PRIVACY, COMPLIANCE & LEGAL

How CuraWound protects patient health information, what this website collects, and the terms that govern your use of it — all in one place.

Effective date: September 9, 2026

Section 1

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. CuraWound is required by the Health Insurance Portability and Accountability Act (HIPAA) to protect the privacy of your protected health information (PHI) and to give you this notice. Please review it carefully.

How we may use and disclose your health information

Treatment

To provide wound care at your facility and coordinate with your attending physician, nursing staff, and other providers involved in your care.

Payment

To bill and collect payment from Medicare, Medicaid, your health plan, or you for services we provide.

Health care operations

For quality review, clinician training, documentation audits, and to improve the care we deliver across facilities.

We may also use or disclose PHI when required by law, for public health activities, to report abuse or neglect, for health oversight, in response to a court order, and in other circumstances permitted by HIPAA. Any other use requires your written authorization, which you may revoke at any time.

Your rights

Inspect and receive a copy of your medical record.

Request an amendment to your record.

Receive an accounting of certain disclosures.

Request restrictions on how we use or share your PHI.

Request confidential communications by a specific method or address.

Receive a paper copy of this notice and be notified of a breach of unsecured PHI.

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer (Section 6) or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Section 2

Website Privacy Policy

This policy covers information collected through curawound.com. It does not cover clinical records, which are governed by the Notice of Privacy Practices above.

What we collect

Details you submit through our contact and partnership forms (name, facility, role, email, phone, message), job-application details submitted through our Apply page, and standard technical data such as browser type, pages visited, and approximate location.

How we use it

To respond to your inquiry, evaluate a facility partnership or job application, improve the website, and send information you have asked for. We do not sell your personal information.

Cookies and analytics

We use essential cookies to make the site work and analytics tools to understand how visitors use it. You can block cookies in your browser settings; parts of the site may not function as intended.

Who we share it with

Service providers that host this website, process form submissions, or deliver email on our behalf, under contracts that limit their use of your information. We may also disclose information when required by law.

Please do not send PHI here

Website forms and email are not secure channels for medical information. Facilities should use the referral process provided by their CuraWound clinical team.

Your choices

You may ask us to access, correct, or delete the information you have submitted through this site by contacting us at the address in Section 6.

Section 3

Data-Driven Care

Precise documentation is part of how we treat wounds. This section explains how CuraWound uses clinical data and what safeguards apply.

Measured at every visit

Wound dimensions, tissue type, exudate, and healing trajectory are recorded in the patient's record so facility staff and physicians can see progress over time.

Shared with the care team

Facility reports are shared only with the partner facility and the clinicians responsible for the patient, as permitted for treatment and operations under HIPAA.

De-identified for quality

Outcome data used for quality improvement, education, or publication is de-identified in accordance with the HIPAA de-identification standard.

Protected in transit and at rest

Clinical data is stored in our clinical documentation system with access controls, audit logs, and encryption; access is limited to staff with a treatment or operational need.

Section 4

Compliance & Non-Discrimination

CuraWound maintains a compliance program covering HIPAA privacy and security, Medicare and Medicaid billing integrity, and clinician licensure and credentialing. Every team member completes compliance training on hire and annually.

Notice of non-discrimination

CuraWound complies with applicable federal civil rights laws and does not discriminate on the basis of race, color, national origin, age, disability, or sex. We provide free aids and services to people with disabilities and free language services to people whose primary language is not English. If you need these services, ask any member of your care team or call 718-400-CURA (2872).

Reporting a concern

Patients, families, facility staff, and employees may report a privacy, billing, or care concern to our Privacy Officer using the contact details in Section 6. Reports are investigated without retaliation.

Business associates

We sign Business Associate Agreements with partner facilities and vendors that handle PHI on our behalf, as HIPAA requires.

Section 6

Contact our Privacy Officer

Mail

Privacy Officer, CuraWound
2250 59th Street
Brooklyn, NY 11204