Privacy Policy

1. Personal Health Information (PHI)

We collect and maintain the following types of health information:

• Medical history, symptoms, and diagnoses
• Laboratory test results and vital signs
• Prescription and medication information
• Treatment plans and clinical notes
• Insurance and billing information

2. Personal Identification Information

• Name, date of birth, and contact information
• Address, phone number, and email
• Government-issued identification numbers
• Insurance policy numbers

3. Website Usage Information

• IP address and browser type
• Pages visited and time spent on site
• Referring website and exit pages
• Device information and operating system

Treatment

We use your health information to provide, coordinate, and manage your healthcare services, including consultations, prescriptions, lab work, and follow-up care.

Payment

We use your information to bill and collect payment for services, verify insurance coverage, and process claims with your health plan or insurance company.

Healthcare Operations

We use information for quality improvement, staff training, regulatory compliance, business planning, and other administrative functions necessary to operate our practice.

Legal Requirements

We may disclose information when required by law, such as reporting certain diseases to public health authorities, responding to court orders, or cooperating with law enforcement.

Administrative Safeguards

• HIPAA-compliant policies and procedures
• Regular staff training on privacy and security
• Designated Privacy and Security Officers
• Risk assessments and management processes
• Business Associate Agreements with vendors

Physical Safeguards

• Secure facility access controls
• Locked storage for physical records
• Workstation security and positioning
• Secure disposal of PHI (shredding, wiping)

Technical Safeguards

• Encryption of data in transit and at rest
• Secure user authentication and access controls
• Audit logs and monitoring systems
• Automatic logoff after inactivity
• Regular security updates and patches
• Backup and disaster recovery systems

Right to Access

You have the right to inspect and obtain a copy of your medical records. We will respond to your request within 30 days.

Right to Amendment

You may request corrections to your health information if you believe it is incorrect or incomplete.

Right to Accounting of Disclosures

You can request a list of certain disclosures we have made of your health information.

Right to Request Restrictions

You may ask us to limit how we use or disclose your information, though we are not required to agree to all requests.

Right to Confidential Communications

You can request that we communicate with you in a specific way or at a certain location.

Right to Notification of Breach

We will notify you if a breach of your unsecured health information occurs.

Healthcare Providers

We may share information with other healthcare providers involved in your care, including specialists, laboratories, pharmacies, and hospitals.

Business Associates

We work with HIPAA-compliant vendors who assist with billing, IT services, and practice management. All business associates sign agreements requiring them to protect your information.

Insurance Companies

We share information necessary for payment and insurance verification purposes.

Public Health Authorities

As required by law, we report certain conditions to state and federal health agencies.

What We Use

Our website uses cookies and similar tracking technologies to improve your experience and analyze site usage.

Types of Cookies

• Essential Cookies: Required for site functionality and security
• Performance Cookies: Help us understand how visitors use our site
• Functionality Cookies: Remember your preferences

Third-Party Analytics

We may use third-party analytics services to analyze website traffic. These services use cookies that do not contain PHI.

Your Cookie Choices

You can control cookies through your browser settings. However, disabling cookies may affect site functionality.