Privacy Policy

1. Introduction

Welcome to Telehealth NP. Your privacy is extremely important to us. As a telehealth provider, we are committed to protecting the confidentiality, integrity, and security of your protected health information (PHI). We comply with the Health Insurance Portability and Accountability Act (HIPAA) and maintain strict safeguards to ensure your data is handled responsibly.


This Privacy Policy describes:

  • What information we collect
  • How we use and share your information
  • Your rights regarding your information
  • The security measures we use
  • How to contact us about privacy concerns

2. Information We Collect

a. Personal & Health Information
When you sign up for services or communicate with our care providers, we may collect:

  • Identifying information (name, date of birth, address, email, phone)
  • Medical history, current medications, health conditions
  • Clinical notes, lab results, and treatment plans
  • Information about your telehealth sessions (date, time, duration)

b. Electronic & Technical Information

  • Usage data: how you interact with our website or patient portal
  • Device information: IP address, browser type, device type
  • Cookies and similar tracking technologies to improve site experience

c. Payment and Billing Information
If payment is required, we may collect billing info, insurance data, and payment method.


3. How We Use Your Information

We use your information for the following purposes:

  1. Treatment – To provide telehealth care, prescribe medications, coordinate care, and maintain your health record.
  2. Payment – To process payments, insurance claims, or billing.
  3. Health Care Operations – For quality improvement, clinical reviews, staff training, licensing, and other business operations.
  4. Communication – To schedule appointments, send reminders, or communicate important health updates.
  5. Security & Compliance – To comply with laws (e.g., HIPAA), conduct risk assessments, and secure our systems.


4. How We Share Your Information

We may share your PHI under limited circumstances, including:

  • With your permission: for purposes not otherwise covered, if you authorize.
  • With health care partners: for treatment, payment, or care coordination (e.g., labs, pharmacies).
  • Business Associates: We use third-party vendors (e.g., telehealth platform, data storage) that are HIPAA-compliant and with whom we have Business Associate Agreements.
  • Legal Requirements: When required by law (e.g., court orders, public health reporting).
  • Breach Notification: If there is a data breach affecting your unsecured PHI, we will notify you as required under HIPAA rules.


5. Your Rights Concerning Your PHI

Under HIPAA, you have the following rights:

  • Right to Access: You can request access to or copies of your PHI, such as your medical record or session notes.
  • Right to Amend: If you believe there is an error or omission, you can request corrections.
  • Right to an Accounting: You can ask for a list of certain disclosures we have made of your PHI (excluding routine treatment, payment, and operations).
  • Right to Restrict: You may request limits on how your PHI is used or shared, though we may not always agree (especially if required by law).
  • Right to Confidential Communications: You can request alternative ways for us to communicate with you (e.g., via patient portal instead of email).
  • Right to File a Complaint: If you believe your privacy rights have been violated, you can contact our Privacy Officer or file a complaint with the U.S. Department of Health & Human Services (HHS) Office for Civil Rights.

6. Security of Your Information

We take significant measures to protect your PHI:

  • Encryption: All patient communications and data storage are encrypted using industry-standard technologies.
  • Access Controls: Only authorized personnel have access to your PHI, and only to the minimum necessary information.
  • Authentication & Session Management: Secure login, automatic session timeouts, and other safeguards.
  • Risk Assessments: We regularly conduct risk assessments and apply administrative, physical, and technical safeguards as required under HIPAA.
  • Business Associate Agreements: We only work with third-party vendors who are bound by HIPAA-compliant contracts.

7. How We Use Cookies & Tracking

  • We use cookies and similar technologies to provide and enhance our services.
  • Cookies help us understand usage patterns, improve website functionality, and remember your preferences.
  • You can manage or disable cookies through your browser settings, though some site features may not function as well.


8. Telehealth-Specific Privacy Considerations

  • Our telehealth platform is HIPAA-compliant and uses secure, encrypted channels for video and messaging.
  • If a session is audio-only via VoIP or other electronic means, we apply security safeguards (e.g., encryption, authentication) per HIPAA guidance.
  • We encourage patients to conduct sessions in a private space, use secure internet connections, and avoid public Wi-Fi when possible to protect privacy. t
  • We regularly review and update our telehealth privacy practices in light of evolving regulations and risks. telehealth.hhs.gov


9. Changes to This Policy

  • We may update this Privacy Policy from time to time (for example, when laws change or as our practices evolve).
  • When we make significant changes, we will post the revised policy on our website.
  • We may also notify you directly (e.g., via email) if you are a registered patient.

10. Contact Information

If you have questions about this Privacy Policy, want to exercise your rights, or would like to file a complaint, please contact:

Telehealth NP – Privacy Officer
7200 E Hampden Ave #103
Denver, CO 80224
Phone:
720-828-3214
Email:
patientinfo@telehealthnp.com


If you believe your privacy rights have been violated, you also have the right to file a complaint with:
U.S. Department of Health & Human Services, Office for Civil Rights