Personal Data: Personally identifiable information, such as your name, shipping address, email address, telephone number, date of birth, and insurance information, that you voluntarily give to us when you register for the Services or when you choose to participate in various activities related to the Site.
Protected Health Information (PHI): As part of providing our Services, we collect and create health information that is protected under HIPAA. This includes, but is not limited to:
Medical history (e.g., diagnoses, past treatments, medications).
Symptoms, test results, and images (e.g., spirometry results, chest X-rays).
Information about your physical and mental health or condition.
Notes and reports from our healthcare providers.
Billing and payment information related to your treatment.
Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you pay for our Services. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, Healow Payments.
3. How We Use Your Information
Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site or our Services to:
Create and manage your account.
Provide you with our virtual pulmonary care Services, including diagnosis, treatment, and consultation.
Process payments and insurance claims.
Communicate with you about your appointments, treatment plan, and account.
Request feedback and contact you about your use of the Site and Services.
Comply with legal and regulatory requirements, including public health reporting as required by law.
Improve the quality and functionality of our Site and Services.
Monitor and analyze usage and trends to improve your experience.
4. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
For Treatment, Payment, and Healthcare Operations: We will use and disclose your PHI for treatment, to obtain payment for services, and for our healthcare operations, as permitted by HIPAA. For example, we may share information with your primary care physician or other specialists with your consent, or with your insurance company to process a claim.
By Law or to Protect Rights: We may disclose your PHI if required to do so by law, in response to a subpoena, court order, or other legal process.
Business Associates: We may disclose your information to our "Business Associates" who perform functions on our behalf, such as billing services, data analysis, or IT services. We have a written contract with each Business Associate that requires them to protect the privacy and security of your PHI.
With Your Written Authorization: We will not use or disclose your PHI for any other purpose, such as marketing, without your express written authorization. You may revoke this authorization at any time.
5. Your Rights Regarding Your PHI
Under HIPAA, you have the following rights regarding your PHI:
For Treatment, Payment, and Healthcare Operations: We will use and disclose your PHI for treatment, to obtain payment for services, and for our healthcare operations, as permitted by HIPAA. For example, we may share information with your primary care physician or other specialists with your consent, or with your insurance company to process a claim.
By Law or to Protect Rights: We may disclose your PHI if required to do so by law, in response to a subpoena, court order, or other legal process.
Business Associates: We may disclose your information to our "Business Associates" who perform functions on our behalf, such as billing services, data analysis, or IT services. We have a written contract with each Business Associate that requires them to protect the privacy and security of your PHI.
With Your Written Authorization: We will not use or disclose your PHI for any other purpose, such as marketing, without your express written authorization. You may revoke this authorization at any time.
Your Rights Regarding Your PHI
Right to Access: You have the right to inspect and obtain a copy of your PHI.
Right to Amend: You may request that we amend incorrect or incomplete information in your records.
Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI.
Right to Request Restrictions: You have the right to request a restriction on how we use or disclose your PHI for treatment, payment, or healthcare operations.
Right to Request Confidential Communications: You can request that we communicate with you about your health in a specific way or at a specific location.
To exercise these rights, please contact our Privacy Officer at the address below.
6. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information and PHI. This includes encryption of data in transit and at rest, access controls, and secure servers. While we have taken reasonable steps to secure the information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
7. Policy for Children
We do not knowingly solicit information from or market to children under the age of 13. If you become aware of any data we have collected from children under age 13, please contact us using the contact information provided below. For patients between 13 and 18, parental or guardian consent will be required.
8. Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise your rights, please contact our Privacy Officer at:
PulmaCare, LLC
Attn: Meghan Davidson
6600 College Blvd Ste 310
Overland Park, KS 66211
team@pulmacare.com
913-346-5688