Skip to main content

HIPAA notice

This notice summarizes how protected health information (PHI) may be used and disclosed when Keta performs covered functions, and the rights available to you under HIPAA. It is a plain-language companion to our full policies.

Who this applies to

When we act as a HIPAA covered entity or business associate (for example, when storing or transmitting PHI on behalf of a partner clinic under a BAA), the obligations in this notice and in our agreements apply. General marketing pages that do not involve PHI may fall outside HIPAA—but we still treat data minimization as a product default.

Uses and disclosures

PHI may be used or disclosed for purposes such as:

  • Treatment, payment, and health care operations as permitted by law and by any applicable authorization.
  • Required disclosures to public health authorities or as otherwise mandated by law.
  • De-identified or aggregated data where permitted, with technical safeguards against re-identification.

Your rights

Depending on context and applicable law, you may have the right to:

  • Access and receive a copy of certain PHI we maintain about you.
  • Request amendment of inaccurate information.
  • Request an accounting of certain disclosures.
  • Request restrictions on uses or disclosures (we are not required to agree to all restrictions).
  • Receive communications through reasonable alternative means or locations.

Complaints

You may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint. Use the contact channels below and we will route your message to the responsible privacy owner.

Contact

For HIPAA-related requests or questions: support@keta.clinic. For the broader privacy program (including non-PHI data), see our Privacy Policy and the HIPAA section within it: Privacy → HIPAA compliance.

This page is informational and does not replace a signed Notice of Privacy Practices provided at the point of care. Legal text may be updated; see version history in the Privacy Policy where applicable.