HIPAA & Data Protection Statement

Core Bio Care is committed to maintaining the privacy, confidentiality, and security of personal and health-related information entrusted to us. This statement explains how Core Bio Care approaches data protection and privacy, including information that may be considered protected health information (PHI).

​

Role of Core Bio Care

Core Bio Care provides non-clinical support services and may act as a supporting or facilitating entity in coordination with licensed healthcare providers, laboratories, or third-party platforms. Core Bio Care does not provide medical care and does not make clinical decisions.

Depending on the service and context, Core Bio Care may interact with PHI to support service delivery. In these cases, Core Bio Care applies privacy and security safeguards consistent with HIPAA principles.

​

HIPAA-Aligned Safeguards

Even when not legally required to do so, Core Bio Care applies HIPAA-aligned administrative, technical, and physical safeguards designed to protect sensitive information from unauthorized access, use, or disclosure.

These safeguards include:

• Secure systems and tools for data storage and communication

• Policies governing access, use, and disclosure of information

• Ongoing review of privacy and security practices

​

Minimum Necessary Access

Core Bio Care limits access to personal and health-related information to the minimum necessary to perform required services. Access is:

• Role-based, meaning individuals only access information needed for their responsibilities

• Reviewed periodically to ensure continued appropriateness

​

Information Sharing & Disclosure

Core Bio Care may share information only when necessary to support services or comply with legal obligations, including with:

• Licensed healthcare providers involved in care

• Laboratories or diagnostic partners

• Third-party service providers supporting secure operations

• Government or regulatory authorities when required by law

Information is not shared for marketing or advertising purposes.

​

Data Security Practices

Core Bio Care uses reasonable and appropriate security measures to protect information, including:

• Secure data storage methods

• Access controls and authentication

• Safeguards against unauthorized disclosure

While no system can guarantee absolute security, Core Bio Care continuously evaluates and strengthens its data protection practices.

​

Breach Awareness & Response

In the event of a suspected or confirmed privacy or security incident involving sensitive information, Core Bio Care will:

• Take prompt steps to contain and assess the situation

• Follow applicable notification requirements

• Review and improve safeguards to prevent recurrence

​

Third-Party Platforms & Partners

Some services may involve third-party platforms, laboratories, or providers. Core Bio Care works with partners that maintain appropriate privacy and security standards; however, each third party is responsible for its own compliance obligations.

​

Your Rights

Individuals may request information about how their data is handled or ask questions regarding privacy and security practices by contacting Core Bio Care through the website.

Additional rights related to PHI are governed by applicable laws and the policies of the healthcare providers or laboratories involved.

​

Changes to This Statement

Core Bio Care may update this HIPAA & Data Protection Statement as practices or requirements evolve. Updates will be posted on the website with the effective date.

​

Related Policies

This statement should be read together with:

• Medical Disclaimer

• Terms of Service

• Privacy Policy

• Consent to Services Policy

​

Acknowledgment

By using Core Bio Care’s website or services, you acknowledge that you have read and understand this HIPAA & Data Protection Statement.