Draft template. This U.S. HIPAA Notice of Privacy Practices applies only when Casa Elev8 operates as a HIPAA-covered entity (for example, serving U.S. patients). It is a starting point — have it reviewed by qualified U.S. healthcare-privacy counsel, and put Business Associate Agreements in place with each vendor, before relying on it.

Notice of Privacy Practices

Effective: June 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our duties

Casa Elev8 / Elev8 Health is required by law to maintain the privacy of your protected health information (PHI), to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. We are required to notify you following a breach of unsecured PHI.

How we may use and disclose your PHI

Treatment — to provide, coordinate, and manage your care (e.g., your practitioner reviewing your scans, labs, and plan).
Payment — to bill and collect for the care and products you receive.
Health care operations — to run and improve the practice, such as quality and administrative activities.
Business associates — with vendors who perform services for us (such as secure hosting, email, and payment processing) under written agreements requiring them to safeguard your PHI.
As required or permitted by law — including public-health, safety, and legal requirements.

Other uses and disclosures — such as for marketing, or any sale of PHI — require your written authorization, which you may revoke.

Your rights

Access — inspect and obtain a copy of your PHI (available to download in the app's Privacy screen).
Amendment — request a correction of PHI you believe is inaccurate or incomplete.
Accounting of disclosures — request a list of certain disclosures we have made.
Restriction — request limits on certain uses and disclosures.
Confidential communications — request that we contact you a certain way or at a certain location.
Paper copy — obtain a paper copy of this Notice on request.
Breach notification — be notified if your unsecured PHI is breached.

Complaints

If you believe your privacy rights have been violated, you may complain to us at info@elev8.health and to the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Changes to this Notice

We may change this Notice and make the new terms effective for all PHI we maintain. The current Notice will always be posted here.

Contact

For questions or to exercise your rights, contact the Casa Elev8 Privacy Officer at info@elev8.health.