At Adept Health Medical Clinic, we are committed to protecting the confidentiality, integrity, and security of our patients’ personal health information (PHI). This Privacy Policy explains how we collect, use, and protect PHI in connection with our medical services. We are dedicated to maintaining the trust and confidence of our patients, and we are committed to ensuring that our patients’ PHI is handled in a secure and responsible manner.
Governing Laws
This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Florida, without giving effect to any principles of conflicts of law. By using our medical services, patients acknowledge that they have read, understood, and agree to be bound by this Privacy Policy and the laws of the State of Florida.
Definitions
For purposes of this Privacy Policy, the following terms shall have the following meanings:
-
- “PHI” means protected health information, which includes individually identifiable health information, such as demographic information, medical histories, test results, insurance information, and other sensitive health information.
- “HIPAA” means the Health Insurance Portability and Accountability Act of 1996, as amended, which establishes national standards for the protection of PHI.
- “Covered Entity” means a health care provider, health plan, or health care clearinghouse that transmits any health information in electronic form.
Collection of Personal Health Information (PHI)
We collect PHI from patients who:
-
- Visit our clinic
- Receive medical services from our healthcare providers
- Referred to us by partners, insurance providers, and other medical service providers
- Contact us through email, phone, website contact forms, or other means
- Complete patient registration forms or other paperwork
- Provide medical history or other health-related information
The PHI we collect may include:
-
- Medical history
- Test results
- Medication lists
- Insurance information
- Demographic information, such as name, address, and date of birth
- Other sensitive health information
Use of Personal Health Information (PHI)
We use PHI for the following purposes:
-
- To provide medical treatment and services
- To communicate with patients regarding their care
- To coordinate care with other healthcare providers
- To comply with applicable laws and regulations, including HIPAA
- To bill and collect payment for medical services
- To conduct quality assessment and improvement activities
- To conduct patient safety activities
- To comply with medical record-keeping requirements
Protection of PHI
We take the confidentiality and security of PHI seriously. We do not share PHI with third parties for marketing or other purposes, except as authorized by law or with patient consent. We have implemented reasonable security measures to protect PHI from unauthorized access, disclosure, alteration, or destruction, including:
-
- Encryption of PHI
- Secure socket layer (SSL) technology
- Firewalls and intrusion detection systems
- Access controls and authentication procedures
- Physical security measures, such as locked cabinets and secure storage facilities
Sharing of PHI
We may share PHI with:
-
- Healthcare providers involved in patient care
- Insurance companies for billing and reimbursement purposes
- Law enforcement agencies or regulatory bodies as required by law
- Family members or other individuals involved in patient care, with patient consent
- Business associates who provide services on our behalf, such as billing and transcription services
However, we will never share PHI with third parties for marketing or other purposes without patient consent.
Data Security
We implement reasonable security measures to protect PHI from unauthorized access, disclosure, alteration, or destruction. These measures include:
-
- Encryption of PHI
- Secure socket layer (SSL) technology
- Firewalls and intrusion detection systems
- Access controls and authentication procedures
- Physical security measures, such as locked cabinets and secure storage facilities
- Regular security audits and risk assessments
- Employee training on security and confidentiality procedures
Data Retention
We retain PHI for as long as necessary to provide medical services and comply with applicable laws and regulations. We will destroy PHI when it is no longer needed, in accordance with our record retention and destruction policies.
Patient Rights
Patients have the following rights regarding their PHI:
-
- Right to access and correct PHI
- Right to request restrictions on use and disclosure of PHI
- Right to request confidential communications
- Right to request an accounting of disclosures of PHI
- Right to request a copy of PHI in electronic format
Consent to SMS and Email Communication
By providing your phone number and/or email address, you consent to receive SMS and/or email communications from us, including:
-
- Appointment reminders
- Health-related messages
- Administrative messages
- Billing and payment notifications
You may opt-out of receiving SMS and/or email communications from us at any time by:
-
- Responding “STOP” to SMS messages
- Clicking the “Unsubscribe” link in email messages
- Contacting us directly to request removal from our communication list
Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting on our website.
Contact Us
If you have any questions or concerns about this Privacy Policy, please click here to contact us
By using our medical services, patients acknowledge that they have read, understood, and agree to be bound by this Privacy Policy.
Effective Date – December 12, 2021