Privacy Policy

01Health Information Collection & Use

We collect personal and health information including medical history, diagnoses, treatment plans, lab results, and wellness data solely to deliver the healthcare services you have requested. Your information is used to coordinate care, communicate results, and improve treatment outcomes — never for unrelated commercial purposes.

02Protected Health Information (PHI) Safeguards

All Protected Health Information is handled in strict accordance with HIPAA regulations. We maintain the highest tier of data classification for health records, limiting access to authorized clinical staff directly involved in your care, with audit logs recording every access event.

03Medical Data Encryption & Security Standards

All patient health data is encrypted using AES-256 at rest and TLS 1.3 in transit. Our infrastructure undergoes annual SOC 2 Type II audits, quarterly penetration testing, and continuous intrusion detection monitoring to safeguard against unauthorized access to medical records.

04Patient Consent & Health Decision Rights

You retain full ownership of your health data and must provide explicit informed consent before any medical procedure, treatment plan, or sharing of records with specialists. You may request access, corrections, or restricted disclosure of your medical information at any time, in writing.

05Telehealth Consultation Privacy

All virtual telehealth consultations are conducted over end-to-end encrypted video channels that comply with medical privacy standards. Session recordings are only created with your explicit written consent, stored encrypted, and automatically purged after the clinically required retention period.

06Health Research & Anonymized Data Use

Aggregated, de-identified health data may be used for medical research, clinical outcome studies, and public health initiatives — strictly after removing all personally identifiable information. Individual health data is never sold, shared with marketers, or used for insurance underwriting decisions.

07Third-Party Business Associates

We may share necessary health information with trusted external partners, such as diagnostic laboratories, pharmacies, and specialized clinics. All third-party vendors are bound by strict Business Associate Agreements (BAAs) that mandate the exact same level of HIPAA-compliant data protection as our own facilities.

08Data Retention and Secure Destruction

Your medical records are retained for the specific duration mandated by federal and state healthcare regulations. Once the legally required retention period expires, digital records are permanently purged and physical records are shredded using certified, secure destruction protocols.

09Data Breach Notification Protocol

In the highly unlikely event of a security incident affecting your Protected Health Information (PHI), we maintain a rapid-response protocol. We will notify you and the relevant regulatory authorities within the legally mandated timeframe, detailing the scope of the breach and our immediate protective actions.

10Insurance and Billing Disclosures

To facilitate payment and coverage for your care, we securely share the minimum necessary treatment codes and clinical information with your designated health insurance provider. This data exchange utilizes encrypted clearinghouses to ensure billing compliance and privacy.

11Pediatric Privacy and Guardian Access

We strictly protect the privacy of minors in compliance with pediatric healthcare laws. Legal guardians are granted secure proxy access to manage the health records of patients under the age of 18. This proxy access is automatically adjusted or revoked when the patient reaches legal adulthood.

12Digital Tracking and App Analytics

While using our patient portal, we collect non-clinical usage data (such as browser type or app interactions) to improve functionality. We strictly segregate this digital behavioral data from your clinical health records and prohibit third-party advertising trackers on any page displaying medical data.