1. Information We Collect

When you interact with Health Connections, we may collect personal information that you voluntarily provide, including your name, mailing address, email address, telephone number, date of birth, insurance information, emergency contact information, and other information necessary to provide healthcare services.

We may also collect Protected Health Information related to your medical history, diagnoses, treatment plans, appointment history, and communications with our providers. Information about your use of our website, including your IP address, browser type, device information, and pages visited, may also be collected through cookies and similar technologies to improve website functionality and user experience.

2. How We Use Your Information

The information we collect is used solely for legitimate business and healthcare purposes. This includes:

Providing medical services and coordinating patient care;

Scheduling, modifying, and confirming appointments;

Communicating with you regarding your treatment, follow-up care, and billing;

Processing insurance claims and patient billing;

Responding to patient inquiries and support requests;

Improving our services, website functionality, and overall patient experience;

Maintaining accurate electronic medical records (EMR);

Complying with legal, clinical, and regulatory obligations; and

Protecting the security and integrity of our digital platforms and clinical systems.

We use only the minimum amount of information necessary to fulfill these purposes and maintain appropriate safeguards to protect your privacy.

3. HIPAA Compliance

Health Connections recognizes its responsibility to protect the confidentiality of Protected Health Information (PHI). We maintain rigorous administrative, technical, and physical safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction of PHI.

Access to patient information is strictly limited to authorized workforce members and verified business associates who require such information to perform their direct clinical or administrative responsibilities. All employees, contractors, volunteers, and affiliated personnel receive comprehensive training regarding HIPAA privacy and security requirements and are expected to comply with all applicable laws and internal policies governing patient confidentiality.

4. SMS Communications & A2P 10DLC Compliance

If you provide your mobile telephone number and expressly opt-in to receive text messages from Health Connections, we may send SMS messages relating to your healthcare services. These messages may include appointment confirmations, rescheduling alerts, clinic operational updates, care coordination reminders, patient support communications, billing notifications, and other service-related communications.

- Opt-In Process: Mobile phone numbers are collected only when you voluntarily provide them through our authorized opt-in methods, which may include checking a box on a contact or registration web form, digital intake documents, or paper enrollment packets. Please note that checking any digital or physical opt-in box is entirely voluntary, and your consent is never pre-checked or assumed.

- Message and Data Rates: Message frequency varies based on your transactional interactions, appointment schedules, and clinical needs. Standard message and data rates may apply according to your mobile carrier's plan.

- Opt-Out (STOP): You may opt out of receiving text messages at any time. To stop receiving SMS messages from Health Connections, reply STOP to any text message we send you. After replying STOP, you will receive one final text message confirming that you have been unsubscribed, and we will no longer send text messages to that mobile number unless you opt-in again.

5. Mobile Privacy & Strict SMS Non-Disclosure Policy

No mobile phone numbers, SMS opt-in data, or consent information collected by Health Connections will be shared, sold, rented, or traded with third parties, affiliates, or partners for marketing, promotional, or commercial purposes under any circumstances.

Information sharing with designated subcontractors in supporting roles—such as secure medical messaging platforms, HIPAA-compliant patient communication systems, or healthcare IT vendors—is permitted strictly to the extent necessary to deliver the specific services you have requested. Text messaging originator opt-in data and consent are strictly confidential and will not be shared with any third party for any purpose whatsoever.

6. Disclosure of Information

Health Connections does not sell, rent, or trade your personal information. We may disclose your information only as permitted or required by law. This may include sharing information with:

- Healthcare providers and clinicians directly involved in your care;

- Insurance companies and clearinghouses for medical billing and claims processing;

- Verified business associates operating under executed HIPAA Business Associate Agreements (BAAs);

- Government, clinical licensing, or regulatory agencies when legally mandated;

- Law enforcement pursuant to a valid subpoena, court order, or legal process; or

- Medical personnel in emergency situations involving an immediate threat to public health or personal safety.

7. Cookies and Website Technologies

Our website may use cookies, tracking pixels, and similar web technologies to improve your browsing experience, analyze website performance, and better understand how visitors interact with our digital spaces. These technologies do not collect Protected Health Information (PHI) unless you voluntarily choose to input such information through a secure form on our website. You may disable cookies through your web browser's privacy settings; however, doing so may affect certain interactive functionalities of our website.

8. Data Security

We employ reasonable administrative, technical, and physical safeguards designed to protect your personal information and Protected Health Information from unauthorized access, disclosure, alteration, or destruction. These safeguards include secure firewalls, database encryption (both in transit and at rest), strict internal access controls, multifactor user authentication, routine workforce security training, ongoing system monitoring, and regular third-party security reviews. While no method of electronic transmission or storage is completely secure, Health Connections continually aligns its protocols with current healthcare industry-standard security practices.

9. Your Privacy Rights

As a patient under HIPAA and applicable state laws, you maintain specific rights regarding your personal and medical information. You have the right to:

Access, inspect, and receive a copy of your health records;

- Request corrections or amendments to inaccurate or incomplete medical records;

- Request restrictions on certain uses or disclosures of your Protected Health Information;

- Request confidential communications through alternative channels (e.g., specific email addresses or telephone numbers) or locations;

- Receive an accounting of certain disclosures of your Protected Health Information made by us;

- Revoke previously granted authorizations where permitted by law; and

- File a formal complaint with us or with the Secretary of the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

Health Connections will evaluate and respond to all such requests in accordance with applicable federal and state laws.

10. Third-Party Websites

Our website may contain links to third-party websites or external digital services for your convenience. Health Connections is not responsible for the privacy practices, technical security, or content of those external websites. We encourage you to review the privacy policies of any third-party websites before providing them with personal or financial information.

11. Data Retention

We retain personal information and Protected Health Information only for as long as necessary to provide healthcare services, fulfill legal and clinical regulatory obligations, resolve medical billing disputes, enforce our agreements, and maintain appropriate business and medical records. All records are retained and securely destroyed in accordance with applicable state medical record retention laws and HIPAA disposal requirements.

12. Children's Privacy

Health Connections provides medical services to patients of all ages, including minors. Personal information relating to minors is collected online or in-clinic only as authorized by a parent, legal guardian, or other individual permitted by law. We are committed to protecting the privacy of children and handling their information in accordance with all applicable legal requirements, including the Children's Online Privacy Protection Act (COPPA).

13. Changes to This Privacy Policy

Health Connections may update this Privacy Policy from time to time to reflect changes in our clinical practices, evolving legal requirements, or updated technology. When updates are made, the revised policy will be posted on this page with a new "Effective Date" at the top. Continued use of our website or services after changes become effective constitutes acceptance of the revised Privacy Policy.