This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Hawa360
This Notice Describes How Medical Information About You May Be Used and Disclosed and How You Can Get Access to This Information. Please Review It Carefully.
Effective Date: August 12, 2026
Hawa, d/b/a Hawa360 ("Hawa360," "we," "us," or "our") operates a cash-pay telehealth technology platform that facilitates interactions among patients, licensed independent health care professionals, pharmacies, and service providers. Medical care, clinical decisions, diagnoses, and prescribing are provided by independent licensed health care professionals, not by Hawa360 solely in its capacity as a technology platform. This Notice applies to protected health information ("PHI") for which Hawa360 is required to provide a Notice of Privacy Practices under applicable law. To the extent Hawa360 performs services as a business associate for an independent health care provider or other HIPAA covered entity, Hawa360 handles PHI on that entity's behalf in accordance with applicable law and the applicable Business Associate Agreement. The independent provider may also provide you with its own Notice of Privacy Practices.
PHI is individually identifiable information about your past, present, or future physical or mental health or condition, the health care you receive, or payment for that care, when the information is protected by HIPAA.
We may use or disclose health information to facilitate care, including making information available to the licensed health care professionals involved in your care and, when appropriate, pharmacies involved in dispensing prescribed medication.
We may use or disclose health information as permitted to support billing, payment processing, receipts, refunds, and administration of amounts due for services or programs.
Where permitted, we may use or disclose PHI for activities such as quality assessment, compliance, auditing, training, customer support, security, and other lawful health care operations.
Prescription and related information may be shared with appropriately licensed pharmacies when necessary to fill, dispense, and ship a prescription ordered by your treating clinician.
If a program includes remote monitoring or periodic check-ins, information you submit may be stored through the platform and made available to the appropriate treating health care professional for review and follow-up.
We may use or disclose PHI without your written authorization when HIPAA or another applicable law permits or requires it, subject to applicable conditions and limitations. Examples may include public health and safety activities; reporting suspected abuse, neglect, or domestic violence; health oversight activities; judicial and administrative proceedings; certain law-enforcement requests; workers' compensation; organ and tissue donation; medical examiner or funeral director activities; research when legally permitted; and uses or disclosures necessary to comply with law or to prevent or lessen a serious and imminent threat to health or safety.
PHI may be provided to vendors or contractors that perform functions involving PHI on behalf of a HIPAA covered entity. When HIPAA requires a Business Associate Agreement, the appropriate agreement must require the business associate to safeguard PHI and use or disclose it only as permitted.
For certain uses and disclosures, you may tell us your preferences, including certain disclosures to family members, friends, or others involved in your care or payment for your care. Where applicable law requires your written authorization, we will obtain it before using or disclosing your PHI. Written authorization is generally required for most uses and disclosures of psychotherapy notes, uses or disclosures for marketing when HIPAA requires authorization, and a sale of PHI. We do not sell PHI. If you give a written authorization, you may revoke it in writing at any time, except to the extent action has already been taken in reliance on the authorization.
To the extent we create, receive, maintain, or transmit substance use disorder patient records protected by 42 CFR Part 2, additional federal confidentiality protections may apply. Such records generally may not be used or disclosed in investigations or proceedings against the patient except as permitted by applicable law.
You may ask to inspect or obtain an electronic or paper copy of PHI in a designated record set maintained by the applicable covered entity. A copy or summary will generally be provided within the time required by law, usually within 30 days. A reasonable, cost-based fee may apply where permitted.
You may ask the applicable covered entity to correct health information you believe is incorrect or incomplete. A request may be denied as permitted by law; if so, you will be told why in writing within the applicable legal time period.
You may ask to be contacted in a specific way or at a specific location. Reasonable requests will be accommodated as required by law.
You may ask that certain PHI not be used or disclosed for treatment, payment, or health care operations. A covered entity is not always required to agree. If you pay in full out of pocket for a particular health care item or service, you may request that information about that item or service not be disclosed to your health plan for payment or health care operations; the request will be honored when HIPAA requires it unless disclosure is required by law.
You may request an accounting of certain disclosures made during the six years before your request. The accounting generally does not include disclosures for treatment, payment, or health care operations and certain other disclosures excluded by law.
You may request a paper copy of this Notice even if you agreed to receive it electronically.
A person legally authorized to act for you may exercise applicable rights on your behalf after appropriate authority is verified.
You may complain if you believe your privacy rights have been violated. You may contact Hawa360 using the information below or file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
Where HIPAA applies to us, we are required by law to maintain the privacy and security of PHI, provide this Notice when required, follow the duties and privacy practices described in the Notice currently in effect, and provide required notification following a breach of unsecured PHI. We will not use or disclose PHI other than as described in this Notice or as otherwise permitted or required by law unless you authorize us in writing.
We use administrative, technical, and physical safeguards designed to protect PHI as required by applicable law. These safeguards may include access controls, encryption, authentication, logging, workforce controls, vendor oversight, and other security measures appropriate to the systems and services involved. No electronic system can be guaranteed to be completely secure.
No electronic system can be guaranteed to be completely secure. We recommend you also take steps to protect your own information.
We may change the terms of this Notice and, when permitted by law, make the revised Notice effective for PHI we already maintain as well as information we receive in the future. The current Notice will be available on hawa360.com and upon request.
Hawa, d/b/a Hawa360 Privacy Contact Email: info@hawa360.com Website: hawa360.com Indiana, United States To file a complaint directly with the U.S. Department of Health and Human Services Office for Civil Rights, use HHS's published Office for Civil Rights complaint procedures.
This Notice should be reviewed against Hawa360's final corporate, provider, pharmacy, payment, and Business Associate Agreement structure . The language does not characterize Hawa360 as the medical provider merely because it operates the technology platform.
For questions about this Notice, contact us at info@hawa360.com