Privacy Policy

1. Information We Collect

1.1 Personal Information

• Contact information (name, email, phone number, address)
• Demographic information (age, gender)
• Insurance information (if applicable)
• Emergency contact details

1.2 Health Information

• Medical history and conditions
• Medication records
• Treatment plans and progress notes
• Vital signs and health metrics
• Laboratory and test results

1.3 Technical Information

• IP address and browser type
• Website usage data and cookies
• Device information

2. How We Use Your Information

2.1 Primary Uses

• Providing medical care and treatment services
• Coordinating with other healthcare providers
• Processing payments and insurance claims
• Scheduling appointments and reminders
• Communicating about your care

2.2 Secondary Uses

• Quality improvement and training
• Legal and regulatory compliance
• Research and analytics (de-identified data only)
• Service enhancement

3. Information Sharing and Disclosure

3.1 With Your Consent

We may share your information with:

• Other healthcare providers involved in your care
• Family members or caregivers you authorize
• Insurance companies for payment processing

3.2 Without Consent

We may disclose information when required by:

• Legal requirements or court orders
• Public health authorities
• Law enforcement in emergency situations
• Regulatory compliance

3.3 Business Associates

We work with trusted partners who sign Business Associate Agreements (BAAs) to ensure HIPAA compliance.

4. Your Rights

4.1 Access and Control

• Right to access your health records
• Right to request corrections
• Right to request restrictions on uses/disclosures
• Right to receive confidential communications
• Right to obtain a copy of this notice

4.2 Complaints

You may file a complaint with us or with the Secretary of Health and Human Services if you believe your privacy rights have been violated.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of electronic health records
• Secure data transmission
• Access controls and authentication
• Regular security assessments
• Employee training on privacy practices

6. Retention and Destruction

We retain health records as required by Arizona state law and HIPAA requirements. Records are securely destroyed when no longer needed.

7. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact: