HIPAA Privacy Policy

Last Updated: 23 August 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who This Notice Applies To

Science & Company ("Science & Co") is a technology platform. Science & Co is not itself a covered entity under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA"). Science & Co does not practise medicine or pharmacy and does not provide healthcare services.

The independent, licensed healthcare providers and the professional entities you access through the Services, together with the pharmacies that dispense your medication, are covered entities under HIPAA. This notice describes how those providers may use and disclose your protected health information, and the rights you have in relation to it. Where Science & Co handles protected health information on behalf of those providers, it does so as a business associate and is bound by a business associate agreement.

Information that is not protected health information, such as information you give us when browsing the Website or subscribing to marketing, is governed by our Privacy Policy rather than by this notice.

What Protected Health Information Is

Protected health information, or "PHI", is individually identifiable information relating to your past, present or future physical or mental health, the healthcare you receive, or the payment for that healthcare. It includes your intake responses, the clinical notes made by your provider, your prescriptions, and records of the medication dispensed to you.

How Your Health Information May Be Used and Disclosed

Your providers may use and disclose your PHI for the following purposes without your written authorisation.

• Treatment. To provide, coordinate and manage your care, including sharing information with the pharmacy that fills your prescription, with other clinicians involved in your care, and with laboratories where testing is ordered.
• Payment. To obtain payment for the services and products provided to you, including processing your payment method and resolving billing questions. The Services are provided on a cash pay basis and claims are not submitted to any federal, state or private payor healthcare programme.
• Healthcare operations. To support quality assessment and improvement, clinical review, training, licensing, business management and general administrative activities.
• As required by law. Where federal, state or local law requires the use or disclosure.
• Public health and safety. To prevent or control disease, injury or disability, to report adverse events or product defects to the Food and Drug Administration, to report suspected abuse or neglect, or to prevent a serious and imminent threat to the health or safety of you or others.
• Health oversight, judicial and law enforcement. To health oversight agencies for audits, investigations and inspections, in response to a court order, subpoena or other lawful process, and to law enforcement in the limited circumstances permitted by law.
• Research, coroners, organ donation and workers compensation. In the limited circumstances permitted by HIPAA.

Uses and Disclosures That Require Your Written Authorisation

Your written authorisation is required before your PHI may be used or disclosed for:

• most marketing purposes;
• any sale of your PHI;
• most uses and disclosures of psychotherapy notes; and
• any other purpose not described in this notice.

You may revoke an authorisation in writing at any time. Revocation does not affect any use or disclosure already made in reliance on it.

Your Rights Regarding Your Health Information

• Right to inspect and copy. You may request access to and a copy of your health records, including an electronic copy where the records are held electronically.
• Right to amend. You may request an amendment to your health records if you believe the information is incorrect or incomplete. Your provider may deny the request in certain circumstances and will explain why in writing.
• Right to an accounting of disclosures. You may request a list of certain disclosures of your PHI made in the six years before your request.
• Right to request restrictions. You may request a restriction on the use or disclosure of your PHI for treatment, payment or healthcare operations. Your provider is not required to agree to a requested restriction, except that a provider must agree to a request to restrict disclosure to a health plan where you have paid for the item or service in full out of pocket.
• Right to confidential communications. You may request that communications about your health reach you by a particular method or at a particular address. Reasonable requests will be accommodated.
• Right to a paper copy of this notice. You may request a paper copy at any time, even if you have agreed to receive it electronically.
• Right to be notified of a breach. You will be notified if a breach occurs that may have compromised the privacy or security of your PHI.

To exercise any of these rights, contact us at support@science.co and your request will be directed to the appropriate provider or professional entity.

Our Responsibilities

Your providers are required by law to maintain the privacy and security of your PHI, to give you notice of their legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

Your providers will not use or share your information other than as described in this notice unless you tell them in writing that they may. If you give permission, you may change your mind at any time by telling them in writing.

Changes to This Notice

This notice may be changed at any time. Any changed notice will apply to health information already held as well as to information created or received afterwards. The current version will always be posted on this page, with the date it was last revised shown at the top.

Complaints

If you believe your privacy rights have been violated, you may file a complaint by contacting us at support@science.co or on 1 (844) 587-5747. You may also file a complaint with the Secretary of the United States Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue SW, Washington, D.C. 20201, by calling 1 (877) 696-6775, or online at www.hhs.gov/ocr/privacy/hipaa/complaints. You will not be penalised or retaliated against for filing a complaint.

Contact

Science & Co
Attn: Privacy Officer
Mailing address to be placed.
Email: support@science.co
Telephone: 1 (844) 587-5747