Legal

Privacy Policy

1. Information We Collect

  • Identity & contact data — name, email, phone, date of birth, and address when you book, subscribe, or register.
  • Health information — medical history, visit notes, lab results, and treatment plans created during care.
  • Insurance & billing data — policy details, claims information, and payment records.
  • Technical data — browser type, device, and anonymized usage analytics that help us improve the site.

2. Protected Health Information (HIPAA)

As a covered healthcare provider, we protect your medical information under HIPAA. Your protected health information (PHI) is used only for treatment, payment, and healthcare operations unless you authorize otherwise in writing. You will receive our full Notice of Privacy Practices at your first visit.

3. How We Use Your Information

  • To schedule visits, deliver care, and coordinate between your providers
  • To verify insurance, process claims, and send billing statements
  • To send appointment reminders, test results, and portal notifications
  • To send the Complete Vitality Path Digest newsletter — only with your explicit consent
  • To improve our services through aggregated, de-identified analysis

4. When We Share Information

We never sell your personal or health data. Sharing occurs only with: your care team; insurance carriers for claims; laboratories and pharmacies fulfilling your orders; service providers under strict data-processing agreements; and authorities when required by law (for example, mandatory reporting).

5. Cookies & Analytics

This site uses essential cookies for basic functionality and privacy-respecting, anonymized analytics to understand which pages help patients most. We do not use third-party advertising trackers.

6. Your Rights

  • Access or request a copy of your records and PHI
  • Request corrections to inaccurate information
  • Unsubscribe from marketing emails at any time via the link in each email or our unsubscribe page
  • Request deletion of non-clinical data (clinical records are retained as required by law)
  • File a complaint with our privacy officer or the federal Office for Civil Rights — without retaliation

7. Security

All data is encrypted in transit (TLS) and at rest. Systems are access-controlled, audit-logged, and reviewed regularly. Staff complete annual privacy and security training, and access to PHI is limited to the minimum necessary for each role.

8. Children's Privacy

Patients under 18 are registered and managed by a parent or legal guardian. We do not knowingly collect website data from children under 13.

9. Retention

Medical records are retained for the period required by state law (typically 7–10 years after the last encounter, longer for minors). Marketing data is deleted promptly upon unsubscribe.

10. Updates to This Policy

We may revise this policy as practices and laws evolve. Material changes are posted here with an updated date, and patients are notified through the portal for significant changes.

11. Contact Our Privacy Officer

Email: privacy@completevitalitypath.info.