HIPAA Notice of Privacy Practices

SunTerra Health, Inc. is committed to protecting your personal and health information. Some of the information collected through projectfoodbox.org may be considered Protected Health Information (PHI) and is subject to the Health Insurance Portability and Accountability Act (HIPAA). This section describes how we use, disclose, and safeguard PHI.

How We Use and Disclose Your PHI

We may use and disclose your PHI for several purposes, including:

  • Treatment: To design tailored nutrition programs and meal selections based on medical or dietary needs you share with us.
  • Program Operations: To improve our services, ensure eligibility, manage your participation, or contact you about updates.
  • Compliance and Legal Requirements: To meet legal obligations, respond to law enforcement, or as required by government agencies.

We do not use or disclose your PHI for purposes not described here without your explicit written authorization. You may revoke your authorization at any time, except to the extent we have already relied on it.

Your Rights Under HIPAA

As a user of our services, you have certain rights regarding your PHI, including:

  • Access: You can request access to your PHI held by us.
  • Amendment: You can ask for corrections if you believe your information is inaccurate or incomplete.
  • Restriction: You may request that we restrict certain uses and disclosures of your PHI, as permitted by law.
  • Accounting: You are entitled to receive an accounting of certain disclosures of your PHI.
  • Communication Preferences: You may request to receive your health information by alternative means or locations.

To exercise your rights or receive more information, contact our Privacy Officer at support@projectfoodbox.org.

Safeguards for Your PHI

We maintain physical, administrative, and technical safeguards to protect your PHI, including:

  • Encryption of electronic data
  • Role-based access controls and regular staff training
  • Secure storage and transmission protocols
  • Breach notification processes, in compliance with HIPAA requirements

Notice Changes and Effective Date

We reserve the right to revise this Notice of Privacy Practices. Updates will be posted on our website with the effective date. The current policy is effective as of September 10, 2025.

Questions or Complaints

If you have questions or concerns about your privacy or feel your rights have been violated, contact our Privacy Officer at support@projectfoodbox.org. You will not be retaliated against for filing a privacy complaint.