Notice of Privacy Practices

Updated April 2026

Cookies, analytics, and advertising

We do not sell or share your health or personal information. Period.

We use cookies and tracking technologies from Google and Meta on our website. These tools help us understand how visitors find us and allow us to show HerScan ads to people who have previously visited our site. This is standard practice across most consumer websites.

What these tools collect — and what they don't. The data shared with Google and Meta through these tools is limited to technical identifiers like your IP address, browser type, and pages visited. We do not transmit your name, health information, screening results, or any information you provide during the booking process through these tools.

What this means under state privacy law. Residents of California, Colorado, Utah, Virginia, and several other states: your state's privacy law may classify this type of advertising activity as a "sale" or "sharing" of personal data, even though no money changes hands and no health data is involved. We are disclosing this because the law requires it.

Your choices. You can limit this type of tracking in a few ways:

• Manage cookies through your browser settings or a browser extension
• Opt out of Google's ad network at adssettings.google.com
• Opt out of Meta's ad targeting at facebook.com/adpreferences
• Opt out of our newsletter by emailing privacy@herscan.com with the subject line "Opt-Out" or by unsubscribing directly from our emails

Please note: opting out of targeted advertising means you may see fewer HerScan ads, but you may still see HerScan ads based on context (for example, if you search for breast health information). We cannot guarantee you will never see a HerScan ad.

Health Information

Notice of Privacy Practices

Protected Health Information (PHI)

As required by HIPAA (Health Insurance Portability and Accountability Act of 1996)

A. Our Commitment to Your Privacy

HerScan, LLC is committed to maintaining the privacy of your individually identifiable health information—also called protected health information, or PHI.

In conducting our business, we create records regarding you and the screening services we provide. We are required by law to:

• Maintain the confidentiality of health information that identifies you
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the Notice of Privacy Practices currently in effect

We reserve the right to revise or amend this Notice. Any revision will apply to all records our company has created or maintained—past and future. A current copy of this Notice will be posted at all screening sessions and is available upon request.

B. Questions About This Notice

If you have any questions about this Notice or your privacy rights, please contact:

Privacy Officer, HerScan, LLC

404 Indian Rocks Rd. N., Belleair Bluffs, FL 33770

Phone: 1-800-338-7499

Email: privacy@herscan.com

Fax: 727-533-5400

www.HerScan.com

C. How We May Use and Disclose Your PHI

The following describes the ways in which we may use or disclose your health information:

1. Screening Operations.

We may use and disclose your PHI to operate our business—for example, to share your information with the physicians who review your screening results, and to conduct cost management and business planning activities.

2. Notification of Results.

We may use and disclose your PHI to inform you of the results of your screening.

3. Disclosures Required by Law.

We will use and disclose your PHI when required to do so by federal, state, or local law.

D. Your Rights Regarding Your PHI

You have the following rights regarding the health information we maintain about you. To exercise any right that requires a written request, please contact our Privacy Officer (see Section B for contact information).

1. Confidential Communications. You have the right to request that we communicate with you about your health in a particular way or at a specific location (for example, contacting you at home rather than at work). Submit your request in writing, specifying your preferred method or location of contact. You do not need to provide a reason. We will accommodate reasonable requests.
2. Requesting Restrictions. You have the right to request a restriction on how we use or disclose your PHI for screening, payment, or operations. You may also request that we limit disclosure to specific individuals involved in your care or payment, such as family members. We are not required to agree to your request, but if we do, we are bound by that agreement except when otherwise required by law or in an emergency. Your written request must clearly describe: (a) the information you wish restricted, (b) whether you are limiting use, disclosure, or both, and (c) to whom the limits apply.
3. Inspection and Copies. You have the right to inspect and obtain a copy of the PHI used in your screening operations, including screening records and billing records. Submit your request in writing. We may charge a fee for the costs of copying, mailing, labor, and supplies.
4. Amendment. You may ask us to amend your health information if you believe it is incorrect or incomplete. Requests must be made in writing and include the reason supporting your request. We may deny your request if the information is: (a) accurate and complete in our opinion, (b) not part of the PHI we maintain, (c) not part of the PHI you are permitted to inspect or copy, or (d) not created by our company and the original creator is unavailable to make the amendment.
5. Accounting of Disclosures. You have the right to request an “accounting of disclosures”—a list of certain non-routine disclosures of your PHI made for purposes not related to screening, payment, or operations. Routine internal disclosures (such as a technician sharing information with a radiologist) are not included. Your written request must specify a time period of no longer than six (6) years and may not include dates before April 14, 2015. The first request within a 12-month period is free; additional requests may incur a fee. We will notify you of any costs before processing.
6. Paper Copy of This Notice. You are entitled to receive a paper copy of this Notice at any time, free of charge. Contact our Privacy Officer to request one.
7. Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with HerScan or with the Secretary of the U.S. Department of Health and Human Services. All complaints must be submitted in writing. You will not be penalized for filing a complaint.
8. Authorization for Other Uses and Disclosures. We will obtain your written authorization for any uses or disclosures not identified in this Notice or permitted by applicable law. You may revoke any authorization at any time in writing. After revocation, we will no longer use or disclose your PHI for the reasons described in that authorization. Please note that we are required to retain records of our services.
9. SMS Communications Consent. By providing your mobile phone number, you consent to receive SMS messages from HerScan LLC, including appointment confirmations, reminders, service updates, and promotional content. Message frequency may vary. Standard message and data rates may apply. You may opt out at any time by replying “STOP.” For assistance, reply “HELP” or call 1-800-338-7499. Your SMS consent and mobile number will not be shared with third parties for their own marketing purposes. We use trusted service providers, including RingCentral, to securely send messages on your behalf.

All written requests described in this Notice should be directed to our Privacy Officer at the address listed in Section B.