PRIVACY POLICY

PLEASE NOTE: This Privacy Policy is specifically pertaining to this website. For the practice privacy policy in full, it is in your patient paperwork that you fill out at appointments.

PLEASE NOTE: We do not store ANY PHI on Wix servers. This website is meant for information regarding our practice, treatments, location, and services like that. We specifically do not use this website for any sorts of medical, medical billing, prescriptive, or procedural services. To access that please use our secure patient portal. Do not use this website to disclose ANY health information whatsoever. If you want more information, please contact our office via fax, phone, web portal, or mail.


Patient Privacy:

Notice of Privacy Practices

It is the policy of our practice that all physicians and staff preserve the integrity and the confidentiality of protected health information (PHI) pertaining to our patients. The purpose of this policy is to ensure that our practice and its physicians and staff have the necessary medical and PHI to provide the highest quality medical care possible while protecting the confidentiality of the PHI of our patients to the highest degree possible. Patients should not be afraid to provide information to our practice and its physicians and staff for purposes of treatment, payment and healthcare operations (TPO). To that end, our practice and its physicians and staff will:

-Adhere to the standards set forth in the Notice of Privacy Practices.

-Collect, use and disclose PHI only in conformance with state and federal laws and current patient covenants and/or authorizations, as appropriate. Our practice and its physicians and staff will not use or disclose PHI for uses outside of practice's TPO, such as marketing, employment, life insurance applications, etc. without an authorization from the patient.

-Use and disclose PHI to remind patients of their appointments unless they instruct us not to.

-Recognize that PHI collected about patients must be accurate, timely, complete, and available when needed. Our practice and its physicians and staff will implement reasonable measures to protect the integrity of all PHI maintained about patients.

-Recognize that patients have a right to privacy.

-Our practice and its physicians and staff respect the patient's individual dignity at all times.

-Our practice and its physicians and staff will respect patient's privacy to the extent consistent with providing the highest quality medical care possible and with the efficient administration of the facility.

-Act as responsible information stewards and treat all PHI as sensitive and confidential. Consequently, our practice and its physicians and staff will - Treat all PHI data as confidential in accordance with professional ethics, accreditation standards, and legal requirements.

-Not disclose PHI data unless the patient (or his or her authorized representative) has properly authorized the release or the release is otherwise authorized by law.

-Recognize that, although our practice "owns" the medical record, the patient has a right to inspect and obtain a copy of his/her PHI. In addition, patients have a right to request an amendment to his/her medical record if he/she believes his/her information is inaccurate or incomplete.

Our practice and its physicians and staff will - Permit patient's access to their medical records when their written requests are approved by our practice. If we deny their request, then we must inform the patients that they may request a review of our denial. In such cases, we will have an on-site healthcare professional review the patients' appeals.

-Provide patients an opportunity to request the correction of inaccurate or incomplete PHI in their medical records in accordance with the law and professional standards.

-All physicians and staff of our practice will maintain a list of certain disclosures of PHI for purposes other than TPO for each patient and those made pursuant to an authorization as required by HIPAA rules.

We will provide this list to patients upon request, so long as their requests are in writing.

-All physicians and staff of our practice will adhere to any restrictions concerning the use or disclosure of PHI that patients have requested and have been approved by our practice.

-All physicians and staff of our practice must adhere to this policy. Our practice will not tolerate violations of this policy. Violation of this policy is grounds for disciplinary action, up to and including termination of employment and criminal or professional sanctions in accordance with our practice's personnel rules and regulations.

-Our practice may change this privacy policy in the future.

Any changes will be effective upon the release of a revised privacy policy and will be made available to patients upon request.  

Information We Collect
We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history pertaining to this website. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile to better service you. We do not store any PHI, on this site.

What Happens With Your Information
When you conduct a transaction or relay information on our website, as part of the process, we collect personal information you give us such as your name, address and email address, comments, or billing information. Your personal information will be used for the specific reasons stated above only. Again, we do not and you cannot relay any sorts of PHI on this website.

Why Do We Collect Information
We collect such Non-personal and Personal Information for the following purposes:

    -To provide and operate the Services and Transactions;
    -To provide our Users with ongoing customer assistance, customer transactions and technical support;
    -To be able to contact our Visitors and Users with general or personalized site and service-related notices and promotional messages;
    -To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services;
    -To comply with any applicable local and/or federal laws and regulations.

Where Does Your Information Go
Our company's website is hosted on the Wix.com platform. This is where we sell certain products, provide information about our practice, and detail the services we give. This website is specifically not for any medical information. If you have to contact us for a medical issue, please use our patient portal, mail a letter to us, fax us your inquiry, or give us a call. You are prohibited from relaying any medical information on this website. Doing so is in violation of our privacy policy and terms and conditions, which we take very seriously. Wix.com provides us with the online platform that allows us to relay information, sell our products and give our services to you. Your non-medical data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.

All direct payment gateways offered by Wix.com and used by our company through this website adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more information of our host's policies, visit https://www.wix.com/about/privacy

Our company's patient portal is hosted by medfusion.com. This is where we communicate with patients about all medical management, prescriptive, and billing services.

For more information of our patient portal host's policies, visit https://www.medfusion.com/toc/

When We Use Your Information To Contact You
For this website, we may contact you to notify you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via, telephone, fax, text messages, and mail.

Cookies
The following cookies are used to collect data from you:

First-Party Cookies

Strictly Necessary

Cookie Name: ForceFlashSite, Duration: Session, Purpose: When viewing a mobile site (old mobile under m.domain.com) it will force the server to display the non-mobile version and avoid redirecting to the mobile site
Cookie name: hs, Duration: Session, Purpose: Security
Cookie name: smSession, Duration: Persistent (Two days or two weeks), Purpose: Identifies logged in site members
Cookie name: XSRF-TOKEN, Duration: Session, Purpose: Security

Functionality

Cookie name: svSession, Duration: Persistent (Two years), Purpose: Identifies unique visitors and tracks a visitor’s sessions on a site
Cookie name: RequestID, Duration: Session (20 seconds), Purpose: Tracks visitor behavior and measures site performance
Cookie name: SSR-caching, Duration: Session, Purpose: Indicates how a site was rendered.
Cookie name: smSession, Duration: Persistent (Two weeks), Purpose: Identifies logged in site members

Third-Party Cookies

Functionality

Cookie name: TS*, Duration: Session, Purpose: Security
Cookie name: TS01*******, Duration: Session, Purpose: Security
Cookie name: TSxxxxxxxx (where x is replaced with a random series of numbers and letters), Duration: Session, Purpose: Security
Cookie name: TSxxxxxxxx_d (where x is replaced with a random series of numbers and letters), Duration: Session, Purpose: Security

Please note: These cookies do not collect health information. They are specifically used for Wix and your web browser to accurately provide services for you. To block cookies from your web browser, please visit your web browser settings and follow the instructions to disable cookies.

Google may use information about your interactions with this and other websites to provide ads for products, goods and services that would interest you. If you would like more information about this, visit https://www.google.com/privacy/ads/
Please note: We do not endorse any ads, products, or services outside of our practice to you unless indicated.  To opt out of being tracked by Google Analytics across all websites, visit this link: http://tools.google.com/dlpage/gaoptout.
For more information of cookies and what they are, a good resource is https://www.allaboutcookies.org/

Requesting And Deleting Your Data
If you don’t want us to process your data anymore or you want to request a copy of your data, please contact us via phone, fax, web portal, or mail.

Updates
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.


Last Updated August 15, 2019.