Forma Medical WellnessDraft — not yet legal advice. This is a placeholder structure for Forma's licensed counsel to review and complete before launch.
Privacy Policy
Last updated: [to be set on publish]
This policy describes how Forma Medical Wellness collects, uses, and protects your information.
Information we collect
Account details, intake responses, contact information, appointment data, and payment information processed by our provider. [Counsel to complete: complete data inventory]
How we use your information
[Counsel to complete: purposes of processing]
How we share information
With clinicians, our EHR (CharmHealth), video provider (Zoom), and communication/payment vendors under Business Associate Agreements where applicable. [Counsel to complete: full list of processors and safeguards]
Protected Health Information (HIPAA)
PHI is handled in accordance with HIPAA. [Counsel to complete: reference the Notice of Privacy Practices and patient rights under HIPAA]
Data security
[Counsel to complete: technical and organizational safeguards, encryption, access controls]
Data retention
[Counsel to complete: retention periods by data category]
Your rights
[Counsel to complete: access, correction, deletion, portability, and state-specific rights]
Cookies and analytics
[Counsel to complete: cookie/analytics disclosures and controls; ensure no PHI in analytics]
Children's privacy
[Counsel to complete: age limits and handling of minors]
Changes and contact
[Counsel to complete: update process and privacy contact / DPO]