health information unless the implementation has been specifically reviewed for applicable privacy requirements.

Payments may be processed through third-party payment processors.

Noma Health does not directly store complete payment-card information unless required for the applicable payment implementation and appropriately secured.

Noma Health and participating service providers use administrative, technical, and physical safeguards designed to protect information.

No electronic system can be guaranteed to be completely secure.

Information may be retained for as long as reasonably necessary to:

• provide services;
• maintain appropriate healthcare and business records;
• comply with legal obligations;
• resolve disputes;
• prevent fraud;
• and enforce agreements.

Different categories of information may be subject to different retention requirements.

Depending on applicable law, individuals may have rights concerning certain personal information, including rights to request:

• access;
• correction;
• deletion;
• copies of information;
• restriction of certain processing;
• withdrawal of certain consent;
• or other rights established by applicable law.

Healthcare records may be subject to separate rights and legally required retention periods.

Privacy requests may be submitted to: support@nomahealth.com

Noma Health's adult telehealth services are not directed to individuals under 18 unless a particular service expressly provides otherwise.

Residents of certain states may have additional rights under applicable state privacy laws. Noma Health will honor applicable rights based on the nature of the information, the entity processing it, and applicable law.

Noma Health and applicable healthcare and service organizations will address security incidents and provide notifications when required by applicable law.

This Privacy Policy may be updated periodically. The Last Updated date indicates the most recent revision.

Privacy questions: