Notice of Privacy Practices
Effective date: February 05, 2026
This notice describes how health information about you may be used and disclosed and how you can get access to this information. Please review it carefully.Our pledge regarding your health information
Genomate Health, Inc. (“Genomate Health, ”we", or “us”) is committed to protecting your rights and freedoms when we collect, use, and process Personal Data safely and in accordance with all legal obligations.
Genomate does not provide medical care and does not practice medicine. Medical services are provided by an independent licensed consulting healthcare provider. For purposes of the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), the consulting healthcare provider is the covered entity responsible for your medical care and for issuing their own Notice of Privacy Practices.
Genomate does not create or maintain psychotherapy notes as defined under HIPAA.
In connection with the Second Opinion Service, Genomate acts, where applicable, as a business associate to the consulting healthcare provider. In this role, we receive, use, and disclose protected health information (“Health Information”) solely to support the operation and delivery of the Second Opinion Service, and only as permitted by HIPAA, applicable law, and our contractual obligations.
We are required by law to:
• maintain the privacy and security of your Health Information;
• use and disclose Health Information only as permitted by HIPAA and applicable agreements;
• notify you following a breach of unsecured Health Information as required by law; and
• provide you with information about your rights and our privacy practices.
• follow the duties and privacy practices described in this Notice and to give you a copy of it.
Genomate does not use Health Information for fundraising, advertising, or cross-context behavioral tracking.
How we may use and disclose health informationBecause the consulting healthcare provider is the HIPAA covered entity responsible for your medical care and medical record, certain requests (including access to the official medical record, amendments, and accounting of disclosures) must be directed to the consulting healthcare provider. Genomate will cooperate with the provider as required by HIPAA but does not independently maintain the designated medical record set.
Genomate does not use Health Information to make independent medical decisions or provide treatment and does not determine the content of medical opinions.
Genetic and molecular testing information is treated as protected health information under HIPAA and is safeguarded in accordance with this Notice and applicable law.
We use and disclose Health Information only to the minimum extent necessary to perform our functions as a business associate, except where HIPAA permits or requires otherwise.
The following sections describe the ways Genomate may use and disclose your Health Information. Not every use or disclosure is listed. All permitted uses and disclosures fall within one or more of the categories below.
For healthcare operations and service support. We may use and disclose Health Information as necessary to operate, support, and administer the Second Opinion Service. This includes activities such as:
• secure intake and processing of medical records and documentation;
• coordination with the consulting healthcare provider;
• facilitating scheduling and telehealth communications;
• quality assurance, audit, compliance, and internal administrative functions;
• maintaining security, integrity, and availability of systems.
For coordination with the consulting healthcare provider. We may disclose Health Information to the consulting healthcare provider or their clinical practice to enable them to review your records, conduct the consultation, and prepare the second opinion report.
To service providers and business associates. We may use and disclose Health Information to third-party vendors that perform services on our behalf, such as secure hosting, IT services, document management, payment processing, or communications support. These vendors are required by law and contract to safeguard Health Information and use it only as permitted.
As required by law. We may use or disclose Health Information when required to do so by federal, state, or local law, regulation, court order, or lawful process.
To prevent a serious threat to health or safety. We may use or disclose Health Information if necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.
Health oversight activities. We may disclose Health Information to governmental authorities responsible for oversight of healthcare systems, compliance, audits, investigations, or licensure, as authorized by law.
Legal proceedings. We may disclose Health Information in response to a court order, subpoena, discovery request, or other lawful process, as permitted by law.
Other uses and disclosures of health informationAny uses or disclosures of Health Information not described in this Notice will be made only:as permitted or required by HIPAA; or with your written authorization, where required.
If you provide an authorization, you may revoke it in writing at any time. Revocation will not apply to information already used or disclosed in reliance on your authorization.
Marketing and sale of health informationGenomate does not use Health Information for marketing purposes and does not sell Health Information. Any use or disclosure of Health Information for marketing or sale would require your written authorization, except where permitted by law.
Your rights regarding your health informationYou have the following rights with respect to your protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Certain rights are exercised through the consulting healthcare provider, who is the HIPAA covered entity responsible for your medical care, while Genomate supports these rights in its role as a business associate, as applicable.
>
Access to PHI and right to receive a copy
You have the right to inspect and obtain a copy of your PHI, with limited exceptions permitted by law. You may request access to your information in paper or electronic form and may request that a copy be transmitted to a third party designated by you.
Where practicable, we will provide the information in the format you request. Requests for copies of medical records or the official medical record should generally be directed to the consulting healthcare provider. Genomate will cooperate with the provider as required by law.
You may obtain a paper copy of your information or this Notice by contacting us at
privacy@genomate.health.
>
Right to request confidential communications
You have the right to request that communications regarding your PHI be sent to you in a certain way or at a certain location (for example, by email instead of phone, or at an alternative address). We will accommodate reasonable requests, subject to operational feasibility.
Requests may be submitted by contacting
privacy@genomate.health.
>
Right to request restrictions on uses and disclosures
You have the right to request restrictions on certain uses or disclosures of your PHI. We are not required to agree to requested restrictions, except where required by law, including certain restrictions related to disclosures to health plans for payment purposes when you have paid for a service in full out of pocket.
Any agreed restriction must be documented in writing.
>
Right to request amendment of PHI
If you believe that PHI maintained about you is inaccurate or incomplete, you have the right to request an amendment. Your request must be made in writing and must explain the reason for the requested amendment.
Requests relating to the medical record should be directed to the consulting healthcare provider. Requests may be denied in certain circumstances as permitted by HIPAA.
>
Right to an accounting of disclosures
You have the right to receive an accounting of certain disclosures of your PHI made during the six (6) years prior to your request (or a shorter period if our relationship with you has existed for less than six years), excluding disclosures made for treatment, payment, healthcare operations, pursuant to authorization, or as otherwise exempt under HIPAA.
You are entitled to one accounting in any 12-month period at no charge. Reasonable, cost-based fees may apply for additional requests within the same 12-month period.
>
Right to be notified of a breach
You have the right to be notified if unsecured PHI about you is breached. Notification will be provided without unreasonable delay and no later than sixty (60) days after discovery of the breach, as required by HIPAA.
>
Right to a paper copy of this Notice
You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Requests for a paper copy may be made by contacting the consulting healthcare provider or Genomate at
privacy@genomate.health.
Changes to this NoticeWe reserve the right to change this Notice and our privacy practices. Any revised Notice will apply to Health Information we maintain at the time of the change and to information received in the future. The current version will be made available through the Service or upon request.
Questions or complaintsIf you have questions about this Notice or Genomate’s privacy practices, or if you believe your privacy rights have been violated, you may contact:
Genomate Health, Inc.
Privacy Office
Email:
privacy@genomate.health
You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
The complaint must be made in writing and will not in any way affect the quality of care we provide you with. You will not be penalized or retaliated against for filing a complaint.
.avif)
