Privacy Policy

We use administrative, technical, and physical safeguards to protect personal data. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

We retain personal information only as long as necessary for the purposes described here or as required by law. Once we no longer have a legitimate business need to process your personal information, we will delete or anonymize it. If this cannot be done immediately, for instance if your information is stored in backup archives. We will securely retain it and prevent any further processing until deletion becomes possible.

If you access our Services from outside the United States, your data may be transferred to and processed in the U.S. or other jurisdictions that may not provide equivalent protection. We implement appropriate safeguards (such as Standard Contractual Clauses) for such transfers when required.

We are based in the United States and may engage service providers located in other countries. As a result, your personal information may be transferred to the United States or to jurisdictions whose privacy laws may offer less protection than those in your state, province, or country.

Our Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from them outside of legitimate healthcare contexts. If electronic protected health information (ePHI) about a minor is processed through our Services, it is handled solely as permitted under applicable healthcare privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA). If you believe a child has provided personal information to us outside of these lawful contexts, please contact us immediately so we can take appropriate action.

We may update this Privacy Policy periodically. The “Effective Date” at the top reflects the most recent version. Any significant updates will be communicated through our website or by direct notice where required.

If you have questions or concerns about this Privacy Policy, please contact:

Manta Health‍

Attn: Privacy Officer

Email: privacy@manta.health

When Manta Health processes or maintains Protected Health Information (PHI) on behalf of healthcare providers, payers, or other covered entities, such processing is governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and our Business Associate Agreements (BAAs).

Our HIPAA Responsibilities

• We maintain the confidentiality, integrity, and availability of PHI in compliance with the HIPAA Privacy, Security, and Breach Notification Rules.
  
• We use PHI solely to perform services described in our agreements and may not use or disclose PHI for any other purpose without authorization.
  
• We implement administrative, technical, and physical safeguards to prevent unauthorized access or disclosure.
  
• We promptly notify our Covered Entity partners of any breach or impermissible use of PHI as required by law.
  

Your Rights Under HIPAA

If you are a patient of a healthcare provider that uses Manta Health’s services, your rights to access, amend, or receive an accounting of your PHI are managed directly by your healthcare provider.

Manta Health does not directly provide or modify patient records without authorization from the relevant Covered Entity.

Questions About HIPAA

If you have questions about how PHI is handled or wish to exercise rights related to your health information, please contact your healthcare provider or email our HIPAA Privacy Officer at: compliance@manta.health

‍