This Health Data Privacy Notice describes how Kosmos Clinic, Inc. and Kosmos Medical Group PLLC (together “Kosmos” or “us” or “our” or “we”) treats certain health data collected or provided in connection with a member’s (“you” or “your” or “user”) use of Kosmos’ website, www.kosmosmedicalgroup.com, and any other website, social media pages, or other digital medium owned or operated by Kosmos. This Health Data Privacy Notice also applies to any health data collected, stored, or used by us, such as information you provide us through the above mediums, by email, mail, or telephonic communications (collectively, the “Website”). Except for when an individual provides us with a name and email address, we do not collect any additional health information of non-members.

The information provided in this Health Data Privacy Notice is designed to inform you of what consumer health data we collect, why we collect such information, how we use the information we collect, and the choices we offer, including how to access and update information. 

This Health Data Privacy Notice applies to our services in Washington, whether you are inquiring about our services or you are a member.

Please read this Privacy Notice carefully.

Our Collection and Use of Health Data

We may collect the following categories of health data from you or from a family member, with your permission:

• Individual health conditions, treatment, diseases, or diagnosis.

• Social, psychological, behavioral, and medical interventions.

• Health-related surgeries or procedures.

• Use or purchase of prescribed medication.

• Bodily functions, vital signs, symptoms, or measurements of consumer health data.

• Diagnoses or diagnostic testing, treatment, or medication.

• Gender-affirming care information.

• Reproductive or sexual health information.

• Biometric data.

• Genetic data.

• Data that identifies a consumer seeking health care services or members, such as your name, contact information, and payment information.

We may collect health data in order to deliver services, to perform contractual obligations, to comply with legal obligations, to help identify and prevent fraud, and for other purposes as described in this Health Data Privacy Notice.

We will collect and maintain health data about you in a health record to provide services to you and contact you regarding your health needs. We may also communicate with you about news that may be of interest to you and promotional offers. We note that at this time, we are not a Covered Entity or a Business Associate of a Covered Entity as such words are defined under the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (“HIPAA”) and accordingly, this health and wellness data is not Protected Health Information, as defined in HIPAA.

You can choose not to provide certain information to us but it may delay or prevent us from providing our services to you.

Categories of Health Data Shared

We do not share heath data with any third parties or affiliates, as those terms are defined under Washington’s My Health My Data Act. We will disclose health data with our patient portal vendor and our payment processor to provide you with requested services.

Categories of Third Parties That May Receive Your Health Data

In order to provide the services that you have requested, we may disclose Health Data to:

• Our service providers and vendors, such as payment processors, website hosts, legal counsel, and various customer, tech, and operational support.

• Financial and legal institutions.

• Law enforcement agencies, regulatory bodies, courts, or other public authorities, to comply with our legal and regulatory obligations, to respond to requests from governmental authorities, to protect our rights, to defend against legal claims, or as otherwise required by law.

• Third parties with whom you have granted consent for us to share your health data, such as another health care provider.

Your Rights

 You have the following rights:

• You have the right to confirm whether we are collecting, sharing, or selling your health data.

• You have the right to request access to your health data in our possession.

• You have the right to withdraw your consent to our collection or sharing of your health data.

• You have the right to request we delete your health data in our possession.

You may exercise your rights by sending a request to info@kosmosmedicalgroup.com. If we inform you that we decline to take action regarding your request, you have the right to appeal our decision by contacting us at info@kosmosmedicalgroup.com within 45 days of receiving our decision.

The Effective Date of this Health Data Privacy Notice is July 2024.