HIPAA Notice

This notice is for patients whose clinic uses OMNIBIO. OMNIBIO LLC, a Wyoming limited liability company (OMNIBIO), provides ordering technology to clinics. This notice explains, in plain language, how OMNIBIO handles your health information for your clinic. It is not your clinic's Notice of Privacy Practices and does not replace it.

OMNIBIO as your clinic's business associate

Your clinic is a healthcare provider covered by HIPAA, the federal health privacy law. When your clinic uses OMNIBIO to invite you, to choose the items you may order, to prepare a cart for you, to place an order for you or to receive your order requests, OMNIBIO creates, receives, keeps or sends protected health information (PHI) about you on your clinic's behalf. In that role OMNIBIO is your clinic's business associate.

Before OMNIBIO handles PHI for a clinic, the clinic and OMNIBIO accept a business associate agreement (BAA). The BAA limits what OMNIBIO may do with your information and requires OMNIBIO to protect it. You can read it: Business Associate Agreement.

OMNIBIO is not your doctor and not a pharmacy. It does not examine you, diagnose, prescribe, choose your treatment or dispense medication. Those decisions belong to your clinic, its clinicians and the pharmacy that fills a prescription.

How OMNIBIO handles protected health information

What OMNIBIO keeps for your clinic. Your name and email address; your phone number and delivery address if you give them; the account you sign in with; the items your clinic has approved for you or put in a cart for you; your order requests, their prices and their status; and a record of who viewed or changed your information, and when.

What OMNIBIO uses it for. Only the services your clinic uses OMNIBIO for: your account and sign-in, your invitation, your carts and order requests, delivery, messages about your account and orders, support, security, and the records the law requires. Each use is limited to the minimum necessary.

What OMNIBIO never does with it. OMNIBIO does not sell your information, use it for advertising or marketing, send it to advertising trackers, submit it to AI services or use it to train AI models, or combine it with other clinics' information for its own purposes.

Who else may see it. Your clinic. Companies that help OMNIBIO run the platform, such as hosting, email delivery and text messaging, receive only what their task needs, under written agreements that give your information the same protection as the BAA. A pharmacy, payment service or shipping company involved in an order receives only what that order needs, under the agreements and laws that apply to it. OMNIBIO may also disclose information when the law requires it.

Text messages. OMNIBIO texts you only after you reply YES to a message asking you to confirm your number. Reply STOP to any message to stop them, or HELP for help.

How it is protected. Your information travels only over encrypted connections. Clinic staff sign in with a sign-in link and a second step from an authenticator app, and see only their own clinic's patients. Every view and change of patient information is recorded in an audit log.

If something goes wrong. If OMNIBIO discovers a breach of your unsecured PHI, it tells your clinic without unreasonable delay, and your clinic notifies you as the law requires.

When your clinic stops using OMNIBIO. OMNIBIO returns your clinic's PHI to the clinic or destroys it, as the BAA requires. Anything the law requires OMNIBIO to keep stays protected for as long as it is kept.

Your clinic's Notice of Privacy Practices

Your clinic must give you its own Notice of Privacy Practices. That notice explains how your clinic uses and shares your health information, and your rights under HIPAA: to see and get a copy of your records, to ask for a correction, to get a list of certain disclosures, to ask for limits on use or for confidential communications, and to complain to your clinic or to the U.S. Department of Health and Human Services without being penalised for it.

Ask your clinic for a copy of its notice. OMNIBIO does not write or publish it for the clinic.

Contact

For a request about your health information, contact your clinic first: it decides requests about your records. If you write to OMNIBIO instead, OMNIBIO passes your request to your clinic and helps the clinic answer it.

To reach OMNIBIO, email support@omnibio.com or write to OMNIBIO LLC, Attention: Privacy, 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801. Please do not send medical records or other health details by email: say who you are and what you need, and OMNIBIO will arrange a secure way to continue. In an emergency, call 911 or your local emergency number.

OMNIBIO's own information practices are described in its Privacy Policy.