Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY

Last Updated: July 21, 2025

‍

OVERVIEW

This Notice of Privacy Practices (the “Notice”) will tell you about the ways Loula Perinatal Health Services and the doula professionals providing professional services through Loula Perinatal Health Services (“Loula Providers”) (collectively the “Practice”), and its affiliates (including, Onu Wellness, Inc., acting as a HIPAA Business Associate to the Practice) (collectively, “Loula,” “we,” “us,” and “our”), may disclose health information about you. This Notice will also describe your rights and certain obligations that we have regarding the use and disclosure of your health information.

Loula is a perinatal health platform that offers services (including professional services provided by Loula Providers) across multiple legal entities, which are referred to by the HIPAA Privacy Rule as an "organized health care arrangement" (OHCA). Loula Providers listed on this website provide healthcare services via telehealth and/or in person. Loula’s legal entities share protected health information with each other, only as necessary, to carry out Loula’s treatment, payment, and health care operations, and for other purposes permitted or required by law under the Health Insurance Portability and Accountability Act (“HIPAA”). All entities that comprise Loula agree to comply with the terms of this Notice.

This Notice applies only to health information that is “protected health information” (PHI) as defined by HIPAA. It does not apply to information not covered by HIPAA. Please see Loula’s Privacy Policy for terms that apply to non-HIPAA-covered products and services.

We are required by law to:

• Make sure that health information that identifies you is kept private
• Give you this Notice of our legal duties and privacy practices with respect to your health information
• Notify you following a breach of your unsecured protected health information
• Follow the terms of the Notice currently in effect

Although this Notice is being provided to you electronically, you have the right to request a paper copy at any time.

We reserve the right to change our privacy practices and the terms of this Notice at any time and to make those changes effective for all protected health information that we maintain. You may obtain a copy of the revised Notice on our website.

This Notice is effective as of July 21, 2025.

‍

HOW YOUR INFORMATION IS USED

We may use and disclose your health information for purposes such as treatment, payment, and health care operations. These are necessary activities for quality care, and both state and federal laws allow such uses.

Examples:

• Providing doula support: If your doula refers you to another doula in the Practice, we may share health information to support continuity of care.
• Insurance and coverage verification: Loula or its business associates may use and disclose information to confirm your coverage for services.
• Payment: Loula may submit claims to your insurer for reimbursement, which requires use of your health information.
• Operations: Loula may use your information for internal audits, quality reviews, staff training, and to improve our digital services and patient experience.

Other uses and disclosures (e.g., marketing, selling information, or sharing visit notes) require your written authorization unless an exception applies. You may revoke such authorization in writing at any time, except to the extent we have already relied on it.

‍

DISCLOSURES THAT CAN BE MADE WITHOUT AN AUTHORIZATION

We may use or share your health information without your authorization in the following circumstances:

• Emergencies
• Judicial and Administrative Proceedings
• Public Health Activities
• Reporting Child/Elder Abuse or Neglect
• Criminal Activity or Danger to Others
• Health Oversight Activities
• Business Associates
• Trusted Exchange Framework and Common Agreement (TEFCA)
• Research (in limited cases and often in de-identified form)
• Marketing (only for Loula’s services, unless otherwise authorized)
• Patient communications (details below)

‍

Emergencies. Sufficient information may be shared to address an immediate emergency you are facing.

Judicial and Administrative Proceedings. We may disclose your personal health information in the course of a judicial or administrative proceeding in response to a valid court order or other lawful process, including if you were to make a claim for Workers Compensation.

Public Health Activities. If we felt you were an immediate danger to yourself or others, we may disclose health information about you to the authorities, as well as alert any other person who may be in danger.

Child/Elder Abuse. We may disclose health information about you related to the suspicion of child and/or elder abuse or neglect.

Criminal Activity or Danger to Others. We may disclose health information if a crime is committed on our premises or against our personnel, or if we believe there is someone who is in immediate danger.

Health Oversight Activities. We may disclose health information to a health oversight agency for activities authorized by law. These activities might include audits or inspections and are necessary for the government to monitor the health care system and assure compliance with civil rights laws. Regulatory and accrediting organizations may review your case record to ensure compliance with their requirements. The minimum necessary information will be provided in these instances.

Business Associates. The Practice may disclose the minimum necessary health information to our business associates that perform functions on our behalf or provide us with services if the information is necessary for such functions or services. For example, the Practice contracts with a vendor for filing claims with insurance companies. In the process of filing claims, that organization will come into contact with your information. All of our business associates sign agreements to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract, and are obligated to promptly notify us in the event there is a breach of protected health information (as defined by HIPAA).

Trusted Exchange Framework and Common Agreement (“TEFCA”). The Practice or its business associates may disclose health information through a TEFCA for HIPAA-authorized treatment purposes, subject to contractual agreements to protect the privacy and security of health information as required by HIPAA, in order to manage or coordinate your health care, arrange for additional services, and/or for our health care operations.

Research. Under certain circumstances, we may use and disclose health information for research. We may permit researchers to look at non-identifying information to help them plan research projects.

Marketing related to Loula services. We may send you newsletters or information about services we provide in which we feel you might be interested. You may at any time request that your name be removed from our mailing list.

Patient communications. We may email or call you to remind you about visits and confirm visit details.

‍

YOUR INDIVIDUAL RIGHTS

1. Right to Inspect and Copy. You have the right to look at or get copies of your health information, with limited exceptions. Your request must be in writing. If you request a copy of the information, a reasonable charge may be made for the costs incurred.
2. Right to Amend. You have the right to request that we amend your health information. Your request must be in writing, and it must explain why the information should be amended. We have the right to deny your request under certain circumstances.
3. Right to an Accounting of Disclosures. You have the right to receive a list of instances in which we have disclosed your health information for a purpose other than treatment, payment, or health care operations. To request an accounting of disclosures, you must submit your request in writing to the Privacy Officer. Such accountings remain available for six years after the last date of service at the Practice.
4. Right to Request Restrictions. You have the right to request a restriction or limitation on the health information we use or disclose about you. To request a restriction, you must make your written request to the Privacy Officer. We are not required to agree to your request, but we will consider the request very seriously. If we agree, we will abide by our agreement unless the information is needed in an emergency or by law.
5. Right to Request Confidential Communications. You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may ask that we contact you only by mail or at work. You must make this request in writing and it must specify the alternative means or location that you would like us to use to provide you information about your health care. We will make every attempt to accommodate reasonable requests.
6. Right to File Complaints. You may complain to us and to the Secretary of Health and Human Services if you believe your privacy rights have been violated. You may file a complaint with us by contacting the Privacy Officer at compliance@joinloula.com or (516) 518-5063. You will not be retaliated against for filing a complaint. You may also contact the Privacy Officer for further information about this notice.

‍

EMAIL AND TEXT MESSAGES

Some of our clients prefer to communicate with their provider via email or text message. Email and text messages have inherent privacy and security risks, and you should be aware of those before using emails and text messages. Errors in transmission or interception of messages can occur. Your email or text message is not a secure communication between you and your provider. At your provider’s discretion, your email or text message any and all responses may become part of your medical record. Additionally, for urgent or an emergency situation, you should not rely on email communication with providers affiliated with the Practice. In those situations, you should call 911.

‍

ABOUT LOULA AND ITS AFFILIATED PROFESSIONAL ENTITIES

Onu Wellness, Inc. (and its subsidiaries and affiliated companies, including, but not limited to, Loula Perinatal Health Services of California LLC) does not provide professional healthcare services. Subject to applicable HIPAA Privacy Rule protections (including a Business Associate Agreement), it provides only administrative, billing, payment, technical, quality and compliance oversight, and other non-clinical support services necessary for clients to receive professional healthcare services from a Loula Provider. These non-clinical support services allow Loula Providers to concentrate on offering professional healthcare services to clients as independent contractors.

‍