Website Privacy Policy

Effective date: 6 October 2026  ·  Last updated: 6 October 2026

OSYWIN Healthcare Services Limited
113 Gloucester Blvd, Middletown, DE 19709
Telephone: 302-696-6238  ·  Email: osywinhc@gmail.com
Website: osywinhealthcare.com

1. Purpose

OSYWIN Healthcare Services Limited ("Osywin," "we," "us," or "our") is committed to protecting the privacy and security of individuals who visit or interact with our website. This Website Privacy Policy explains how Osywin collects, uses, maintains, protects, and discloses information obtained through our website.

Osywin provides behavioral health, mental health, substance use disorder ("SUD"), recovery, counseling, care coordination, and related services. Because of the sensitive nature of these services, Osywin recognizes the importance of protecting information concerning mental health, substance use, treatment, and other personal information.

This Website Privacy Policy applies to information collected through the public website and related online services. It does not replace or modify Osywin's:

• HIPAA Notice of Privacy Practices;
• 42 CFR Part 2 Patient Notice;
• Patient Rights policies;
• Telehealth policies;
• Consent forms;
• Authorization for Release of Information forms; or
• Other applicable clinical or privacy policies.

Where information constitutes Protected Health Information ("PHI") or a substance use disorder patient record subject to 42 CFR Part 2, the applicable federal and state privacy requirements and Osywin's applicable patient privacy notices govern.

2. Information we may collect

Depending upon how an individual interacts with our website, Osywin may collect information including:

2.1 Information voluntarily provided

Individuals may voluntarily provide:

• Name;
• Address;
• Telephone number;
• Email address;
• Preferred method of communication;
• Appointment-request information;
• Referral information;
• Insurance information;
• Employment information;
• General information regarding services requested;
• Information submitted through contact forms; and
• Other information voluntarily submitted by the individual.

2.2 Sensitive health information

This includes, but is not limited to:

• Psychiatric diagnoses;
• Substance use history;
• Medication information;
• Treatment history;
• Trauma history;
• Mental health symptoms;
• Medical conditions;
• Laboratory results;
• Information regarding another person's treatment; or
• Other highly sensitive health information.

Unless Osywin specifically identifies a particular electronic communication method as secure and appropriate for clinical information, individuals should use the designated secure patient portal or other approved communication method.

2.3 Automatically collected information

When individuals visit the website, certain technical information may be automatically collected, including:

• Internet Protocol ("IP") address;
• Browser type;
• Device type;
• Operating system;
• Date and time of website access;
• Pages visited;
• Referring website;
• General geographic information;
• Website interaction information; and
• Technical information necessary for website security and operation.

3. How we use information

Osywin may use information collected through the website to:

1. Respond to inquiries;
2. Respond to requests for information;
3. Process appointment requests;
4. Provide information regarding services;
5. Communicate with individuals regarding requested services;
6. Process employment inquiries and applications;
7. Maintain website functionality;
8. Monitor website security;
9. Prevent unauthorized access or misuse;
10. Improve website performance and user experience;
11. Comply with applicable legal and regulatory requirements; and
12. Perform other purposes disclosed when information is collected.

Osywin will not knowingly use information collected through the website for purposes materially inconsistent with the purposes disclosed to the individual, except where permitted or required by applicable law.

4. Protected Health Information

When an individual becomes a patient of Osywin, information created, received, maintained, or transmitted in connection with treatment may constitute PHI. PHI is subject to applicable federal and state privacy requirements, including, as applicable:

• HIPAA;
• 45 CFR Parts 160 and 164;
• 42 U.S.C. § 290dd-2;
• 42 CFR Part 2;
• Applicable Delaware law; and
• Other applicable confidentiality requirements.

The handling of PHI is governed by Osywin's applicable HIPAA Notice of Privacy Practices and other applicable privacy policies.

5. Substance use disorder information

Osywin may provide substance use disorder services. Certain SUD records may be subject to the federal confidentiality requirements of 42 CFR Part 2.

Nothing in this Website Privacy Policy is intended to waive, reduce, or otherwise alter any confidentiality protection applicable to SUD records. Osywin will handle applicable SUD records in accordance with federal and state requirements and its applicable Part 2 Patient Notice.

6. Cookies and website technologies

The website may use cookies and similar technologies for legitimate operational purposes. These technologies may assist with:

• Website functionality;
• Security;
• Session management;
• User preferences;
• Website performance;
• Traffic analysis; and
• Website improvement.

Osywin will evaluate website tracking, analytics, advertising, and similar technologies before implementation to determine whether their use is appropriate considering the sensitive nature of behavioral health and SUD information.

Users may be able to control certain cookies through their browser settings.

7. Website analytics and tracking

Osywin may use website analytics tools to understand general website usage and improve the website. Osywin will seek to configure analytics and tracking technologies in a manner that minimizes unnecessary collection or disclosure of sensitive information. Osywin will not intentionally use website analytics technology to disclose confidential patient information.

Because the Federal Trade Commission requires businesses to honor privacy representations concerning health information and may apply its Health Breach Notification Rule to certain health-information technologies, Osywin will periodically review its website technology and vendor practices.

8. Third-party service providers

Osywin may use third-party vendors to support website and business operations, including vendors providing:

• Website hosting;
• Website security;
• Information technology;
• Appointment scheduling;
• Electronic communications;
• Patient portal services;
• Payment processing;
• Analytics;
• Cloud services; and
• Other administrative services.

Where applicable, Osywin will use appropriate contractual and security safeguards. Where a third party qualifies as a HIPAA business associate and receives PHI on behalf of Osywin, Osywin will use a Business Associate Agreement when required by law.

9. Email and text communications

Individuals who provide an email address or telephone number may be contacted in response to an inquiry or request for services. Ordinary email and text messaging may not provide the same level of security as Osywin's designated secure communication systems.

Individuals should not send highly sensitive clinical information through ordinary email or text messaging unless Osywin has specifically authorized that communication method.

10. Telehealth

Osywin may offer telehealth services where clinically appropriate and legally permitted. Telehealth communications will be conducted through technology selected by Osywin. Patients receiving telehealth services may be required to complete a separate telehealth consent and comply with applicable telehealth procedures.

11. Emergency communications

12. Information security

Osywin maintains reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction. No electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, Osywin cannot guarantee absolute security for information transmitted through the public internet.

13. Data retention

Osywin retains website information for periods reasonably necessary to accomplish the purposes for which it was collected and to satisfy applicable legal, regulatory, business, security, and record-retention requirements. Clinical records are retained according to applicable federal and Delaware requirements, licensing requirements, and Osywin's record-retention policies.

14. Data breaches

Osywin maintains procedures for responding to suspected or confirmed information-security incidents. Where a breach is determined to require notification under applicable law, Osywin will provide notification in accordance with the applicable legal requirements. Depending upon the type of information and entity involved, applicable requirements may include HIPAA breach notification requirements or the FTC Health Breach Notification Rule.

15. Minors

Osywin provides services to adults aged 18 and over. Osywin does not provide treatment services to minors.

The website is not directed to children, and Osywin does not knowingly collect information through the website from individuals under 18. If Osywin becomes aware that information has been submitted through the website by or about a minor, Osywin will handle that information in accordance with applicable law.

Where mandatory reporting obligations arise, including suspected child abuse or neglect disclosed in the course of providing services to an adult, Osywin follows applicable federal and Delaware reporting requirements.

16. Individual privacy rights

Depending on the information involved and applicable law, individuals may have rights concerning their information, including rights to:

• Request access;
• Request amendment or correction;
• Request restrictions;
• Request confidential communications;
• Obtain applicable privacy notices;
• File privacy complaints; and
• Exercise other rights provided by applicable law.

Specific rights concerning PHI and Part 2 records are addressed in Osywin's applicable privacy notices.

17. Privacy complaints

Privacy concerns may be submitted to:

Privacy Officer
OSYWIN Healthcare Services Limited
113 Gloucester Blvd, Middletown, DE 19709
Telephone: 302-696-6238
Email: osywinhc@gmail.com

Osywin prohibits retaliation against an individual for submitting a privacy complaint in good faith. Individuals may also have rights to submit complaints to the U.S. Department of Health and Human Services Office for Civil Rights where applicable.

18. Third-party websites

The website may contain links to websites operated by third parties. Osywin does not control third-party websites and is not responsible for their content, privacy practices, security, terms of use, or availability. Users should review the privacy policies of third-party websites before providing information.

19. Changes to this policy

Osywin may periodically update this Website Privacy Policy. The revised policy will be posted on this website with an updated "Last Updated" date.

20. Contact information

Questions regarding this Website Privacy Policy should be directed to:

Privacy Officer
OSYWIN Healthcare Services Limited
113 Gloucester Blvd, Middletown, DE 19709
Telephone: 302-696-6238
Email: osywinhc@gmail.com