This Notice of Privacy Practices, effective August 5, 2026, is issued by WHOOP Physician Services, P.C., a Massachusetts professional corporation, for itself and WHOOP Physician Services of NY, P.C. The two companies have designated themselves a single Affiliated Covered Entity under the federal rule the Notice cites, and together with their physicians, advanced practice providers, clinical personnel, workforce members and authorized representatives are called the WHOOP Covered Entity. The Notice describes how protected health information (PHI) about you may be used and disclosed and explains your rights over that information.
Supporting quotations
Effective Date: August 5, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.
describes how protected health information
WHOOP Physician Services, P.C., a Massachusetts professional corporation and the primary professional corporation within the affiliated group
WHOOP Physician Services, P.C.
WHOOP Physician Services of NY, P.C.
together with their physicians, advanced practice providers, clinical personnel, workforce members, and authorized representatives
Qualifications & exceptions
The Notice concerns PHI handled by the WHOOP Covered Entity, the professional medical corporations, as described in the source.
Not stated here
The Notice does not say which services each corporation provides or which states each one serves.
The Notice does not say how WHOOP, Inc.'s separate consumer privacy terms apply to information that is not PHI; those terms are not part of this source.
Legal Rights & Agreement Rules · User right or choice
Right to a paper copy of this Notice
You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Supporting quotations
You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Not stated here
The Notice does not say how to request the paper copy.
Legal Rights & Agreement Rules · User right or choice
How to file a privacy complaint and no retaliation
If you believe your privacy rights have been violated you may file a complaint using the contact information in the Contact Information section, where WHOOP Physician Services, P.C. is the primary contact and Privacy Officer for the WHOOP Covered Entity. You may also complain to the U.S. Department of Health and Human Services Office for Civil Rights at the address and phone number listed. The medical group says it will not retaliate against you for filing a complaint.
Supporting quotations
you may file a complaint using the contact information below
You may also file a complaint with:
U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201
We will not retaliate against you for filing a complaint.
CONTACT INFORMATION
serves as the primary contact and Privacy Officer for the WHOOP Covered Entity
Privacy Officer WHOOP Physician Services, P.C.
Not stated here
The Notice does not describe a complaint process, timeline or outcome.
Cross-references
related (model-proposed): How to contact the Privacy Officer — references: The complaint instruction points to the contact information, which is carded as the Privacy Officer contact.
Legal Rights & Agreement Rules · Restriction or exception
Platform data is PHI under this Notice only to the extent it becomes part of the medical record
The Notice says that, to the extent information received through the WHOOP platform becomes part of your medical record, it is protected as PHI under this Notice. The wording ties this Notice's protection to information that becomes part of the medical record.
Supporting quotations
To the extent this information becomes part of your medical record, it is protected as PHI under this Notice.
Qualifications & exceptions
Protection as PHI under this Notice is stated 'to the extent' the information becomes part of the medical record.
Not stated here
The Notice does not say how information that does not become part of the medical record is treated, or which terms govern it; any such terms are outside this source.
Cross-references
qualifies (model-proposed): Information the group may receive through the WHOOP platform — qualifies: The platform data card describes what the medical group may receive; the PHI-limit card says that information is protected as PHI under this Notice only to the extent it becomes part of the medical record.
Legal Rights & Agreement Rules · Company commitment
Substance use disorder treatment records
To the extent the medical group maintains records subject to 42 C.F.R. Part 2, it says it will comply with the applicable federal requirements for use and disclosure of substance use disorder treatment records, and it will not use or disclose such records for investigations or proceedings against you except as permitted by applicable law.
Supporting quotations
SUBSTANCE USE DISORDER RECORDS
To the extent we maintain records that are subject to 42 C.F.R. Part 2, we will comply with applicable federal requirements governing the use and disclosure of substance use disorder treatment records.
We will not use or disclose such records for investigations or proceedings against you except as permitted by applicable law.
Qualifications & exceptions
Applies only to the extent the group maintains records subject to 42 C.F.R. Part 2.
Use or disclosure of such records against you in investigations or proceedings is allowed only as permitted by applicable law.
Not stated here
The Notice does not say whether the group maintains any such records, and does not describe what Part 2 requires; the cited regulation is not part of this source.
Cross-references
narrows (model-proposed): Disclosures required by law and in legal proceedings — narrows: For records subject to 42 C.F.R. Part 2, the group says it will not use or disclose them for investigations or proceedings against you except as permitted by applicable law, narrowing the general legal-process disclosure permission.
Legal Rights & Agreement Rules · Company commitment
State law with greater protection will be followed
The Notice says certain state laws may give additional privacy protection to specific kinds of health information, including mental health treatment, reproductive healthcare, HIV/AIDS, genetic testing, substance use disorder treatment, sexually transmitted infections and other sensitive health information. When state law gives greater privacy protection than federal law, the medical group says it will follow the more protective requirements.
Supporting quotations
ADDITIONAL PROTECTIONS UNDER STATE LAW
Certain state laws may provide additional privacy protections for specific categories of health information, including information relating to mental health treatment, reproductive healthcare, HIV/AIDS, genetic testing, substance use disorder treatment, sexually transmitted infections, and other sensitive health information.
When state law provides greater privacy protections than federal law, we will comply with the more protective requirements.
Qualifications & exceptions
State law protections are described as something that 'may' apply to the listed categories, which are examples.
The commitment applies when state law provides greater protection than federal law.
Not stated here
The Notice does not say which states' laws apply or what the additional protections are.
Cross-references
qualifies (model-proposed): Disclosures required by law and in legal proceedings — qualifies: Where state law gives greater protection than federal law, the group says it will follow the more protective requirements, which bears on disclosures in response to legal process and government requests.
qualifies (model-proposed): Health oversight and research disclosures — qualifies: The more-protective state law commitment bears on research and oversight disclosures that the Notice allows when permitted by law.
Legal Rights & Agreement Rules · Permission or license
The Notice can be revised and applies to all PHI held
The medical group may revise this Notice from time to time. Any revised Notice will apply to all PHI it maintains and will be made available through applicable websites, patient portals and on request.
Supporting quotations
We may revise this Notice from time to time.
Any revised Notice will apply to all PHI we maintain and will be made available through applicable websites, patient portals, and upon request.
Qualifications & exceptions
A revised Notice applies to all PHI the group maintains, not only to information collected afterward.
Not stated here
The Notice does not promise advance notice of a revision or say how long before a revision takes effect.
Legal Rights & Agreement Rules · Procedure
How to contact the Privacy Officer
WHOOP Physician Services, P.C. is the primary contact and Privacy Officer for the WHOOP Covered Entity, and you may contact the Privacy Officer with questions about this Notice or your privacy rights by email at privacy@whoop.com or by mail at One Kenmore Square, Boston, MA 02215.
Supporting quotations
WHOOP Physician Services, P.C. serves as the primary contact and Privacy Officer for the WHOOP Covered Entity. You may contact the Privacy Officer with any questions about this Notice or your privacy rights using the information below.
Privacy Officer WHOOP Physician Services, P.C.
privacy@whoop.com
Mailing Address:
One Kenmore Square Boston, MA 02215
Qualifications & exceptions
Requests for access to or correction of your medical record are directed in the Rights section to privacy@canvasmedical.com, a different address from the one listed here.