HIPAA Notice

The Health Insurance Portability and Accountability Act (HIPAA) establishes federal protections for protected health information held by covered healthcare providers, health plans, and their business associates.

Stakt Health connects individuals with independent healthcare providers and pharmacies. Those providers and pharmacies are responsible for evaluating patients, making clinical decisions, and maintaining medical records in accordance with their applicable legal obligations.

Whether HIPAA applies directly to information held by Stakt Health depends on our role, the information involved, and the applicable legal and contractual arrangements. When Stakt acts as a business associate, it must comply with the applicable HIPAA requirements and agreements.

We do not represent that every interaction with our public website is covered by HIPAA. Personal information collected through the website may also be protected by applicable state and federal privacy laws.

Depending on the services you request, information may include:

• Contact and account information.
• Health assessments and medical history submitted for clinical evaluation.
• Laboratory results and treatment-related information.
• Provider communications and prescription information.
• Payment, order, and service records.

The organization responsible for the information determines the applicable record-access procedures and privacy obligations.

Where legally permitted and appropriate to our role, information may be used to:

• Connect you with independent healthcare providers and pharmacies.
• Coordinate requested services, appointments, prescriptions, and fulfillment.
• Process payments and provide customer support.
• Maintain the security and operation of our systems.
• Meet applicable legal, contractual, and regulatory obligations.

Healthcare providers and pharmacies may separately use or disclose protected health information for treatment, payment, healthcare operations, and other purposes permitted by law.

We do not intend to use sensitive health information, medical intake responses, diagnoses, or prescription details to target advertising.

We do not authorize third-party advertising platforms to receive sensitive clinical information from Stakt Health systems. Website analytics and advertising technologies must be configured consistently with applicable privacy requirements and consent choices.

Depending on the organization holding your information and the laws that apply, you may have rights to access records, request corrections, receive copies, request confidential communications, or submit a privacy complaint.

Requests for medical records should generally be directed to the healthcare provider or pharmacy responsible for maintaining them. Stakt Health can help direct your request to the appropriate organization.

If you have concerns about how your health information has been handled, contact support@stakthealth.com.

Where HIPAA applies, you may also submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights: https://www.hhs.gov/ocr/complaints/.

You may also contact the provider or pharmacy involved in your care.

We may update this notice as our services, relationships, or legal obligations change. The current version will be posted on our website with its effective date.

Stakt Health

Privacy questions: support@stakthealth.com

This notice supplements, and does not replace, any formal Notice of Privacy Practices that a healthcare provider or pharmacy is required to provide.