Privacy Policy & Notice of Privacy Practices

Information We Collect on This Website

When you voluntarily submit information through our website, including through a contact or inquiry form, we may collect information such as:

• Your name;
• Telephone number;
• Email address;
• Reason for your inquiry;
• Preferred method of contact;
• Information contained in your message; and
• Other information you voluntarily provide.

Our website may also collect limited technical information associated with your visit, such as pages viewed, browser or device information, IP address, approximate or general geographic location, referral information, and similar website-performance information.

This information may be used to operate, secure, maintain, and improve our website and understand how visitors interact with our services.

How We Use Website Information

Information voluntarily submitted through this website may be used to:

• Respond to your inquiry;
• Contact you at your request;
• Schedule or coordinate appointments and care;
• Provide information regarding our services;
• Administer our practice;
• Maintain and improve website functionality;
• Protect the security of our website and systems; and
• Comply with applicable legal and regulatory requirements.

Beyond Health does not sell your personal information or protected health information.

We do not share personal information collected through this website with unrelated third parties for their independent advertising or marketing purposes.

Information may be provided to service providers that perform services on behalf of Beyond Health when reasonably necessary to operate our website, communications, scheduling systems, healthcare operations, or other services, subject to applicable privacy, security, and contractual requirements.

Website Forms Are Not a Secure Clinical Communication Channel

Please do not submit detailed medical information, diagnoses, laboratory or test results, Social Security numbers, financial account information, or other highly sensitive information through the general website contact form.

For clinical communications or sensitive medical information, please use the secure patient portal or contact the Beyond Health office directly.

Website submissions are handled through privacy-conscious internal processes; however, transmission of information over the public internet cannot be guaranteed to be completely secure.

If you are an established patient, use the communication method recommended by the office for clinical questions and transmission of sensitive health information.

Do not use the website contact form for medical emergencies. If you are experiencing a medical emergency, call 911 or go to the nearest emergency department.

Protected Health Information & HIPAA

Once information is created, received, maintained, or transmitted by Beyond Health in connection with providing healthcare and qualifies as protected health information under HIPAA, it is handled in accordance with applicable HIPAA requirements and Beyond Health's privacy practices.

Beyond Health may use and disclose PHI as permitted or required by law, including for the following purposes:

• Treatment — Providing, coordinating, or managing your healthcare and communicating with healthcare professionals involved in your care.
• Payment — Billing, insurance claims, eligibility and benefit verification, obtaining payment for healthcare services, and other permitted payment activities.
• Healthcare Operations — Administrative, quality improvement, compliance, credentialing, auditing, training, business management, and other healthcare operations permitted by law.

This is consistent with Beyond Health's existing HIPAA patient consent, which informs patients that PHI may be used or disclosed for treatment, payment, and healthcare operations.

Other Permitted or Required Disclosures

Beyond Health may also use or disclose health information without your written authorization when permitted or required by applicable law.

Depending upon the circumstances, this may include disclosures for certain public health activities, health oversight activities, judicial or administrative proceedings, law enforcement purposes, workers' compensation matters, preventing or reducing a serious threat to health or safety, and other purposes specifically permitted or required by law.

Uses and disclosures requiring patient authorization will be made only after obtaining appropriate authorization unless otherwise permitted or required by law.

Your Health Information Rights

Subject to applicable law, you have rights regarding your protected health information. These may include the right to:

• Inspect and obtain copies of certain medical records;
• Request corrections or amendments to certain health information;
• Request restrictions on certain uses or disclosures;
• Request confidential communications through an alternative method or at an alternative location;
• Request an accounting of certain disclosures of your health information;
• Obtain a paper or electronic copy of the applicable Notice of Privacy Practices;
• Revoke certain authorizations previously provided, subject to applicable limitations; and
• File a privacy complaint without retaliation.

Beyond Health may not be required to agree to every requested restriction except when required by applicable law.

Your current HIPAA consent also informs patients of their ability to request restrictions and revoke applicable consent.

Communications With Patients

With your permission or as otherwise permitted by law, Beyond Health may communicate with you through telephone calls, voicemail, email, patient portal communications, or SMS/text messaging.

Your existing patient intake form specifically allows patients to indicate whether Beyond Health may call, email, or text them regarding appointments and whether messages may be left on their telephone.

Electronic communications may carry privacy risks. Email and standard SMS/text messages may not always be encrypted, and messages or notifications could potentially be viewed by another person with access to your device, email account, telephone account, or synchronized devices.

SMS communications are additionally governed by our separate SMS Terms & Consent, including your right to opt out of SMS communications at any time.

Mobile Information & SMS Privacy

Beyond Health does not sell mobile telephone numbers or SMS consent information.

Mobile telephone information and SMS consent will not be sold or shared with unrelated third parties for their independent marketing or promotional purposes.

Information may be provided to service providers acting on behalf of Beyond Health when reasonably necessary to deliver communications or operate healthcare-related services, subject to applicable privacy, security, and contractual requirements.

Patients may withdraw consent to SMS communications as described in our SMS Terms & Consent.

Analytics, Cookies & Website Technologies

Our website may use cookies, analytics tools, search-performance tools, or similar technologies to understand website traffic, maintain website functionality, improve content, and evaluate website performance.

Depending upon the technology used, these tools may process technical information such as browser type, device information, IP address, pages visited, referral information, and general geographic information.

Beyond Health does not intentionally provide protected health information to analytics or advertising providers for their independent advertising purposes.

Where website technologies involve information subject to HIPAA or other privacy requirements, Beyond Health seeks to use and configure those technologies consistent with applicable privacy and security obligations.

You may be able to disable or limit cookies through your browser settings. Disabling certain cookies may affect the functionality of portions of the website.

Third-Party Services

Beyond Health may use third-party service providers for services such as:

• Appointment scheduling;
• Electronic health records;
• Patient portal services;
• Telehealth;
• Payment processing;
• Website hosting;
• Electronic communications; and
• Other healthcare or administrative functions.

Where a third party handles protected health information on behalf of Beyond Health and is considered a business associate under HIPAA, appropriate contractual safeguards, including a Business Associate Agreement when required, are maintained.

When you follow a link to an independent third-party website or service, that provider's terms and privacy practices may also apply.

Beyond Health is not responsible for the independent privacy practices of unrelated third-party websites.

Telehealth Privacy

Telehealth services involve the electronic transmission of health information.

Beyond Health uses reasonable safeguards intended to protect the privacy and confidentiality of telehealth communications in accordance with applicable requirements.

Despite reasonable safeguards, electronic communications may involve risks such as technical failures, unauthorized access, cybersecurity incidents, or other circumstances outside the reasonable control of Beyond Health.

Our existing Telehealth Consent informs patients of these risks and provides that telehealth communications are subject to HIPAA protections.

Additional information is available in our separate Telehealth Consent.

Minors & Personal Representatives

When permitted or required by law, a parent, legal guardian, personal representative, or other legally authorized individual may exercise certain privacy rights on behalf of a patient.

The extent of that authority depends upon applicable law and the circumstances of the patient's care.

Changes to This Privacy Policy

Beyond Health may update this Privacy Policy periodically to reflect changes in our practices, technology, services, or applicable legal requirements.

When appropriate, revisions will be identified by an updated effective or revision date.

Changes affecting our HIPAA Notice of Privacy Practices will be handled in accordance with applicable HIPAA requirements.

Privacy Complaints

If you believe your privacy rights have been violated, you may submit a complaint directly to Beyond Health.

You may also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

Beyond Health will not retaliate against you for filing a privacy complaint or exercising your privacy rights.

Contact Us About Privacy

Questions regarding this Privacy Policy, our privacy practices, or your health information may be directed to:

You may also contact the office to request a paper copy of our Notice of Privacy Practices or for assistance exercising your privacy rights.