This Notice of Privacy Practices, effective August 5, 2026, is issued by WHOOP Physician Services, P.C., a Massachusetts professional corporation, for itself and WHOOP Physician Services of NY, P.C. The two companies have designated themselves a single Affiliated Covered Entity under the federal rule the Notice cites, and together with their physicians, advanced practice providers, clinical personnel, workforce members and authorized representatives are called the WHOOP Covered Entity. The Notice describes how protected health information (PHI) about you may be used and disclosed and explains your rights over that information.
Supporting quotations
Effective Date: August 5, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.
describes how protected health information
WHOOP Physician Services, P.C., a Massachusetts professional corporation and the primary professional corporation within the affiliated group
WHOOP Physician Services, P.C.
WHOOP Physician Services of NY, P.C.
together with their physicians, advanced practice providers, clinical personnel, workforce members, and authorized representatives
Qualifications & exceptions
The Notice concerns PHI handled by the WHOOP Covered Entity, the professional medical corporations, as described in the source.
Not stated here
The Notice does not say which services each corporation provides or which states each one serves.
The Notice does not say how WHOOP, Inc.'s separate consumer privacy terms apply to information that is not PHI; those terms are not part of this source.
Sharing & Disclosure · Permission or license
The affiliated medical corporations may share PHI with one another
The two professional corporations are legally separate but share common ownership and control. Because they have designated themselves a single Affiliated Covered Entity, the Notice says they hold themselves out to the public as one covered entity and may use and disclose PHI with one another for the joint treatment, payment and health care operations of that entity.
Supporting quotations
may use and disclose PHI for the joint health care operations of the Affiliated Covered Entity
legally separate entities that share common ownership and control
the members may use and disclose PHI with one another for the joint treatment, payment, and health care operations of the Affiliated Covered Entity
Qualifications & exceptions
Sharing between the corporations is stated for joint treatment, payment and health care operations of the Affiliated Covered Entity; the first paragraph mentions only joint health care operations and the next paragraph lists all three purposes, so read the two together.
Not stated here
The Notice does not say which corporation holds which patient's records or which clinicians belong to which corporation.
Sharing & Disclosure · Permission or license
PHI may be shared with WHOOP, Inc. and service providers acting for the medical group
The medical corporations provide healthcare using technology, administrative and support services made available by WHOOP, Inc. and certain affiliated service providers. The Notice says WHOOP, Inc. is not a healthcare provider and does not practice medicine. The WHOOP Covered Entity may share PHI with WHOOP, Inc. and with service providers acting on the Covered Entity's behalf to support healthcare delivery and operations, including technology hosting, patient support, scheduling, payment processing, communications, security, analytics, quality improvement and other functions permitted by law. The Notice says these service providers are required by law and contract to appropriately safeguard your PHI.
Supporting quotations
using technology, administrative, and support services made available by WHOOP, Inc. and certain affiliated service providers
WHOOP, Inc. is not a healthcare provider and does not practice medicine
may share PHI with WHOOP, Inc. and service providers acting on behalf of the WHOOP Covered Entity to support healthcare delivery and operations
technology hosting, patient support, scheduling, payment processing, communications, security, analytics, quality improvement, and other functions permitted by law
These service providers are required by law and contract to appropriately safeguard your PHI.
Qualifications & exceptions
Sharing is described as being with parties acting on behalf of the WHOOP Covered Entity to support healthcare delivery and operations.
The listed functions follow the word 'including' and end with 'other functions permitted by law', so the list is not exhaustive.
Not stated here
The Notice does not name the service providers or say what contract terms bind them.
The Notice does not describe what WHOOP, Inc. may do with PHI beyond acting for the Covered Entity, or how WHOOP, Inc.'s own privacy policy applies; that policy is not part of this source.
Account & Service Control · User right or choice
Right to inspect or get a copy of your medical record
Under certain circumstances you have the right to inspect or obtain an electronic or paper copy of your medical record and other health information the medical group maintains about you. To request access you email privacy@canvasmedical.com; Canvas Medical maintains the electronic medical record system on behalf of the Medical Groups and coordinates these requests with them, and you do not need a Canvas account to submit a request. The group says it will usually provide a copy or summary within 30 days and may charge a reasonable, cost-based fee as permitted by law.
Supporting quotations
you have the right to inspect or obtain an electronic or paper copy of your medical record and other health information we maintain about you
please email privacy@canvasmedical.com
Canvas Medical maintains our electronic medical record system on behalf of the Medical Groups and coordinates these requests with us
You do not need a Canvas account to submit a request.
usually within 30 days of your request
We may charge a reasonable, cost-based fee as permitted by law.
Qualifications & exceptions
The right applies 'under certain circumstances'.
The 30-day timing is stated as 'usually', not as a guarantee.
A fee may be charged only if reasonable, cost-based and permitted by law.
Not stated here
The Notice does not say what the circumstances are, what the fee would be, or what happens if a request is denied.
'Medical Groups' is used in this section without a definition in the source.
Account & Service Control · User right or choice
Right to request a correction of your medical record
If you believe information in your medical record is incorrect or incomplete, you may ask the medical group to amend it by emailing privacy@canvasmedical.com. Canvas Medical coordinates amendment requests with the Medical Groups, which review and decide them in accordance with applicable law. If a request is approved, the group will amend or supplement the record as appropriate; medical records generally are not deleted. If a request is denied, the group will give a written explanation within the time required by law.
Supporting quotations
you may request that we amend your medical record by emailing privacy@canvasmedical.com
which review and decide such requests in accordance with applicable law
we will amend or supplement your medical record as appropriate
Medical records generally are not deleted.
we will provide a written explanation within the time required by law
Qualifications & exceptions
Approval is decided by the Medical Groups under applicable law, so the request is not guaranteed.
Approved changes amend or supplement the record; the Notice says records generally are not deleted.
Not stated here
The deadline for the written explanation is stated only as 'the time required by law'; no number of days is given.
The Notice does not say whether you can add a statement of disagreement.
Account & Service Control · User right or choice
Right to ask for communications in a specific way or place
You may ask the medical group to communicate with you in a specific way or at a specific location, and the group says it will accommodate reasonable requests.
Supporting quotations
You may ask us to communicate with you in a specific way or at a specific location.
We will accommodate reasonable requests.
Qualifications & exceptions
Only reasonable requests are promised.
Not stated here
The Notice does not define a reasonable request or say how to make the request.
Sharing & Disclosure · User right or choice
Right to ask for limits on use or disclosure, and the out-of-pocket exception
You may ask the medical group not to use or disclose certain PHI for treatment, payment or healthcare operations. The group is not required to agree to every request; if it agrees, it will comply unless disclosure is necessary to provide emergency treatment or is otherwise required by law. If you pay for a healthcare item or service in full out-of-pocket, you may ask that related PHI not be disclosed to your health plan for payment or healthcare operations, and the group says it will honor such a request when required by law.
Supporting quotations
You may ask us not to use or disclose certain PHI for treatment, payment, or healthcare operations.
We are not required to agree to every request.
we will comply unless disclosure is necessary to provide emergency treatment or is otherwise required by law
If you pay for a healthcare item or service in full out-of-pocket, you may request that we not disclose related PHI to your health plan for payment or healthcare operations purposes.
We will honor such requests when required by law.
Qualifications & exceptions
The group need not agree to a general restriction request.
An agreed restriction does not apply where disclosure is necessary for emergency treatment or otherwise required by law.
The out-of-pocket request concerns disclosure to your health plan for payment or healthcare operations, and is honored 'when required by law'.
Not stated here
The Notice does not say how to make a restriction request.
The Notice does not say what applies to an out-of-pocket request in situations where the law does not require honoring it.
Cross-references
qualifies (model-proposed): PHI may be used and disclosed for healthcare operations — qualifies: The right to ask for limits on use or disclosure for treatment, payment or healthcare operations qualifies the general permission to use PHI for healthcare operations; the group need not agree to a request.
Sharing & Disclosure · User right or choice
Right to a list of certain disclosures from the past six years
You may request a list of certain disclosures of your PHI made during the six years before your request. The list will not include disclosures made for treatment, payment, healthcare operations or certain other disclosures permitted by law.
Supporting quotations
You may request a list of certain disclosures of your PHI made during the six years before your request.
The accounting will not include disclosures made for treatment, payment, healthcare operations, or certain other disclosures permitted by law.
Qualifications & exceptions
Covers 'certain disclosures' within six years before the request.
Disclosures for treatment, payment, healthcare operations and certain other permitted disclosures are left out.
Not stated here
The Notice does not list the 'certain other disclosures' that are excluded or say how to request the list.
Legal Rights & Agreement Rules · User right or choice
Right to a paper copy of this Notice
You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Supporting quotations
You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Not stated here
The Notice does not say how to request the paper copy.
Account & Service Control · Permission or license
A personal representative can exercise your rights
If an individual has legal authority to act on your behalf, such as through a healthcare power of attorney or guardianship, that individual may exercise your rights and make choices regarding your PHI.
Supporting quotations
If an individual has legal authority to act on your behalf, such as through a healthcare power of attorney or guardianship, that individual may exercise your rights and make choices regarding your PHI.
Qualifications & exceptions
Applies only to an individual who has legal authority to act for you; the examples given are a healthcare power of attorney and guardianship.
Not stated here
The Notice does not describe any proof the group requires.
Legal Rights & Agreement Rules · User right or choice
How to file a privacy complaint and no retaliation
If you believe your privacy rights have been violated you may file a complaint using the contact information in the Contact Information section, where WHOOP Physician Services, P.C. is the primary contact and Privacy Officer for the WHOOP Covered Entity. You may also complain to the U.S. Department of Health and Human Services Office for Civil Rights at the address and phone number listed. The medical group says it will not retaliate against you for filing a complaint.
Supporting quotations
you may file a complaint using the contact information below
You may also file a complaint with:
U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201
We will not retaliate against you for filing a complaint.
CONTACT INFORMATION
serves as the primary contact and Privacy Officer for the WHOOP Covered Entity
Privacy Officer WHOOP Physician Services, P.C.
Not stated here
The Notice does not describe a complaint process, timeline or outcome.
Cross-references
related (model-proposed): How to contact the Privacy Officer — references: The complaint instruction points to the contact information, which is carded as the Privacy Officer contact.
Sharing & Disclosure · User right or choice
You can tell the group your preferences on some sharing
For certain types of information you may tell the medical group your preferences about disclosure, including whether to share information with family members, friends or others involved in your care or payment for your care, and whether to share information in disaster relief situations. If you cannot communicate your preference, the group may share information if it determines this is in your best interests or necessary to prevent a serious threat to health or safety.
Supporting quotations
For certain types of information, you may tell us your preferences regarding disclosure.
You may instruct us whether to:
Share information with family members, friends, or others involved in your care or payment for your care.
Share information in disaster relief situations.
If you cannot communicate your preference, we may share information if we determine it is in your best interests or necessary to prevent a serious threat to health or safety.
Qualifications & exceptions
The choice applies to 'certain types of information' only.
If you cannot communicate a preference, the group may share if it determines it is in your best interests or necessary to prevent a serious threat to health or safety.
Not stated here
The Notice does not say which types of information the choices cover or how to state a preference.
Sharing & Disclosure · Company commitment
Written authorization needed for psychotherapy notes, most marketing and sale of PHI
Except as otherwise permitted by law, the medical group will obtain your written authorization before using or disclosing psychotherapy notes, using or disclosing PHI for most marketing purposes, or selling PHI. You may revoke an authorization at any time in writing, except to the extent the group has already relied on it.
Supporting quotations
Except as otherwise permitted by law, we will obtain your written authorization before:
Using or disclosing psychotherapy notes.
Using or disclosing PHI for most marketing purposes.
Selling PHI.
You may revoke an authorization at any time in writing, except to the extent we have already relied upon it.
Qualifications & exceptions
Applies 'except as otherwise permitted by law'.
Marketing is covered only for 'most' marketing purposes.
Revocation must be in writing and does not undo action already taken in reliance on the authorization.
Not stated here
The Notice does not say which marketing purposes need no authorization or what the legal exceptions are.
Use & Processing · Permission or license
PHI may be used and disclosed for treatment
The medical group may use and disclose your PHI to provide, coordinate and manage your healthcare. The Notice says this may include reviewing information you share through the WHOOP platform, consulting other healthcare professionals involved in your care, documenting care in the electronic medical record, coordinating follow-up care, ordering or reviewing laboratory tests, prescribing medications where appropriate, and communicating with you about treatment. As an example, a clinician may review your sleep, activity or physiological information together with questionnaire responses and other clinical information to evaluate your health, develop a treatment plan or monitor your progress.
Supporting quotations
We may use and disclose your PHI to provide, coordinate, and manage your healthcare.
reviewing information you share through the WHOOP platform
prescribing medications where appropriate
A clinician may review your sleep, activity, or physiological information together with questionnaire responses and other clinical information to evaluate your health, develop a treatment plan, or monitor your progress.
Qualifications & exceptions
The activities are introduced with 'may include' and are not a closed list.
The clinician example is illustrative, not a statement that this review always occurs.
Not stated here
The Notice does not say which WHOOP platform data a clinician will actually see.
Charges & Financial Obligations · Permission or license
PHI may be used and disclosed to obtain payment
The medical group may use and disclose PHI to obtain payment for healthcare services; for example, it may submit information to a health insurer to receive payment for services provided to you.
Supporting quotations
We may use and disclose PHI to obtain payment for healthcare services.
We may submit information to a health insurer to receive payment for services provided to you.
Qualifications & exceptions
The insurer example is illustrative.
Use & Processing · Permission or license
PHI may be used and disclosed for healthcare operations
The medical group may use and disclose PHI to support the operation, administration, quality and improvement of its healthcare services. Examples listed are quality assessment and improvement, clinical training and supervision, credentialing and licensing, business planning and administration, security and fraud prevention, and compliance and auditing.
Supporting quotations
We may use and disclose PHI to support the operation, administration, quality, and improvement of our healthcare services.
Quality assessment and improvement activities
Clinical training and supervision
Credentialing and licensing activities
Business planning and administration
Security and fraud prevention
Compliance and auditing activities
Qualifications & exceptions
The activities are introduced as examples, not a closed list.
Not stated here
The Notice does not say who receives PHI for these activities beyond what is stated elsewhere.
Data Access & Collection · Company practice
Information the group may receive through the WHOOP platform
In connection with healthcare services, the medical group may receive information you choose to provide through the WHOOP platform or related technologies, including health and wellness information, activity and exercise information, sleep information, physiological measurements, questionnaire responses, remote monitoring information and other information relevant to your care. The Notice says it uses this information to support diagnosis, treatment, care coordination, clinical decision-making and ongoing monitoring.
Supporting quotations
we may receive information that you choose to provide through the WHOOP platform or related technologies
Health and wellness information
Activity and exercise information
Sleep information
Physiological measurements
Questionnaire responses
Remote monitoring information
Other information relevant to your care
We use this information to support diagnosis, treatment, care coordination, clinical decision-making, and ongoing monitoring.
Qualifications & exceptions
Described as information you choose to provide, received in connection with healthcare services.
The list is introduced with 'including' and ends with 'other information relevant to your care'.
Not stated here
The Notice does not say how a person chooses what flows to the clinicians or how WHOOP platform data outside this clinical relationship is handled; WHOOP, Inc.'s consumer terms are not part of this source.
Legal Rights & Agreement Rules · Restriction or exception
Platform data is PHI under this Notice only to the extent it becomes part of the medical record
The Notice says that, to the extent information received through the WHOOP platform becomes part of your medical record, it is protected as PHI under this Notice. The wording ties this Notice's protection to information that becomes part of the medical record.
Supporting quotations
To the extent this information becomes part of your medical record, it is protected as PHI under this Notice.
Qualifications & exceptions
Protection as PHI under this Notice is stated 'to the extent' the information becomes part of the medical record.
Not stated here
The Notice does not say how information that does not become part of the medical record is treated, or which terms govern it; any such terms are outside this source.
Cross-references
qualifies (model-proposed): Information the group may receive through the WHOOP platform — qualifies: The platform data card describes what the medical group may receive; the PHI-limit card says that information is protected as PHI under this Notice only to the extent it becomes part of the medical record.
Use & Processing · Company practice
Telehealth technologies and how PHI from them is handled
The WHOOP Covered Entity may provide healthcare through telehealth technologies, including video visits, audio communications, secure messaging, electronic questionnaires, remote monitoring tools and other digital health technologies. PHI collected or generated during telehealth encounters will be used and disclosed as described in this Notice.
Supporting quotations
may provide healthcare services through telehealth technologies, including video visits, audio communications, secure messaging, electronic questionnaires, remote monitoring tools, and other digital health technologies
PHI collected or generated during telehealth encounters will be used and disclosed as described in this Notice.
Qualifications & exceptions
The technologies are listed with 'including' and are not a closed list.
Use & Processing · Permission or license
Contact about appointments and health-related services
The medical group may contact you about appointments, treatment alternatives, follow-up care, care management programs, prescription information or other health-related services that may be relevant to your care.
Supporting quotations
We may contact you regarding appointments, treatment alternatives, follow-up care, care management programs, prescription information, or other health-related services that may be relevant to your care.
Qualifications & exceptions
Contact is limited to matters that may be relevant to your care, as stated.
Not stated here
The Notice does not say by which channel these contacts are made in this section; a later section lists electronic channels.
Sharing & Disclosure · Permission or license
Public health disclosures
The medical group may disclose PHI for public health purposes, including preventing or controlling disease, reporting adverse events, product recalls, reporting suspected abuse, neglect or domestic violence, and preventing serious threats to health or safety.
Supporting quotations
We may disclose PHI for public health purposes, including:
Preventing or controlling disease
Reporting adverse events
Product recalls
Reporting suspected abuse, neglect, or domestic violence
Preventing serious threats to health or safety
Qualifications & exceptions
The purposes are introduced with 'including' and are not a closed list.
Not stated here
The Notice does not name the recipients.
Sharing & Disclosure · Permission or license
Health oversight and research disclosures
The medical group may disclose PHI to government agencies authorized to oversee healthcare systems, providers and compliance activities. It may also use or disclose PHI for research purposes when permitted by law and subject to applicable privacy protections.
Supporting quotations
We may disclose PHI to government agencies authorized to oversee healthcare systems, providers, and compliance activities.
We may use or disclose PHI for research purposes when permitted by law and subject to applicable privacy protections.
Qualifications & exceptions
Oversight disclosures go to government agencies authorized to oversee healthcare.
Research use or disclosure is stated as 'when permitted by law and subject to applicable privacy protections'.
Not stated here
The Notice does not say whether research uses need your authorization or what protections apply.
Sharing & Disclosure · Permission or license
Disclosures required by law and in legal proceedings
The medical group may disclose PHI when required by federal, state or local law. It may also disclose PHI in response to court orders, subpoenas, legal processes, law enforcement requests or other governmental requests when permitted or required by law.
Supporting quotations
We may disclose PHI when required by federal, state, or local law.
We may disclose PHI in response to court orders, subpoenas, legal processes, law enforcement requests, or other governmental requests when permitted or required by law.
Qualifications & exceptions
Disclosure under legal process or law enforcement requests is stated 'when permitted or required by law'.
Not stated here
The Notice does not say whether you are told before PHI is disclosed in response to these requests.
Sharing & Disclosure · Permission or license
Workers' compensation, organ donation and death-related disclosures
The medical group may disclose PHI as necessary to comply with workers' compensation laws and similar programs, to organizations involved in organ, eye or tissue procurement and transplantation, and to coroners, medical examiners or funeral directors as authorized by law.
Supporting quotations
We may disclose PHI as necessary to comply with workers' compensation laws and similar programs.
We may disclose PHI to organizations involved in organ, eye, or tissue procurement and transplantation.
We may disclose PHI to coroners, medical examiners, or funeral directors as authorized by law.
Qualifications & exceptions
Workers' compensation disclosures are limited to what is necessary to comply with those laws and similar programs.
Disclosures to coroners, medical examiners and funeral directors are stated 'as authorized by law'.
Sharing & Disclosure · Permission or license
Military, national security and other specialized government functions
The medical group may disclose PHI for military, national security, protective services and other specialized government functions as authorized by law.
Supporting quotations
We may disclose PHI for military, national security, protective services, and other specialized government functions as authorized by law.
Qualifications & exceptions
Stated 'as authorized by law'.
Not stated here
The Notice does not say which agencies may receive the PHI.
Legal Rights & Agreement Rules · Company commitment
Substance use disorder treatment records
To the extent the medical group maintains records subject to 42 C.F.R. Part 2, it says it will comply with the applicable federal requirements for use and disclosure of substance use disorder treatment records, and it will not use or disclose such records for investigations or proceedings against you except as permitted by applicable law.
Supporting quotations
SUBSTANCE USE DISORDER RECORDS
To the extent we maintain records that are subject to 42 C.F.R. Part 2, we will comply with applicable federal requirements governing the use and disclosure of substance use disorder treatment records.
We will not use or disclose such records for investigations or proceedings against you except as permitted by applicable law.
Qualifications & exceptions
Applies only to the extent the group maintains records subject to 42 C.F.R. Part 2.
Use or disclosure of such records against you in investigations or proceedings is allowed only as permitted by applicable law.
Not stated here
The Notice does not say whether the group maintains any such records, and does not describe what Part 2 requires; the cited regulation is not part of this source.
Cross-references
narrows (model-proposed): Disclosures required by law and in legal proceedings — narrows: For records subject to 42 C.F.R. Part 2, the group says it will not use or disclose them for investigations or proceedings against you except as permitted by applicable law, narrowing the general legal-process disclosure permission.
Legal Rights & Agreement Rules · Company commitment
State law with greater protection will be followed
The Notice says certain state laws may give additional privacy protection to specific kinds of health information, including mental health treatment, reproductive healthcare, HIV/AIDS, genetic testing, substance use disorder treatment, sexually transmitted infections and other sensitive health information. When state law gives greater privacy protection than federal law, the medical group says it will follow the more protective requirements.
Supporting quotations
ADDITIONAL PROTECTIONS UNDER STATE LAW
Certain state laws may provide additional privacy protections for specific categories of health information, including information relating to mental health treatment, reproductive healthcare, HIV/AIDS, genetic testing, substance use disorder treatment, sexually transmitted infections, and other sensitive health information.
When state law provides greater privacy protections than federal law, we will comply with the more protective requirements.
Qualifications & exceptions
State law protections are described as something that 'may' apply to the listed categories, which are examples.
The commitment applies when state law provides greater protection than federal law.
Not stated here
The Notice does not say which states' laws apply or what the additional protections are.
Cross-references
qualifies (model-proposed): Disclosures required by law and in legal proceedings — qualifies: Where state law gives greater protection than federal law, the group says it will follow the more protective requirements, which bears on disclosures in response to legal process and government requests.
qualifies (model-proposed): Health oversight and research disclosures — qualifies: The more-protective state law commitment bears on research and oversight disclosures that the Notice allows when permitted by law.
Use & Processing · Permission or license
Electronic communications and patient access tools
The medical group may communicate with you electronically through the WHOOP platform, patient portals, secure messaging systems, email, text message or other electronic means as permitted by law. The Notice says available technologies may let you access portions of your health information, communicate with providers, review treatment information and manage aspects of your care.
Supporting quotations
ELECTRONIC COMMUNICATIONS AND PATIENT ACCESS
We may communicate with you electronically through the WHOOP platform, patient portals, secure messaging systems, email, text message, or other electronic means as permitted by law.
Available technologies may allow you to access portions of your health information, communicate with providers, review treatment information, and manage aspects of your care.
Qualifications & exceptions
Electronic communication is stated 'as permitted by law'.
Patient access is described as what available technologies 'may allow', not a guarantee.
Not stated here
The Notice does not say whether email or text messages are encrypted or how you can opt out of particular channels.
Security & Safeguards · Company commitment
What the medical group says it is required to do
The medical group says it is required by law to maintain the privacy and security of your PHI, provide you this Notice, follow the practices described in it, and notify you if a breach compromises the privacy or security of your PHI. It will not use or disclose your PHI in a manner inconsistent with the Notice unless you authorize it or the law permits or requires the use or disclosure.
Supporting quotations
OUR RESPONSIBILITIES
We are required by law to:
Maintain the privacy and security of your PHI.
Provide you with this Notice.
Follow the practices described in this Notice.
Notify you if a breach occurs that compromises the privacy or security of your PHI.
We will not use or disclose your PHI in a manner inconsistent with this Notice unless you authorize us to do so or the law permits or requires the use or disclosure.
Qualifications & exceptions
The final commitment has two exits: your authorization, or a use or disclosure the law permits or requires.
Not stated here
The Notice does not say how or how quickly you would be notified of a breach.
The linked document's text is not supplied here: the quotes 'Provide you with this Notice.' and 'Follow the practices described in this Notice.' link to another document, so this card cannot say what that document contains.
Legal Rights & Agreement Rules · Permission or license
The Notice can be revised and applies to all PHI held
The medical group may revise this Notice from time to time. Any revised Notice will apply to all PHI it maintains and will be made available through applicable websites, patient portals and on request.
Supporting quotations
We may revise this Notice from time to time.
Any revised Notice will apply to all PHI we maintain and will be made available through applicable websites, patient portals, and upon request.
Qualifications & exceptions
A revised Notice applies to all PHI the group maintains, not only to information collected afterward.
Not stated here
The Notice does not promise advance notice of a revision or say how long before a revision takes effect.
Legal Rights & Agreement Rules · Procedure
How to contact the Privacy Officer
WHOOP Physician Services, P.C. is the primary contact and Privacy Officer for the WHOOP Covered Entity, and you may contact the Privacy Officer with questions about this Notice or your privacy rights by email at privacy@whoop.com or by mail at One Kenmore Square, Boston, MA 02215.
Supporting quotations
WHOOP Physician Services, P.C. serves as the primary contact and Privacy Officer for the WHOOP Covered Entity. You may contact the Privacy Officer with any questions about this Notice or your privacy rights using the information below.
Privacy Officer WHOOP Physician Services, P.C.
privacy@whoop.com
Mailing Address:
One Kenmore Square Boston, MA 02215
Qualifications & exceptions
Requests for access to or correction of your medical record are directed in the Rights section to privacy@canvasmedical.com, a different address from the one listed here.