Already have an account?

PRIVACY POLICY
 

Last Updated: July 2024 

SOS ABUNDABOX, LLC (DBA “ABUNDABOX”) PRIVACY POLICY 

HOW WE PROTECT YOUR PRIVACY 

OVERVIEW  

SOS AbundaBox, LLC. (“AbundaBox,” “we,” or “us”) owns and operates the website located at www.abundabox.com and a related mobile application (collectively, the “Platform”). Your access and use of any part of the Platform, including its content (“Content”), any products or services provided by AbundaBox, and any affiliated website, software or application owned or operated by AbundaBox (collectively referred to as the “Service”) are subject to this Privacy Policy. This Privacy Policy also applies to personal data you may provide to AbundaBox via telephone, email, regular mail, social media, or texting. 

We respect the privacy of every visitor to our website. Your privacy is a priority, and we go to great lengths to protect it. This Privacy Policy specifically describes what information we collect about you, how we collect it, how we use it, with whom we may share it, and what choices you have regarding it. AbundaBox will collect personal information from you directly when you interact with our Site, contact us, use our services, create an account, subscribe, share reviews, sign up to receive offers or emails from us, complete surveys, or request our services. Please note that AbundaBox’s practices with respect to data collected and used by it in connection with the Site and AbundaBox products and services available or enabled via the Site are governed by this Privacy Policy (each as amended from time to time), and supersedes prior versions of our terms of use and/or privacy policy, including those which preceding versions which may have been in effect at the time the data was collected. This Privacy Policy does not govern privacy practices associated with offline activities and websites other than the Site, or products and services not available or enabled via the Site. For your convenience, this site may contain links, or addresses, that you can simply click to open other useful sites where we do not control the content or privacy policy. Carefully review the approach these sites take to your privacy before you use them or provide them with information. We assume no liability for any unauthorized actions of third parties or accidental transmission errors that may disclose information about you, and AbundaBox is not responsible for these other sites’ privacy practices, which may be different from AbundaBox’s privacy practices. 

We encourage you to become familiar with the terms and conditions of both this Privacy Policy and the Terms of Use. Please note, additional privacy policies and notices may apply and be provided depending on the nature of your interaction with AbundaBox.  Your company’s agreement with AbundaBox may also impact the processing of information by us which is provided by your company or in your activities with us or this Site pursuant to your company’s agreement or requested transaction with us. 

As part of the Service, AbundaBox contracts with approved third-party vendors, providers, and potentially other medical groups in the future (collectively referred to as the “Medical Groups”), to provide online telehealth medical consultations and secure messaging between Medical Group’s providers and patients. Accordingly, our Service includes the professional medical services provided to you by the Medical Groups and their providers, and your access to and use of these Services are subject to this Privacy Policy. All references to “we” or “us” in this Privacy Policy also refers to the Medical Groups and their providers.  

If you are using the Service on behalf of an individual other than yourself, you represent that you are legally authorized by such individual to act on such individual’s behalf and that such individual accepts and acknowledges the practices and policies outlined in this Privacy Policy. 
 
By creating, registering, or logging into an account through the Service, or otherwise accessing or using the Service, you are automatically accepting and acknowledging the most recent version of this Privacy Policy. If we make any changes to our Privacy Policy, we will post the revised Privacy Policy and update the “Last updated” date of the Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use this Website. Your continued use of the Website following the posting of changes to these terms will mean that you accept those changes. 
 
This Policy is written in the English language. We do not guarantee the accuracy of any translated versions of this Policy. To the extent that any translated versions of this Policy conflict with the English language version, the English language version of this Policy shall control. 

  

No Use Outside of the US and US Territories Permitted 

  

The Service may not be used outside the US. This Privacy Policy, and our collection, use, and disclosure of your information, is governed by U.S. law. 
 

No Use by Minors Permitted 
 

AbundaBox understands the importance of protecting children’s privacy in the interactive online world. Our Site is intended for use by individuals who are at least 18 years of age, or an older age as may be required by applicable state laws in the jurisdiction in which an individual utilizes the Service. It is not our policy to intentionally collect or maintain information about anyone under the age of 18. No one under the age of 18 should submit any Personal Information to AbundaBox and/or the Site. If we learn that we have collected personal information through the Platform from a minor and not their parent or legal guardian, we may remove that information from the PlatformIf you are a minor (or a parent or legal guardian of a minor), you may ask us to remove personal information about the minor by submitting a Request for Removal of Minor Information to either of the following: 

By mail: AbundaBox Health, Inc., Attn: Privacy Officer, 10394 W Chatfield Ave, Suite 108, Littleton, CO 80127, United States, with a subject line of “Removal of Minor Information”. If you send by mail, please send by U.S. Certified Mail, Return Receipt Requested, to allow for confirmation of mailing, delivery, and tracking. 

For each Request for Removal of Minor Information, please state “Removal of Minor Information” in the email or letter subject line, and clearly state the following in the body of the request: 

The nature of your request 

The identity of the information to be removed 

The location of the information on the Platform (e.g. by providing the URL) 

Your name, street address, city, state, zip code and email address, and whether you prefer to receive a response to your request by mail or email. 

We will not accept any Request for Removal of Minor Information via telephone or fax. AbundaBox is not responsible for failing to comply with any Request for Removal of Minor Information that is incomplete, incorrectly labeled, or incorrectly sent. 
 
Please note that we are not required to erase or otherwise eliminate, or enable erasure, or elimination of such information in certain circumstances, such as, for example, when an international, federal, state, or local law, rule or regulation requires AbundaBox to maintain the information; when AbundaBox maintains the information on behalf of your Providers (as defined in our Terms and Conditions) as part of your electronic medical record; when the information is stored on or posted to the Site by a third party other than you (including any information posted by you that was stored, republished or reposted by the third party); when AbundaBox anonymizes the information, so that you cannot be individually identified; when you do not follow these instructions for requesting the removal of the information; and when you have received compensation or other consideration for providing the information. 
 
The section is a description of AbundaBox’s voluntary practices concerning the unintended collection of personal information through the Service from minors, and is not intended to be an admission that AbundaBox is subject to the Children’s Online Privacy Protection Act, the Federal Trade Commission’s Children’s Online Privacy Protection Rule(s), or any similar international, federal, state, or local laws, rules, or regulations. 

 

ACKNOWLEDGEMENT  

Please read this Privacy Policy carefully. Please note that our practices and your choices may vary by region.  

BY USING OUR SITES, YOU REPRESENT THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY. 

 

What Information We Collect 
 
We collect any information you provide when you use the Service, including, but not limited to: 

Personally identifying information such as your name and contact data such as your e-mail address, phone number, and physical addresses provided through your enrollment form 

Your login and password and other account (“Account”) registration details 

Demographic data (such as your gender, date of birth and zip code) 

Computer, mobile device and/or browser information (e.g., IP address, mobile device ID information, operating system, connection speed, bandwidth, browser type, referring/exist web pages, web page requests, cookie information, hardware attributes, software attributes) 

Shipping information 

Electronic signature 

Photographic or video images submitted for identification or non-diagnosis or treatment purposes 

Information about third parties that you refer to us (e.g., name, email, and/or other contact information, relationship) 

Statements or content (e.g., comments, videos, photographs, images) and information about such statements or content, which you submit or publish on or through the Service or which are accessed via your public or linked social media pages (e.g., Facebook, Twitter, Instagram) 

Any other information you provide when you contact or communicate with us  

 

We also collect information on behalf of your providers, which may include, but is not limited to: 

Health and medical data you submit for diagnosis or treatment purposes, including information in any questionnaires or surveys you complete for these purposes 

Information about previous doctors or other healthcare providers you visited 

Date of visit 

Images or videos you share for diagnosis or treatment purposes 

Communications with providers 

 

How Information Is Collected 
 
AbundaBox might collect information directly from you when you use the Service; when you register with or subscribe to the Service or obtain any products or services available through the Service; when you “sign in,” “log in,” or the like to the Service; when you allow the Service to access, upload, download, import or export content, or otherwise interact with your computer, mobile device, or any other device to visit, access or use the Service or online accounts with third-party websites, networks, platforms, servers or applications (e.g., your online social media accounts, your cloud drives and servers, your mobile device service provider); or whenever AbundaBox asks you for such information, for example, when you answer an online survey or questionnaire. In addition, if you or a third party sends AbundaBox a comment, message or other communication (for example email, letter, fax, phone call, or voice message) about you or your activities on or through the Site and/or the App, then AbundaBox may collect any information provided therein or therewith. 
 
In addition to the information we collect directly from you, we may also collect certain information from providers who provide treatment or other services to you in connection with the Service. This information may include, but is not limited to, diagnoses, treatment plans (including prescription details) and notes. 
 
We may also receive information from third parties that provide you with treatment, laboratory care or prescription medication, which may include, for example, your prescription history, insurance policy, insurance eligibility and coverage. 

 

Use of Information 

 

AbundaBox might use various tracking, data aggregation and/or data analysis technologies, including, for example, the following: 

Cookies, which are small data files (e.g., text files) stored on the browser or device you use to view a website or message. They may help store user preferences and activity and may allow a website to recognize a particular browser or device. There are several types of cookies, including, for example, browser cookies, session cookies, and persistent cookies. Cookies may record information you access on one page of a website to simplify subsequent interaction with that website, or to help streamline your transactions on related pages of that website. Most major browsers are set up so that they will initially accept cookies, but you might be able to adjust your browser’s or device’s preferences to issue you an alert when a cookie is downloaded, or to block, reject, disable, delete, or manage the use of some or all cookies on your browser or device. Cookies can be set by the website owner (i.e., us), or they can be set by third parties (e.g., Facebook, Google, etc.). Cookies are used to help us speed up your future activities or to improve your experience by remembering the information that you have already provided to us. Third party cookies may also be used to enable analytics (e.g. Google Analytics) or advertising functionality (e.g., ad re-targeting on third-party websites) that enables more customized services and advertising by tracking your interaction with our Service and collecting information about how you use the Service. 

Flash cookies, which are cookies written using Adobe Flash, and which may be permanently stored on your device. Like regular cookies, Flash cookies may help store user preferences and activity, and may allow a website to recognize a particular browser or device. Flash cookies are not managed by the same browser settings that are used for regular cookies. 

Web beacons, which are pieces of code embedded in a website or email to monitor your activity on the website or your opening of the email, and which can pass along information such as the IP address of the computer or device you use to view the website or open the email, the URL page on which the web beacon is located, the type of browser that was used to access the website, and previously set cookie values. Web beacons are sometimes used to collect advertising data, such as counting page views, promotion views or advertising responses. Disabling your computer’s, device’s or browser’s cookies may prevent some web beacons from tracking or recording certain information about your activities. 

Scripts, which are pieces of code embedded in a website to define how the website behaves in response to certain key or click requests sent by the user. Scripts are sometimes used to collect information about the user’s interactions with the website, such as the links the user clicks on. Scripts are often times temporarily downloaded to the user’s computer or device from the website server, active only while the user is connected to the Site and/or the App, and deactivated or deleted when the user disconnects from the website. 

Analytic tools and services, which are sometimes offered by third parties, and which track, measure and/or generate information about a website’s or program’s traffic, sales, audience and similar information, and which may be used for various reasons, such as, for example, statistical research, marketing research, and content ratings research, and conversion tracking. 

Advertising services: We may use data about how you browse and shop to show you ads for us or our advertising partners that are relevant to your interests. We may use cookies and other information to provide relevant interest-based advertising to you, and ad networks to which we belong may use your browsing activity across participating websites to show you interest-based advertisements on those websites. Interest-based ads are ads presented to you based on your browsing behavior to provide you with ads more tailored to your interests. These interest-based ads may be presented to you while you are browsing the Platform or third-party sites not owned by us.  

 

Do Not Track Signals, Cookies, and Other Technologies 

We may use cookies, web beacons, pixel tags, mobile analytics software, log files, or other technologies to collect certain information about your online activity and interactions with our emails, online and mobile advertisements, and to allow us to keep track of analytics and certain statistical information that enables AbundaBox to improve our services and provide you with more relevant content and advertising offered by AbundaBox, or through or linked from our services. You may disallow receiving cookies at any time through your web browser, but some features of the Service, such as account logins, may not work properly or you may not be able to use the Site at all. Similarly, you may set your mobile device to refuse to provide certain information, but certain features of the Site may not work without such information. 

It is not our intention to use cookies to retrieve information that is unrelated to our Service or your interaction with our Site. 

At this time, we do not respond to browser “do not track” or “DNT” signals. 

 

Examples of analytic tools and services and advertising services we use include: 

Meta Platforms. We use Meta platforms, such as Facebook and Instagram) (collectively called, “Meta”), for web analytics and advertising services. These services allow us to keep track of what users do after they see or click on a Meta advertisement, keep track of users who access our Platform or advertisements from different devices, and better provide advertisements to our target audiences. The data from Meta is also saved and processed by Meta. Meta can connect this data with your Facebook or Instagram account and use it for its own and others advertising purposes, in accordance with Meta’s Data Policy which can be AbundaBox at, https://www.facebook.com/about/privacy/Please click here if you would like to withdraw your consent for use of your data with Meta https://www.facebook.com/settings/?tab=ads#_=_. 

  

Google Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to collect certain information relating to your use of our Platform. Google Analytics uses cookies to help our Platform analyze how users use our Platform. You can find out more about how Google uses data by visiting “How Google Uses Data When You Use Our Partners’ Sites or Apps” located at www.google.com/policies/privacy/partners/. For more information, please visit Google and pages that describe Google Analytics, such as www.google.com/analytics/learn/privacy.html. 

  

Other Third-Party Tools. We use other third-party tools that allow us to track the performance of our Platform. These tools provide us with information about errors, app and website performance, and other technical details we may use to improve our Platform and/or our Service. 

         

Please be advised that if you choose to block, reject, disable, delete or change the management settings for any or all of the aforementioned technologies and/or other tracking, data aggregation and data analysis technologies, then certain areas of the Platform might not function properly. 
 
By visiting, accessing or using the Service, you acknowledge and agree in each instance that you are giving AbundaBox permission to monitor or otherwise track your activities on the Service, and that AbundaBox may use the technologies listed above, as well as other tracking, data aggregation and data analysis technologies. 
 

 

In addition, in connection with providing the Service, we and our affiliates and service providers may use your information, for a number of purposes, including, but not limited to: 

  

Verifying your identity; 

Confirming your location; 

Administering your account; 

Fulfilling your requests; 

Facilitating your use of the Service and/or products or services offered through the Service; 

Communicating with you by letter, email, text, telephone or other forms of communication; 

Providing you with information about the Service; 

Providing you with customer support; 

Providing you with information about third-party businesses, products and services; 

Developing, testing or improving the Service and content, features and/or products or services offered via the Service; 

Identifying or creating new products, services, marketing and/or promotions for AbundaBox or the Service; 

Promoting and marketing AbundaBox, the Service, and the products and/or services offered via the Service; 

Improving user experiences with the Service; 

Analyzing traffic to and through Service; 

Analyzing user behavior and activity on or through the Service; 

Conducting research and measurement activities for purposes of product and service research and development, advertising claim substantiation, market research, and other activities related to AbundaBox, the Service or products and services offered via the Service; 

Monitoring the activities of you and others on or through the Service; 

Placing and tracking orders for products or services on your behalf; 

Protecting or enforcing AbundaBox‘s rights and properties; 

Protecting or enforcing the rights and properties of others (which may include you); 

When required by applicable law, court order or other governmental authority (for example, in response to a subpoena or other legal process); or AbundaBox believes in good faith that such use is otherwise necessary or advisable (for example, to investigate, prevent, or take legal action against someone who may be causing injury to, interfering with, or threatening the rights, obligations or properties of AbundaBox, a user of the Service, which may include you, or anyone else who may be harmed by such activities or to further AbundaBox‘s legitimate business interests). 

  

Disclosure of Information 
 
We may disclose your information to third parties in connection with the provision of our Service or as otherwise permitted or required by law. For example, we may disclose your information to: 

  

Our third-party and service providers (collectively “vendors”) to assist us with the activities outlined in the “Use of Information” section above; 

Our vendors that provide services to enable us to provide the Service, such as the hosting of the Service, data analysis, IT services and infrastructure, customer service, e-mail delivery, and other similar services; 

Our vendors that provide services to enable us to run our business and administrative operations, such as legal and financial advisory services, auditing services, analytics and similar services; 

Our vendors that provide services to enable us to promote and advertise the Service and the products and/or services offered via the Service, such as ad platforms or ad-retargeting services, as well as comply with contact removal requests or requirements, such as mailing list removal services, do not call registries, and similar services; 

To pharmacies and providers to enable them to provide services to you via the Service and to collect payment on their behalf; 

Our vendors as we believe necessary or appropriate to comply with applicable laws; and 

Third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer, liquidation or other disposition of all or any portion of our business, assets or stock with such third party. 

AbundaBox may provide your personal information to a successor in the event of a merger, divestiture, restructuring, reorganization, purchase, dissolution or other sale or transfer of some or all of AbundaBox’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information maintained by the Site is among the assets transferred. 

We may de-identify your information and disclose such de-identified information for any purpose not prohibited by applicable law. 
 
Data Retention 
 
We may retain your information for as long as we believe necessary; as long as necessary to comply with our legal obligations, resolve disputes and/or enforce our agreements; and/or as long as needed to provide you with the products and/or services of the Service. We may dispose of or delete any such information at any time, except as set forth in any other agreement or document executed by us or as required by law. 
 
Third Parties 
 
We are not responsible for the privacy practices of any third parties, including, without limitation, the manufacturer of your mobile device, and any other third-party mobile application or website to which our Service may contain a link. These third parties may at times gather information from or about you. We do not control and are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of each website and application you visit and use.  
 
Consumer Privacy Rights 

Residents of certain states may have additional personal information rights and choices. To learn more about any rights that may be applicable to you as a resident of one of these states and how to exercise those rights, please review the list of Enacted State Comprehensive Privacy Laws here. We will not discriminate against you for exercising your privacy rights. 

 

Security 

AbundaBox understands that storing your data in a secure manner is essential. AbundaBox stores Personal Information and other data using industry-standard physical, technical, and administrative safeguards to secure data against foreseeable risks, such as unauthorized use, access, disclosure, destruction or modification. Please note, however, that while AbundaBox has endeavored to create a secure and reliable website for users, the confidentiality of any communication or material transmitted to/from the Website or via e-mail cannot be guaranteed. 

The security of your AbundaBox account relies on your protection of your user profile information. You are responsible for maintaining the security of your user profile information, including your password and for all activities that occur under your account. You may not share your password with anyone. If you believe someone else has obtained access to your password, please change it immediately by logging in to your account and report it immediately by using the “Contact” feature of our website or by contacting us via email. 

 

Changes to this Privacy Policy 

AbundaBox may supplement, amend, or otherwise modify this Privacy Policy at any time. And changes will be posted on the AbundaBox website and will be effective as of the “Last Updated” date. It is your responsibility to carefully review this Privacy Policy each time you visit, access or use the Service. 

 
 
Contacting Us 
 
If you have any questions about this Privacy Policy, please contact us by email at info@abundabox.com or by regular mail at: 
 
SOS AbundaBox, LLC 

10394 W Chatfield Ave, Suite 108 

Littleton, CO 80127, United States, 
Attn: Privacy Officer 
 
We will attempt to respond to your questions or concerns promptly after we receive them. 

 

 

HIPAA NOTICE OF PRIVACY PRACTICES 

 

NOTICE OF PRIVACY PRACTICES 

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. 

SOS AbundaBox, LLC and its Affiliated Covered Entities (collectively “AbundaBox”) are committed to protecting the privacy of your identifiable health information. This information is known as “protected health information” or “PHI.” Examples of documents that may contain your PHI include laboratory test orders, test results and invoices. 
 

Our Responsibilities 

AbundaBox is required by law to maintain the privacy of your PHI. We are also required to provide you with this Notice of our legal duties and privacy practices upon request. It describes our legal duties, privacy practices and your patient rights as determined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). We are required to follow the terms of this Notice currently in effect. We are required to notify affected individuals in the event of a breach involving PHI that is unsecured. PHI is stored electronically and is subject to electronic disclosure. This Notice does not apply to certain services that we perform, such as some drugs of abuse testing services and insurance applicant services. 
 

How We May Use or Disclose Your Health Information 

We use your PHI for treatment, payment, or healthcare operations purposes and for other purposes permitted or required by law. Not every use or disclosure is listed in this Notice, but all of our uses or disclosures of your PHI will fall into one of the categories listed below. 

We need your authorization to use or disclose your PHI for any purpose not covered by one of the categories below. With limited exceptions, we will not use or disclose psychotherapy notes, use or disclose your PHI for marketing purposes or sell your PHI unless you have signed an authorization. You may revoke any authorization you sign at any time. If you revoke your authorization, we will no longer use or disclose your PHI except to the extent we have already taken action based on your authorization. 

We may use and disclose your PHI for the following purposes: 
 

Treatment 

AbundaBox facilitates laboratory testing for physicians and other healthcare professionals through authorized and credentialed laboratory testing providers, that use your PHI in the testing process after you provide consent for care. We disclose your PHI to authorized healthcare professionals who order tests or need access to your test results for treatment purposes. We may use and disclose PHI to contact you about our services, such as to remind you of an appointment or to return your specimen collection kit, notify you of the status of your laboratory testing, or to tell you about our health-related products and services that may be of interest to you. Examples of other treatment-related purposes include disclosure to a pathologist to help interpret your test results or use of your PHI to contact you to obtain another specimen, if necessary. 

Payment 
 

AbundaBox may use and disclose your PHI for purposes of billing and payment. For example, we may disclose your PHI to health plans or other payers to determine whether you are enrolled with the payer or eligible for health benefits or to obtain payment for our services. If you are insured under another person’s health insurance policy (for example, parent, spouse, domestic partner or a former spouse), we may also send invoices to the subscriber whose policy covers your health services.  

Healthcare Operations 

AbundaBox may use and disclose your PHI for activities necessary to support our healthcare operations. This includes functions such as performing quality checks on our testing, improving quality of care, providing information about treatment alternatives or other health-related benefits and services, developing or maintaining and supporting computer systems, conducting audits and compliance programs, including fraud, waste and abuse investigations internal audits, arranging for legal services or developing reference ranges for our tests. It also includes, for example, the sale, transfer, merger, or consolidation of all or part of AbundaBox with another covered entity, or an entity that following such activity will become a covered entity and due diligence related to the transaction(s). 

Business Associates 

We may provide your PHI to other companies or individuals that need it to provide services to us. These other entities, known as “business associates,” are required to maintain the privacy and security of PHI. For example, our business associates may use your PHI to conduct billing, collections, imaging, courier, or record storage services on our behalf. 

Research 

We may use or disclose PHI for research projects, such as studying how to diagnose or treat particular diseases. These research projects must go through a special process that protects the confidentiality of your medical information. We may also use or disclose PHI about deceased patients to researchers if certain requirements are met. 

De-identified Information 
 
We may use your PHI to create “de-identified” information, which means that we remove information that can be used to identify you. There are specific rules under the law about what type of information needs to be removed before information is considered de-identified. Once information has been de-identified as required by law, it is no longer PHI and we may use it for any lawful purpose. We may de-identify your information and use, create and sell such de-identified information for research purposes, or any business or other purpose not prohibited by applicable law. Business Associate may de-identify PHI in accordance with the standards set forth 45 C.F.R. § 164.514(b) and may use or disclose such de-identified data for any reason not prohibited by applicable law if the de-identified health information meets the standard and implementation specifications for deidentification under 45 C.F.R. § 164.514(a). Business Associate shall own all right, title, and interest in and to the De-identified Data. De-identified Derived Data shall be owned by Licensor and may be combined with other de-identified customer data. De-identified Derived Data may be used for any purposes at Licensors discretion but will at a minimum be used to enhance the Platform and for machine learning to improve the model. 

 

Other Uses and Disclosures 

As permitted by HIPAA, we may disclose your PHI to: 

  • Social Services Agencies 

  • Public Health Authorities 

  • The Food and Drug Administration 

  • Health Oversight Agencies 

  • Military Command Authorities 

  • National Security and Intelligence Organizations 

  • Correctional Institutions 

  • Organ and Tissue Donation Organizations 

  • Coroners, Medical Examiners and Funeral Directors 

  • Workers Compensation Agents 

We may also disclose PHI to those assisting in disaster relief efforts so that family or friends can be notified about your condition, status, and location. 

Uses and Disclosures that Do Not Require Your Authorization  

We may use or disclose your PHI in the following situations without your authorization. These situations include the following uses and disclosures: as required by law; for public health purposes; for health care oversight purposes; in connection with legal proceedings; for law enforcement purposes; to coroners, funeral directors and organ donation agencies; for certain research purposes; for abuse or neglect reporting; pursuant to Food and Drug Administration requirements; for allegations of certain criminal activities; for certain military activity and national security purposes; for workers’ compensation reporting; relating to certain inmate reporting; and other required uses and disclosures. Under the law, we must make certain disclosures to you upon your request, and when required by the Secretary of the Department of Health and Human Services to investigate or determine our compliance with the requirements of HIPAA. State laws may further restrict these disclosures. We may also use or disclose your de-identified information for any purpose permitted by law without your authorization. 

As Required by Law: Enforcement Activities and Legal Proceedings 

We may use and disclose your PHI if necessary to prevent or lessen a serious threat to your health and safety or that of another person. We may also provide PHI to law enforcement officials, for example, in response to a warrant, investigative demand or similar legal process, or for officials to identify or locate a suspect, fugitive, material witness, or missing person. We may disclose your PHI as required to comply with a court or administrative order. We may disclose your PHI in response to a subpoena, discovery request or other legal process in the course of a judicial or administrative proceeding, but only if efforts have been made to tell you about the request or to obtain an order of protection for the requested information. 

Abuse or Neglect  

We may disclose your health information to appropriate authorities if we reasonably believe that you may be a victim of abuse, neglect, or domestic violence or the victim of other crimes. We may disclose your health information to the extent necessary to avert a serious threat to your health or safety or the health or safety of others.  

National Security 

We may disclose to military authorities the health information of Armed Forces personnel under certain circumstances. We may disclose to authorized federal officials health information required for lawful intelligence, counterintelligence, and other national security activities. We may disclose to correctional institutions or law enforcement officials having lawful custody of protected health information of inmates or patients under certain circumstances. 

Note Regarding State Law 

For all of the above purposes, when state law is more restrictive than federal law, we are required to follow the more restrictive state law. 

Integrity and Security 

Use of TSL, SSL, and Encryption 

In order to enhance privacy and security, AbundaBox maintains a current Transport Layer Security (TLS) and Secure Socket Layer (SSL) Encryption Certificate on the Site that permits participants to provide their personal data. 

Restricting Who Has Access to Your Information 

AbundaBox employs commercially reasonable managerial and technical measures to help protect the security and integrity of the personal information it collects online through this site. You acknowledge, however, that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while AbundaBox strives to protect your personal information, AbundaBox cannot ensure the security of any information you transmit to or from this site. 

Your Patient Rights 

You have the right to access your PHI. You may view your Patient Bill of Rights here. 
 

Accounting of Disclosures 

You have the right to receive a list of certain disclosures of your PHI made by AbundaBox in the past six years from the date of your written request. Under the law, this does not include disclosures made for treatment, payment, or healthcare operations or certain other purposes. 

Request Restrictions 

You may request that we agree to restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except for requests to limit disclosures to your health plan for purposes of payment or healthcare operations when you have paid us for the item or service covered by the request out-of-pocket and in full and when the uses or disclosures are not required by law. 
 

Request Confidential Communications 

You have the right to request that we send your health information by alternative means or to an alternative address, and we will accommodate reasonable requests. 

Copy of this Notice 

You have the right to obtain a paper copy of this Notice upon request. 

How to Exercise Your Rights 

You may write or send an email to us with your specific request. Please refer to the Contact Information below. AbundaBox will consider your request and provide you with a response. 

Complaints/Questions/Contact Information 

If you believe your privacy rights have been violated, you have the right to file a complaint with us. You also have the right to file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. AbundaBox will not retaliate against any individual for filing a complaintTo file a complaint with us, or should you have any questions about this Notice, send an email to us at info@abundabox.com, or write to us at the following address: 

SOS AbundaBox LLC 
Attention: Privacy Officer 
10394 W Chatfield Ave, Suite 108 

Littleton, CO 80127, United States 
 

Note 

We reserve the right to amend the terms of this Notice to reflect changes in our privacy practices, and to make the new terms and practices applicable to all PHI that we maintain about you, including PHI created or received prior to the effective date of the Notice revision. Our Notice is displayed on our website and a copy is available upon request. 
 

Non-Discrimination Notice 

We comply with applicable Federal civil rights laws and do not discriminate on the basis of race, color, national origin, age, disability, or sex. AbundaBox does not exclude people or treat them differently because of race, color, national origin, age, disability, or sex. 

Accessibility Commitment 

We are committed to ensuring our Website is accessible to individuals with disabilities. We strive to comply with the Americans with Disabilities Act (ADA) and the Web Content Accessibility Guidelines (WCAG) 2.1 at Levels A, AA, and AAA. Our goal is to make our Website accessible to the widest possible audience, including people with disabilities. 

To ensure accessibility, we have implemented the following features: 

  • Text Alternatives: Text equivalents for non-text content so that it can be changed into other forms people need, such as large print or speech. 

  • Adaptable Content: Content that can be modified (e.g., adjusting the text size) without losing information or structure. 

  • Distinguishable Content: Making it easier for users to see and hear content, including separating foreground from background. 

  • Keyboard Accessibility: Ensuring content is accessible (e.g., tabbing through form fields) from a keyboard. 

  • Navigable Content: Helping users navigate, find content, and determine where they are. 

  • Readable Content: Making text content readable and understandable. 

  • Input Assistance: Helping users avoid and correct mistakes. 

 

If you have difficulty accessing any part of our website or have any feedback on how we can improve accessibility, please contact us at: 

  • Email: info@abundabox.com 

  • Phone: (888) 763-8957  

 

We will work with you to provide the information or service you need through an accessible communication method that is suitable for you. 

 
If you believe that AbundaBox has failed to provide these services or discriminated in another way on the basis of race, color, national origin, age, disability or sex, you can file a grievance with: 

SOS AbundaBox LLC 
Privacy Officer 
10394 W Chatfield Ave, Suite 108 

Littleton, CO 80127, United States 

You can file a grievance in person, by mail, or email. If you need help filing a grievance, the AbundaBox Privacy Officer is available to help you. 

You can also file a civil rights complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, electronically through the Office for Civil Rights Complaint Portal, available at https://ocrportal.hhs.gov/ocr/portal/lobby.jsf, or by mail or phone at: 

U.S. Department of Health and Human Services 
200 Independence Avenue, SW 
Room 509F, HHH Building 
Washington, D.C. 20201 
(800) 368-1019, (800) 537-7697 (TDD) 

 

STATE-PRIVACY LAW ADDENDUM  

Last updated: July 2024 

SOS AbundaBox, LLC. (“AbundaBox,” “we,” or “us) provides this State Privacy Law Addendum as a supplement to the information contained in our website Privacy Policy (the “Privacy Policy”). If one of the following state laws applies to AbundaBox and you are a resident of that state, the following links describe our privacy practices: 

To the extent there is any inconsistency between the terms of the Privacy Policy and the state-specific privacy notices, the terms of the state-specific privacy notices control.