Notice of Privacy Practices
This Notice is effective as of January 1, 2025.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Your Privacy
Hooray Health, LLC (“Hooray Health,” “we,” “us,” or “our”) is committed to protecting the privacy of your Protected Health Information (PHI). We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and follow the terms of this Notice currently in effect.
This Notice applies to all PHI created, received, maintained, or transmitted by Hooray Health in our role as a Business Associate providing administrative services for health insurance plans and benefits.
Who We Are
Hooray Health is a third-party administrator that provides benefit enrollment, administration, and support services for health insurance plans. We work with insurance carriers (including Zurich American Insurance Company and National Guardian Life Insurance Company), employers, and third-party administrators such as WebTPA to facilitate your health benefits.
We are not medical service providers. We do not provide healthcare, diagnose conditions, or make medical decisions. We serve as a Business Associate under HIPAA, which means we handle PHI on behalf of insurance carriers and employers (plan sponsors) who are the actual owners of your health information.
What is Protected Health Information (PHI)?
PHI is information about you that may be used to identify you and that relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for healthcare. This may include your enrollment information, claims data, eligibility information, coverage details, and communications regarding your health benefits.
How We May Use and Disclose Your PHI
We may use and disclose your PHI for the following purposes:
For Treatment
We do not provide treatment. However, we may coordinate with healthcare providers, insurance carriers, and administrators such as WebTPA to facilitate your care and ensure proper processing of your health benefits.
For Payment
We may use and disclose your PHI to process enrollment, determine eligibility, coordinate benefits, and facilitate claims processing through our third-party administrator WebTPA. We may also collect payment information from you over the phone, which is securely stored in encrypted format within our platform.
To Plan Sponsors (Employers)
We may disclose your PHI to your employer (plan sponsor) only in aggregate or de-identified form for purposes of evaluating the performance of self-funded health plans. We do not share individual health information or claims details with employers.
For Healthcare Operations
We may use and disclose your PHI for plan administration activities, quality improvement, business planning, customer service, and other operational functions necessary to administer your health benefits. We do not perform underwriting activities—these are conducted by the insurance carriers.
To Business Associates
We may disclose your PHI to other business associates who perform services on our behalf, such as WebTPA for claims administration. We require these business associates to protect your PHI through written agreements.
As Required by Law
We will disclose your PHI when required by federal, state, or local law, including to the Department of Health and Human Services for compliance investigations.
Other Permitted Uses and Disclosures
We may use or disclose your PHI without your written authorization for the following purposes:
Public Health Activities
We may disclose PHI to public health authorities for activities such as preventing or controlling disease, injury, or disability.
Health Oversight Activities
We may disclose PHI to health oversight agencies for audits, investigations, inspections, or licensing purposes.
Legal Proceedings
We may disclose PHI in response to a court order, subpoena, or other lawful process.
Law Enforcement
We may disclose PHI to law enforcement officials for law enforcement purposes as required or permitted by law.
Your Rights Regarding Your PHI
Right to Access Your PHI
You have the right to inspect and obtain a copy of your PHI maintained by the insurance carriers or WebTPA. To access your PHI, please contact WebTPA directly or the applicable insurance carrier, as they maintain the official records. You may also contact our Privacy Officer for assistance. We will respond to your request within 30 days as required by law.
Right to Request Amendment
You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. However, because we do not own your health data, any amendments must be made through the administrator (WebTPA) or the insurance carrier who maintains the official records. We can assist you in submitting your amendment request to the appropriate entity.
Right to an Accounting of Disclosures
You have the right to request an accounting of certain disclosures of your PHI made by us during the six years prior to your request. To request an accounting, submit a written request to our Privacy Officer.
Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request except in certain limited circumstances. To request a restriction, submit a written request to our Privacy Officer.
Right to Request Confidential Communications
You have the right to request that we communicate with you about your PHI by alternative means or at alternative locations. We will accommodate reasonable requests.
Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. Contact our Privacy Officer to request a paper copy.
Choose Someone to Act for You
If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your information. We will verify the person’s authority before we act.
Our Responsibilities
We are required by law to maintain the privacy and security of your PHI, provide you with this Notice of our legal duties and privacy practices, follow the terms of the Notice currently in effect, and notify you if we are unable to accommodate a requested restriction or confidential communication.
We reserve the right to change the terms of this Notice and to make new provisions effective for all PHI we maintain. If we make material changes to this Notice, we will provide you with a revised Notice.
We will provide a paper copy of this Notice upon request.
Your Choices
For certain information, you can tell us your preferences about what we share. If you have a clear preference for how we share your information in the situations below, tell us and we will follow your instructions.
In these cases, you have the right and choice to ask us to:
- Share information with your family, close friends, or others involved in payment for your care
- Share information in a disaster relief situation
- Contact you for fundraising efforts
If you are not able to tell us your preference, for example if you are unconscious, we may share information if we believe it is in your best interest. We may also share information when needed to lessen a serious and imminent threat to health or safety.
In these cases we do not share your information unless you give us written permission:
- Marketing communications that require authorization
- Sale of your information
Breach Notification
In the event of a breach of your unsecured PHI, we will notify you in accordance with federal law. Hooray Health handles breach notifications and follows all policies required by contracted vendors, carriers, and applicable regulations.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with Hooray Health or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.
To file a complaint with Hooray Health, contact our Privacy Officer using the information provided below.
Contact Information
For more information about this Notice or to exercise any of your rights described above, please contact:
Privacy Officer
Hooray Health, LLC
5015 Addison Circle Suite 508
Addison, TX 75001
Email: privacy@hoorayhealth.com
Phone: (469) 619-3956
This Notice is effective as of January 1, 2025.