Privacy and Policy

FemmeKare is a telehealth service operated by SDKare LLC. For purposes of this Privacy Policy, references to “FemmeKare,” “we,” “us,” or “our” mean SDKare LLC in connection with the operation and provision of services through FemmeKare. 

SDKare LLC is committed to protecting the privacy and security of personal information collected, used, maintained, and disclosed in connection with FemmeKare. 

This Privacy Policy describes the categories of personal information we collect, the sources from which we obtain it, the purposes for which we use it, the circumstances in which we may disclose it, our data-retention practices, the privacy rights that may be available to you, and the methods available for contacting us regarding privacy matters. 

This Privacy Policy applies to personal information collected through the FemmeKare website, appointment scheduling, telehealth-related interactions, communications, payment and billing activities, support services, and other services that reference or link to this Policy. 

Information that constitutes Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) is also subject to our HIPAA Notice of Privacy Practices. To the extent there is any conflict between this Privacy Policy and the HIPAA Notice of Privacy Practices with respect to PHI, the HIPAA Notice of Privacy Practices will control. 

2. Information We Collect

The information we collect depends on how you interact with FemmeKare. 

Contact and Identifying Information 

We may collect information such as: 

• Name 

• Email address 

• Telephone number 

• Date of birth 

• Mailing address, when needed 

• Account or patient identifiers 

Appointment and Service Information 

We may collect information relating to: 

• Appointment requests 

• Scheduled visits 

• Appointment dates and times 

• Service selections 

• Provider information 

• Cancellations and rescheduling 

• Customer-support interactions 

Health and Healthcare Information 

When you request or receive healthcare services, we may collect information reasonably necessary to coordinate or provide care, including: 

• Symptoms and health concerns 

• Medical and mental health history 

• Current or previous treatments 

• Medications 

• Allergies 

• Health questionnaires 

• Medical records 

• Clinical communications 

• Other information relevant to your care 

Health information that qualifies as PHI is handled according to HIPAA and our Notice of Privacy Practices. 

Billing and Transaction Information 

We may collect: 

• Billing contact information 

• Transaction information 

• Payment status 

• Refund information 

• Information necessary to process or reconcile payments 

Payment card information may be processed by payment-service providers used to complete transactions. 

Communications 

We may collect information you provide through: 

• Email 

• Text messages 

• Website forms 

• Support requests 

• Appointment communications 

• Other communications with FemmeKare 

Device and Website Information 

When you use our website, certain technical information may be collected automatically, including: 

• IP address 

• Browser type 

• Device type 

• Operating system 

• Pages viewed 

• Date and time of access 

• Referring website or page 

• Website interactions 

• Cookie and similar technology information 

2. Sources of Personal Information

We may receive personal information from: 

• You directly 

• Your browser or device 

• Healthcare providers involved in your care 

• Service providers acting on our behalf 

• Payment processors 

• Scheduling and communications providers 

• Other persons or sources you authorize 

Information received or maintained as PHI is handled according to HIPAA and our Notice of Privacy Practices. 

3. Sensitive Personal Information

Because FemmeKare provides healthcare services, some information we handle may be considered sensitive under applicable privacy laws. 

Depending on the services you use, sensitive information may include: 

• Health information 

• Reproductive and women’s health information 

• Mental health information 

• Account credentials 

• Financial information used for payments 

• Certain identifying information 

• Precise geolocation information, if collected where necessary for a service or legal requirement 

We use sensitive personal information only for purposes reasonably necessary to provide healthcare and related services, administer our operations, maintain security, process authorized transactions, comply with legal requirements, or for other purposes permitted by law. 

PHI is not used or disclosed for purposes prohibited by HIPAA. 

4. How We Use Personal Information

We may use personal information to: 

• Provide and administer FemmeKare services 

• Schedule and manage appointments 

• Facilitate telehealth visits 

• Verify patient information when necessary 

• Support healthcare providers 

• Communicate about appointments and services 

• Process payments and refunds 

• Respond to questions and support requests 

• Maintain accounts and appropriate records 

• Operate and improve our website and services 

• Maintain security 

• Detect or prevent fraud, misuse, or unauthorized access 

• Meet healthcare, privacy, financial, regulatory, and other legal obligations 

• Send marketing or promotional communications where permitted by law and consistent with your preferences 

PHI is used and disclosed only as permitted by HIPAA, our Notice of Privacy Practices, and other applicable healthcare privacy laws. 

5. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to provide services, operate FemmeKare, or comply with law. 

Healthcare Providers 

Information may be disclosed to licensed healthcare professionals involved in your care or care coordination. 

Service Providers 

We may provide information to vendors that support functions such as: 

• Payment processing 

• Scheduling 

• Communications 

• Website and technology operations 

• Data hosting 

• Security 

• Customer support 

• Other administrative functions 

Service providers receive information reasonably necessary to perform services on our behalf and are subject to applicable contractual and legal requirements. 

HIPAA Business Associates 

Where a third party creates, receives, maintains, or transmits PHI on behalf of SDKare LLC, appropriate Business Associate Agreements and HIPAA safeguards are used when required by law. 

Legal and Regulatory Disclosures 

Information may be disclosed where required or permitted by law, including to: 

• Government agencies 

• Regulatory authorities 

• Courts 

• Law-enforcement authorities 

• Other parties involved in valid legal proceedings 

PHI is disclosed only as permitted by HIPAA and other applicable healthcare privacy laws. 

With Your Authorization or Direction 

We may disclose information when you specifically authorize or direct us to do so. 

6. Protected Health Information and HIPAA

SDKare LLC protects PHI collected or maintained through FemmeKare in accordance with applicable HIPAA requirements. 

Our HIPAA Notice of Privacy Practices explains: 

• How PHI may be used and disclosed 

• Your rights regarding your medical information 

• How to request access to health records 

• How to request amendments to health records 

• How to request restrictions 

• How to request confidential communications 

• How to request an accounting of certain disclosures 

• Our legal responsibilities regarding PHI 

• How to file a privacy complaint 

• How to contact our Privacy Officer 

This Privacy Policy does not replace the HIPAA Notice of Privacy Practices. 

You may request a copy of the Notice of Privacy Practices at any time. 

7. Cookies and Similar Technologies

The FemmeKare website may use cookies and similar technologies to support functions such as: 

• Website operation 

• Security 

• Remembering user preferences 

• Understanding website performance 

• Troubleshooting 

• Improving website functionality 

You may be able to control certain cookies through your browser settings or privacy controls made available on the website. 

Where information collected through website technologies constitutes PHI, SDKare LLC handles that information according to HIPAA and applicable HHS requirements. 

We do not authorize third parties to use PHI for purposes that are prohibited by HIPAA. 

8. Sale, Sharing, and Targeted Advertising

SDKare LLC does not sell PHI. 

SDKare LLC does not sell SMS opt-in information or consent information to third parties for their independent marketing purposes. 

If non-PHI personal information is processed in a manner that constitutes a sale, sharing, or targeted advertising under an applicable state privacy law, we will provide the disclosures and opt-out methods required by that law. 

Where applicable law requires recognition of a legally valid browser-based opt-out preference signal, such as a Global Privacy Control signal, we will comply with that requirement for processing to which the law applies. 

9. Communications

We may contact you regarding: 

• Appointment confirmations 

• Appointment reminders 

• Scheduling changes 

• Service-related updates 

• Billing and payment matters 

• Customer-support requests 

• Account or administrative notices 

• Healthcare-related communications 

• Marketing or promotional communications where permitted 

You may unsubscribe from marketing emails using the unsubscribe instructions included in the communication. 

Opting out of promotional communications does not prevent us from sending messages that are reasonably necessary for healthcare, appointment administration, safety, payments, transactions, or account management. 

10. SMS and Text Messages

If you consent to receive text messages from FemmeKare, we may use your telephone number and related consent information to provide those communications. 

Message frequency may vary. Message and data rates may apply depending on your mobile carrier and plan. 

SMS consent and opt-in information will not be sold or disclosed to third parties for their independent marketing purposes. 

You may opt out of promotional text messages by replying STOP. 

After an opt-out request, you may receive a confirmation message. Communications that are legally permitted and necessary for healthcare, safety, or transactional purposes may continue where applicable.

11. Payment Information

Payment information may be processed through third-party payment processors used by SDKare LLC. 

We may use payment-related information to: 

• Process authorized charges 

• Confirm payments 

• Process eligible refunds 

• Maintain transaction records 

• Address billing questions 

• Investigate duplicate or disputed transactions 

• Meet accounting, tax, and legal requirements 

Additional terms are provided in the FemmeKare Payment Policy for Clients and Refund Policy. 

12. Deidentified and Aggregated Information

Where permitted by law, SDKare LLC may create or use aggregated or deidentified information that does not reasonably identify an individual. 

Such information may be used for lawful purposes such as: 

• Quality improvement 

• Service improvement 

• Operational analysis 

• Reporting 

• Security 

• Analytics 

• Research where legally permitted 

When HIPAA applies, PHI is de-identified only in accordance with applicable HIPAA requirements.

13. Data Security

SDKare LLC uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, loss, alteration, or disclosure. 

Electronic PHI is protected through safeguards maintained in accordance with applicable HIPAA Security Rule requirements. 

No electronic transmission, information system, or storage method can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

14. Privacy and Security Incidents

SDKare LLC maintains procedures for identifying, investigating, documenting, and responding to privacy and security incidents. 

If an incident constitutes a reportable breach of unsecured PHI, affected individuals will be notified in accordance with the HIPAA Breach Notification Rule. 

Where HIPAA requires individual notification, notice will be provided without unreasonable delay and no later than 60 days after discovery of the reportable breach. 

We will also provide any regulatory, governmental, or other notices required by applicable federal or state law. 

 

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law. 

Retention considerations may include: 

Health and Medical Records 

Healthcare records are retained in accordance with applicable federal requirements, state medical-record retention laws, professional requirements, and applicable record-retention policies. 

Billing and Transaction Records 

Billing and transaction information may be retained as needed for: 

• Accounting 

• Tax obligations 

• Fraud prevention 

• Legal compliance 

• Payment disputes 

• Recordkeeping requirements 

Account and Contact Information 

Account and contact information may be retained while you maintain a relationship with FemmeKare and afterward where reasonably necessary for legal, operational, compliance, or recordkeeping purposes. 

Website and Technical Information 

Website and technical records may be retained for periods reasonably necessary for: 

• Security 

• Troubleshooting 

• Website operations 

• Fraud prevention 

• Analytics where permitted 

Consent and Compliance Records 

Records relating to consent, privacy requests, communication preferences, opt-outs, and material compliance activities may be retained as necessary to document compliance with applicable law. 

A deletion request does not require us to delete information that we are legally required or otherwise permitted to retain. 

16. Your Privacy Rights

Depending on where you live, the type of information involved, and whether an applicable privacy law covers SDKare LLC and the relevant processing, you may have rights regarding your personal information. 

These may include the right to: 

• Confirm whether we process your personal information 

• Access personal information we maintain about you 

• Correct inaccurate personal information 

• Request deletion of certain information 

• Obtain a portable copy of certain information 

• Obtain certain information about disclosures to third parties 

• Opt out of qualifying sales or targeted advertising 

• Opt out of certain qualifying profiling 

• Limit certain uses of sensitive personal information where applicable 

• Appeal certain decisions regarding privacy requests 

• Exercise applicable privacy rights without unlawful discrimination 

These rights may be subject to legal exceptions. 

PHI governed by HIPAA and certain other healthcare information may be exempt from some state consumer privacy laws. HIPAA rights relating to PHI are described separately in our Notice of Privacy Practices. 

California Privacy Rights 

Where the California Consumer Privacy Act, as amended, applies, California residents may have rights to: 

• Know the categories of personal information collected 

• Know the categories of sources from which personal information is collected 

• Know the purposes for which information is collected, used, or disclosed 

• Know the categories of third parties to whom information is disclosed 

• Access specific pieces of personal information 

• Request correction of inaccurate information 

• Request deletion, subject to applicable exceptions 

• Opt out of qualifying sales or sharing 

• Limit certain uses or disclosures of sensitive personal information 

• Exercise applicable rights without discriminatory treatment 

Where California law requires a Notice at Collection, the applicable notice will be provided at or before the point at which the relevant personal information is collected. 

Residents of Other States 

Residents of other U.S. states may have additional privacy rights under applicable law. 

We will process eligible requests according to the law applicable to the individual, SDKare LLC, and the information involved. 

17. How to Exercise Your Privacy Rights

For applicable consumer privacy requests involving information that is not governed exclusively by our HIPAA Notice of Privacy Practices, contact: 

Sophie Brown
Patient Care Manager and Privacy Officer
SDKare LLC, operating FemmeKare
Email: sophie.brown@femmekare.com 

Please identify the privacy right you wish to exercise and provide information reasonably necessary for us to locate the relevant records. 

We may take reasonable steps to verify your identity before completing a request. 

You are not required to create a new FemmeKare account solely to submit a privacy request. 

Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may request documentation showing that the agent is authorized to act for you. 

If applicable law provides a right to appeal our decision regarding a privacy request, information about the appeal process will be provided with our response. 

Requests specifically involving PHI or HIPAA rights should be submitted according to the procedures described in our HIPAA Notice of Privacy Practices. 

18. Business Transfers

If SDKare LLC is involved in a merger, acquisition, restructuring, financing transaction, sale of assets, bankruptcy, or similar business transaction, personal information may be transferred as part of that transaction where permitted by law. 

PHI will remain subject to applicable HIPAA requirements.

19. Legal, Safety, Security, and Fraud Prevention

We may use or disclose personal information where reasonably necessary and permitted by law to: 

• Comply with legal obligations 

• Respond to valid legal process 

• Protect patients, providers, personnel, or others 

• Protect our rights, systems, or property 

• Prevent or investigate fraud 

• Detect or respond to security incidents 

• Prevent misuse of our services 

PHI is handled according to HIPAA and other applicable healthcare privacy requirements. 

20. Third-Party Websites and Services

The FemmeKare website may contain links to websites or services operated by independent third parties. 

SDKare LLC does not control the privacy or security practices of independent third-party websites and is not responsible for their privacy practices. 

We encourage you to review the applicable privacy policies before providing personal information directly to an independent third party. 

This section does not limit our legal obligations regarding vendors or Business Associates that process information on our behalf. 

21. Children’s Privacy

FemmeKare healthcare services are intended for adults 18 years of age or older. 

We do not knowingly offer FemmeKare healthcare services to individuals under 18. 

If we learn that information from a minor was collected through FemmeKare in a manner inconsistent with this Policy or applicable law, we will take appropriate steps to address the information. 

22. Changes to This Privacy Policy

SDKare LLC may update this Privacy Policy to reflect changes in: 

• Privacy practices 

• Healthcare services 

• Technology 

• Business operations 

• Legal or regulatory requirements 

When this Policy changes, the Last Updated date at the top of the page will be revised. 

Where applicable law requires additional notice or consent for a material change, we will provide it.

23. Privacy Officer and Contact Information

Questions about this Privacy Policy, privacy practices, consumer privacy requests, or concerns involving PHI may be directed to: 

Sophie Brown
Patient Care Manager and Privacy Officer
SDKare LLC, operating FemmeKare
Email: sophie.brown@femmekare.com 

For general FemmeKare inquiries: 

FemmeKare, operated by SDKare LLC
Email: support.contact@femmekare.com 

Mailing address: 2810 N Church St, Wilmington, DE, United States, 19802
Phone: (520) 800-6043   

For additional information about how SDKare LLC uses and discloses PHI through FemmeKare and about your rights under HIPAA, please review our HIPAA Notice of Privacy Practices.