Health Insurance Portability and Accountability Act (HIPAA) & 42 CFR
The HIPAA Privacy Rule was designed to provide privacy standards to protect patients’ medical records and other health information provided to health plans, doctors, hospitals and other health care providers. Developed by the Department of Health and Human Services, these standards provide patients more control over how their personal health information is used and disclosed.
42CFR Part 2 & 8
In addition to HIPAA, our clinics and patient information are protected by the Code of Federal Regulations 42CFR part 2 pertaining to the confidentiality of patient identifying information and part 8 which references our accreditation process and the federal opioid treatment standards. For more information on these regulations please visit:
Patients have certain rights to privacy and treatment, including confidentiality and the right to receive a copy of their own medical records, the right to correct errors in their record, request communication, ask for restrictions on the information shared, revoke any previous written consent, get a list of those with whom we've shared your information (with permission), discuss your rights, reject fundraising communications, and file complaints.
What personal information do we collect from the people that visit our website? When is it collected and why?
We collect information from you when you fill out a form on our website and click on submit. The information you provide is used to contact you and answer questions you have in order to serve you better.
How do we use your information?
We only use your contact information to respond to your requests or questions you may have. Your contact information will not be shared with any other businesses.
How do we protect your information?
We do not use vulnerability scanning and/or scanning to PCI standards.
We only provide articles and information. We never ask for credit card numbers online.
We do not use Malware Scanning.
We do not use an SSL certificate.
Do we use 'cookies'?
We do not use cookies for tracking purposes.
You can choose to have your computer warn you each time a cookie is being sent or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is unique, look at your browser’s “Help Menu” to learn the correct way to modify your cookies settings.
Cookies help websites run more efficiently and function properly. Therefore, If you turn cookies off, some features will be disabled and may impact the experience of a website.
Third-party disclosure and links
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, may be provided anonymously to other parties for marketing, advertising, or other uses.
We do not include or offer third-party products or services on our website.
Google advertising
We use Google AdSense Advertising on our website. Google’s advertising requirements can be summed up by Google’s Advertising Principles, which aim to ensure a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
As a third-party vendor, Google uses cookies to serve ads on our site. Google’s use of the DART cookie enables it to service ads to our users based on previous visits to our site and other sites on the Internet. Users may opt-out of using the DART cookie by visiting the Google Ad and Content Network privacy policy.
We have implemented the following:
- Remarketing with Google AdSense
- Google Display Network Impression Reporting
- Demographics and Interests Reporting
- DoubleClick Platform Integration
We, along with third-party vendors such as Google, use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions related to our website.
How to Opt Out of Google Advertising
Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.
How does our site handle 'do not track' signals?
We honor Do Not Track signals. We do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Does our site allow third-party behavioral tracking?
We allow third-party behavioral tracking while protecting privacy.
Children Online Privacy Protection Act (COPPA)
We do not market to children under 13 years of age. When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the consumer protection agency of the United States, enforces the COPPA Rule which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
- We will notify you via email within 7 business days
- We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.