HEALTH BENEFITS ACCESS SOCIEDAD ANÓNIMA (“Sana Sana”)

PRIVACY POLICY NOTIFICATION

This notice applies to the privacy practices of Sana Sana and describes how your personal information may be used and disclosed and how you can access that information. Please read it carefully.

Dear user

At Sana Sana, we care about your privacy and the protection of your privacy rights. This notice refers to your privacy rights and how to obtain a copy and access your personal information that we keep in our files. If you have questions about this notice, please call us at (506) 2103-0450.

Summary of Privacy Practices

We may use and disclose your personal information without your authorization for matters related to your treatment, payment, and healthcare operations, and—when required or authorized by law—for public health and interest activities, law enforcement purposes, judicial and administrative proceedings, research, and certain public benefit activities.

We may disclose your personal information to family members, friends, and others involved in your medical care or payment for your care, as well as to relevant public and private entities to assist in disaster relief efforts.

Except in these instances, we will not use or disclose your personal information without your written authorization. You have the right to review and receive a copy of your personal information, receive an explanation regarding certain disclosures we may make of your information, and request that we amend your personal information, further restrict its use and disclosure, or communicate with you confidentially regarding it.

Please read this notice in its entirety for details on how we may use and disclose your personal information, your rights and how to exercise them, and information regarding complaints and our privacy practices.

Our Legal Duty

Sana Sana employs numerous methods to protect your personal information—whether oral, written, or electronic—from unauthorized use or disclosure. By law, we are required to:

  • Maintain the privacy of your personal information.
  • Provide you with this notice and abide by the rules outlined herein.
  • Notify you if we cannot agree to a requested restriction on how your information is shared.
  • Accommodate reasonable requests to communicate with you via alternative means or at alternative locations.
  • Obtain your written consent to share your personal information for purposes other than those previously stated and permitted by law.

Sana Sana employees and network providers understand that your information is private and confidential. We utilize employee training programs, as well as management-supervised policies and procedures, to ensure our staff knows the protocols required to keep your information—whether oral, written, or electronic—safe and secure.

We reserve the right to modify our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law.
We reserve the right to apply changes to our privacy practices and the new terms of our notice to all personal information we maintain, including information created or received prior to the changes.

You may request a copy of our notice at any time. For more information about our privacy practices or to obtain additional copies of this notice, please contact us using the information provided at the end of this notice.

Uses and Disclosures of Personal Information

We will use and disclose personal information about you for treatment, payment, and healthcare operations. For example:

Treatment

We may disclose your personal information without your authorization to a doctor or other healthcare provider to provide you with treatment

Payment

We may use and disclose your personal information without your authorization to determine your eligibility, process claims, or make payments for covered services you receive under your benefit plan. Additionally, we may disclose your personal information to a healthcare provider or another health plan so that provider or plan can obtain payment or for other payment activities.

Healthcare-Related Activities

We may use and disclose personal information about you without your authorization to carry out activities related to healthcare.
We may disclose your personal information to a health plan or healthcare provider in accordance with privacy protection laws, provided that the plan or provider is or has been involved with you and such information is used for activities related to evaluating and improving the quality of the plan’s or provider’s healthcare, for evaluating and reviewing competencies and qualifications, and for detecting and preventing fraud and abuse.

Your Authorization

You may authorize us in writing to use your personal information or disclose it to anyone, for any purpose. If you give us your authorization, it may be revoked in writing at any time. Your revocation will not affect the use or disclosure that your authorization permitted while it was in effect. Unless you give us your written authorization, we will not use or disclose your personal information for any purpose other than those described in this notice.

Before making such a disclosure, we will give you the opportunity to opt out.

If you are not present, incapacitated, or it is an emergency or disaster relief effort, we will use our professional judgment to determine whether disclosing your personal information is in your best interests under such circumstances. Health-related products and services and appointment reminders: We may contact you to remind you of appointments. We may use your personal information to contact you regarding health-related products, benefits, and services that we provide or include in our benefits plan, payment for those products, benefits, and services, and other treatment options that may be of interest to you. These communications may include information about healthcare providers in our network, replacements or upgrades to your benefits plan, and health-related products or services that are available only to our members and that add value to our benefits plan, even if they are not part of it. Public Health and Public Benefit Activities: We may use and disclose your personal information without your authorization, when required or authorized by law, for the following types of public health and public interest activities, judicial and administrative processes, law enforcement, research, and other public benefit activities: for public health, including reporting disease and vital statistics, child abuse, and adult abuse, neglect, or domestic violence; to avert a serious and imminent threat to health or safety; for healthcare oversight, such as the activities of state insurance commissioners, licensing and peer-review authorities, and fraud prevention agencies; for research; in response to court and administrative orders and other legal processes; to law enforcement officers with respect to victims of crimes, crimes on our premises, reporting of crimes in emergencies, and identification or location of suspects or other persons; to forensic experts, medical examiners, funeral homes, and organ procurement organizations for transplantation; to the armed forces, federal officials for lawful intelligence, counterintelligence, and national security activities, and to correctional institutions and judicial officers regarding persons under lawful arrest; and as authorized by state workers' compensation laws.

Individual Rights

Access

You have the right to review your personal information and receive a copy of it, with some limited exceptions. You must submit a written request to access your Personal Information. You should send your request to the contact address listed at the end of this notice. Use the contact information to obtain a form that allows you to make the request.

Amendment

You have the right to request that we amend your personal information. You must submit your request in writing and explain why the information needs to be amended. You must send your request to the contact address at the end of this notice. Use the contact information to obtain a form that allows you to make the request.

We can only refuse your request for certain reasons. If we refuse your request, we will give you a written explanation. If we accept your request, the amendment will become part of your personal information, and we will take reasonable steps to inform third parties who we know may have or rely on the unamended information to your detriment, as well as any individuals you wish to receive the amendment.

Restriction

You have the right to request that we restrict the use or disclosure of your personal information for treatment, payment, or healthcare-related operations, or to family members, friends, or others you identify. We are not required to accept your request. If we do accept it, we will be bound by that agreement except in the case of a medical emergency or as required or authorized by law. You must send your request to the contact address at the end of this notice. Use the contact information to obtain a form that allows you to make the request. Any agreement related to a restriction request must be in writing and signed by a person authorized to bind us to that agreement.

Confidential Communication

You have the right to request that communications with you or related to your personal information be kept confidential by sending them through alternative means or to alternative locations that you specify. You must submit your request in writing and state that the information could endanger you if it is not kept confidential, as you request. You must send your request to the contact address at the end of this notice. Use the contact information to obtain a form that allows you to make the request.

We will grant your request if it is reasonable, specifies alternative means or an alternative location for delivering the confidential information, and continues to allow the collection of premiums and payment of claims under your health plan, including sending explanations of benefits to the plan subscriber.

Please note that an explanation of benefits and other personal information that we send to the subscriber about medical care you received for which you did not request confidential communications, or about medical care received by the subscriber or by third parties covered by the health plan in which you participate, may contain enough information to reveal that you received medical care for which we paid, even though you requested that we communicate with you confidentially regarding that medical care.

Right to Obtain a Paper Copy

If you receive this notice on our website or by email, you have the right to receive this notice in writing. Contact us using the information at the end of this notice to obtain a paper copy.

Questions and Complaints

If you would like more information about our privacy practices or if you have any questions or concerns, please contact us using the information at the end of this notice. If you believe we have violated your right to privacy or if you disagree with any of the decisions we make regarding access to your personal information, in response to your request to amend your personal information, restrict its use or disclosure, or communicate it confidentially, you may file a complaint using the contact information at the end of this notice. We support your right to privacy of your personal information. If you choose to file a complaint with us, we will not take any action against you.

Contact Information:

Sana Sana

Próspero Fernández Highway
600 meters east of Multiplaza Shopping Center
Escazú, San José, Costa Rica
Attention: Legal Department

Phone

+(506) 2103-0450

Email

legal@sanasana.com

WhatsApp Sanasana