Privacy Policy

1. Who We Are

The Boob Bus, LLC ("The Boob Bus," "we," "us," or "our") is a mobile mammography service headquartered at 10927 S Wood Cir, South Jordan, UT 84095. We provide 3D screening mammograms at employer, community, and private events across Utah and surrounding states. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at theboobbus.com (the "Site"), book an appointment, or interact with our services.

2. Information We Collect

a. Information You Provide

• Booking & Patient Information: First and last name, email address, phone number, date of birth, mailing address, insurance plan information, payment method preference, mammogram history, breast implant status, pregnancy/breastfeeding status, and referring provider name.
• Inquiry & Contact Forms: Name, email, phone, company name, and message content submitted through our contact and employer inquiry forms.
• Waitlist Information: Name, email, and phone number when you join a waitlist for a full event.

b. Information Collected Automatically

• Booking Analytics: Anonymous session identifiers and booking-flow step data to improve the appointment scheduling experience. No personally identifiable information is linked to analytics data.
• Standard Web Data: Browser type, device type, pages visited, and referring URL via standard server logs.

c. Information We Do Not Collect

We do not collect Social Security numbers, financial account numbers, or diagnostic imaging results through this Site. Mammogram images and radiology reports are handled by our licensed radiology partners under their own HIPAA-compliant systems.

3. How We Use Your Information

• Schedule, confirm, and manage your mammogram appointment.
• Send appointment confirmation emails, calendar invitations, and — with your explicit consent — SMS appointment reminders.
• Respond to inquiries submitted through our contact and employer forms.
• Coordinate follow-up care with your designated healthcare provider when clinically appropriate.
• Improve our Site, booking process, and services through aggregated, de-identified analytics.
• Comply with applicable federal and state laws, including HIPAA.

4. SMS / Text Message Communications

If you provide your phone number and check the SMS consent box during booking, you agree to receive automated appointment reminder text messages from The Boob Bus. Details:

• Message frequency: Up to 2 messages per appointment (24-hour and 3-hour reminders).
• Message and data rates may apply depending on your wireless carrier and plan.
• Opt-out: Reply STOP to any message to unsubscribe. You will receive a one-time confirmation and no further messages.
• Help: Reply HELP for assistance, or contact us at 866-747-2662 or hello@theboobbus.com.
• Carriers: T-Mobile, AT&T, Verizon, and all major US carriers are supported.
• Consent to receive SMS is not a condition of booking an appointment or receiving services.
• Your phone number and SMS consent status will never be shared with third parties for marketing purposes.

5. Email Communications

We send transactional emails related to your appointment (confirmation, calendar invite). We do not send marketing or promotional emails unless you separately opt in. We do not sell, rent, or share your email address with third parties for their marketing purposes.

6. Information Sharing & Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information only in the following limited circumstances:

• Healthcare Operations: With our licensed radiology partners and your designated provider for clinical coordination, as permitted under HIPAA.
• Service Providers: With trusted vendors who help us operate (e.g., email delivery, SMS delivery, payment processing, hosting). These vendors are contractually bound to use your data solely to perform services on our behalf and are prohibited from sharing it further.
• Legal Requirements: When required by law, regulation, subpoena, court order, or governmental request.
• Safety: To protect the rights, safety, or property of The Boob Bus, our patients, or the public.

7. HIPAA & Protected Health Information (PHI)

Certain information you provide during booking (e.g., mammogram history, implant status, pregnancy status) may constitute Protected Health Information under the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, technical, and physical safeguards to protect PHI, including:

• Encrypted data transmission (TLS/SSL) for all form submissions.
• Role-based access controls limiting staff access to patient data.
• Automatic session timeout (15 minutes of inactivity) for administrative systems.
• High-entropy password requirements for all administrative accounts.

Our full HIPAA Notice of Privacy Practices is available at /documents/hipaa-notice.pdf.

8. Data Retention

We retain booking and patient information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and support clinical follow-up. De-identified analytics data may be retained indefinitely. You may request deletion of your personal data by contacting us (see Section 11).

9. Data Security

We use commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Your Rights & Contact

You may:

• Request access to or a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data, subject to legal retention requirements.
• Opt out of SMS reminders at any time by replying STOP.

To exercise any of these rights, contact us at:

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Continued use of our Site or services after changes constitutes acceptance of the updated policy.