Privacy Policy

Puna Health Corp ("Puna Health," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website, patient portal, telehealth platform, mobile clinic services, and related services available through punahealthcorp.org (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information as described in this Privacy Policy.

 

1. Information We Collect

We may collect the following categories of information:

Personal Information

Information that identifies or relates to you, including:

• Name

• Date of birth

• Mailing address

• Email address

• Telephone number

• Emergency contact information

• Insurance information

• Government-issued identification information, where required

• Payment and billing information

Health Information

When you receive healthcare services, we may collect:

• Medical history

• Symptoms and diagnoses

• Treatment records

• Medication information

• Laboratory and diagnostic results

• Telehealth consultation records

• Communications with healthcare providers

Certain health information may be considered Protected Health Information ("PHI") under applicable laws.

Technical Information

When you visit our website, we may automatically collect:

• IP address

• Browser type

• Device information

• Operating system

• Website usage information

• Referring and exit pages

• Date and time of access

Communications Information

We may collect information contained in:

• Contact forms

• Emails

• Text messages

• Appointment requests

• Patient support inquiries

• Survey responses

2. How We Use Information

We may use information to:

• Provide healthcare services

• Schedule and manage appointments

• Facilitate telehealth visits

• Verify identity

• Process payments

• Respond to inquiries

• Communicate with patients

• Improve our website and services

• Maintain medical records

• Comply with legal obligations

• Protect the safety and security of patients and staff

• Prevent fraud, abuse, and unauthorized access

3. Protected Health Information

When acting as a healthcare provider, Puna Health Corp may collect, use, and disclose Protected Health Information in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), where applicable.

​

Our use and disclosure of PHI may be further described in our Notice of Privacy Practices, which is incorporated by reference into this Privacy Policy.

4. Legal Bases for Processing

Where required by applicable law, we process personal information based on:

• Your consent

• Performance of healthcare services

• Compliance with legal obligations

• Protection of vital interests

• Legitimate operational and business interests

5. Cookies and Tracking Technologies

We may use cookies, analytics tools, and similar technologies to:

• Operate the website

• Improve website performance

• Understand user behavior

• Maintain security

• Remember preferences

You may adjust browser settings to reject cookies; however, certain website functions may not operate properly if cookies are disabled.

6. Telehealth Services

Telehealth services involve electronic communication technologies that may collect:

• Video and audio information

• Device information

• Session metadata

• Communication records

Telehealth data may be stored and processed by trusted technology providers acting on our behalf under appropriate contractual and legal safeguards.

7. How We Share Information

We do not sell personal information.

We may disclose information to:

Healthcare Providers

To physicians, nurses, specialists, pharmacies, laboratories, and other healthcare professionals involved in your care.

Service Providers

To vendors who assist with:

• Website hosting

• Telehealth platforms

• Patient communications

• Payment processing

• Electronic health records

• IT support

• Security monitoring

These providers are authorized to use information only as necessary to provide services on our behalf.

Legal Requirements

We may disclose information when required by:

• Court orders

• Subpoenas

• Government investigations

• Public health reporting obligations

• Applicable laws and regulations

Business Transfers

If Puna Health Corp undergoes a merger, acquisition, restructuring, or asset transfer, information may be transferred as part of the transaction, subject to applicable legal requirements.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from:

• Unauthorized access

• Disclosure

• Alteration

• Destruction

• Loss

• Misuse

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Data Retention

We retain information for as long as necessary to:

• Provide services

• Maintain healthcare records

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

Medical records may be retained for periods required by applicable federal and Hawaii laws and regulations.

10. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Access personal information

• Request correction of inaccurate information

• Request copies of records

• Request restrictions on certain uses or disclosures

• Withdraw consent where processing is based on consent

• Request deletion of certain information, where legally permitted

Certain healthcare records may be exempt from deletion requests due to legal recordkeeping requirements.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18 without parental or guardian involvement.

​

When healthcare services are provided to minors, information may be collected and processed as permitted by applicable law and with appropriate parental or legal authorization, except where minor consent rights apply.

12. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage users to review the privacy policies of any third-party sites they visit.

13. Email and Text Communications

By providing your contact information, you consent to receive communications related to:

• Appointments

• Healthcare services

• Billing matters

• Administrative updates

Standard message and data rates may apply.

You may opt out of non-essential communications by following instructions included in the communication. Certain healthcare-related communications may still be necessary for patient care and operations.

14. Website Analytics

We may use analytics services to understand website usage and improve performance.

​

Analytics providers may collect information such as:

• Device identifiers

• Browser information

• Pages visited

• Time spent on pages

• Referral sources

Information collected through analytics tools is generally used in aggregate form.

15. Do Not Track Signals

Our website may not respond to browser-based "Do Not Track" requests because there is no universally accepted standard governing such responses.

16. International Users

Our Services are intended primarily for individuals located within the United States.

If you access the Services from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

 

Any changes will be posted on this page with an updated Effective Date. Continued use of the Services after changes are posted constitutes acceptance of the revised Privacy Policy.

18. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

​

Puna Health Corp
13-3441 Moku Street
Pāhoa, Hawaii 96778
Phone: (808) 315-1644
Email: info@punahealthcorp.org

HIPAA Notice

This Privacy Policy is intended to provide general website privacy disclosures. Healthcare providers subject to HIPAA should also publish a separate Notice of Privacy Practices (NPP) describing patient rights, uses and disclosures of Protected Health Information, complaint procedures, and HIPAA-specific requirements. Puna Health Corp should maintain both documents separately and make the Notice of Privacy Practices available to all patients.