Effective Date: [09/18/2025]
Optimum Primary Care Medical
At Optimum Primary Care Medical (“Optimum Primary Care,” “we,” “our,” “us”), your privacy is central to the trust you place in us. This Privacy Policy explains in detail how we collect, use, protect, and share your information when you visit our website (optimumprimarycare.sysforte.com), receive care at our clinic, or engage with us through other services. Because we provide healthcare services, this policy is also designed to be consistent with applicable privacy laws, including HIPAA and state regulations.
1. Information We Collect
We collect different types of information depending on your interactions with us:
a. Personal Identifiers
- Name, address, phone number, email address
- Date of birth, gender, demographic details
b. Health and Medical Information
- Symptoms, medical history, diagnoses, medications
- Immunization history, chronic disease information, allergies
- Records created by physicians, nurses, and staff
c. Insurance and Billing Details
- Insurance provider name and ID numbers
- Coverage details, prior authorizations, claims data
- Billing address, payment history, in some cases credit card information
d. Website and Technical Information
- IP address, browser type, operating system, device identifiers
- Pages you visit, time spent on site, navigation paths
- Appointment booking activity, error reports, or crash logs
e. Communication Records
- Copies of emails, phone calls, or messages exchanged with us
- Notes related to scheduling, prescription refill requests, or care follow-ups
f. Location Data
- Address information submitted by you
- Approximate geolocation (via browser or device, if permitted) for finding nearby services
2. How We Use Your Information
Your data allows us to serve you safely, efficiently, and legally. Uses include:
- Providing Healthcare. To diagnose, treat, and monitor your conditions; to coordinate care across providers; and to keep complete, accurate health records.
- Appointment Management. Scheduling visits, sending reminders, and notifying you of changes or delays.
- Insurance & Billing. Submitting claims, verifying eligibility, processing payments, managing outstanding balances.
- Communication. Responding to inquiries, providing test results, sending medication refill notices, and sharing health information resources.
- Improving Operations. Analyzing website performance, monitoring appointment demand, and evaluating patient satisfaction surveys to enhance services.
- Legal & Compliance. Meeting HIPAA obligations, fulfilling state or federal reporting requirements, responding to valid legal processes, and protecting against fraud.
- Public Health. Sharing limited information with agencies when required, such as for communicable disease reporting.
3. Sharing of Information
We limit disclosures to what is necessary. Information may be shared:
- With Other Healthcare Providers. For referrals, consultations, or emergency care.
- With Insurance Companies. To verify benefits, process claims, or resolve disputes.
- With Business Associates. Vendors who perform services for us (IT support, billing companies, cloud storage providers). These partners sign agreements requiring confidentiality.
- With Legal and Regulatory Bodies. When legally mandated, e.g., subpoenas, audits, fraud prevention, or mandatory disease reporting.
- With Your Consent. For specific situations, such as releasing records to a family member, employer, or attorney, only when you authorize it.
- During Business Transactions. If we merge, acquire, or reorganize, data may be transferred with safeguards.
We do not sell or trade your personal information to third parties.
4. Your Rights and Choices
Under HIPAA and applicable state laws, you have important rights:
- Access and Copies. Request access to your medical records or receive copies (may be subject to a reasonable fee).
- Amendments. Ask us to correct or update inaccurate or incomplete health information.
- Restrictions. Request limits on disclosures, such as not sharing certain treatments with your insurer if paid out-of-pocket.
- Confidential Communication. Request that we communicate with you at an alternative address or phone number.
- Accounting of Disclosures. Receive a list of certain disclosures we’ve made of your information, excluding routine uses for treatment, payment, and operations.
- Right to Revoke Consent. Withdraw previously given authorizations, except where we’ve already relied on them.
- Opt-Out of Non-Essential Messages. Decline newsletters, wellness reminders, or other optional communications.
To exercise any of these rights, contact us using the details below.
5. Data Security
We maintain physical, electronic, and administrative safeguards:
- Encryption. Sensitive data transmitted over the internet is encrypted using SSL/TLS protocols.
- Access Controls. Medical records are accessible only to authorized personnel.
- Training. Staff receive regular HIPAA training and confidentiality education.
- Monitoring. Systems are monitored for suspicious activity, and we employ intrusion prevention tools.
- Backups. Redundant secure backups protect against data loss.
While we take extensive precautions, no system is 100% secure. Patients should use caution when transmitting information electronically.
6. Cookies and Tracking
Our website may use:
- Essential Cookies. To enable secure login, appointment booking, and navigation.
- Analytics Cookies. To measure traffic, identify popular pages, and improve usability.
- Functional Cookies. To remember preferences such as language or location.
You can disable cookies in your browser, though certain features may not function fully.
7. Retention of Information
- Medical Records. Retained for at least the period required by state law (commonly 7–10 years after last treatment, or longer for minors).
- Billing Records. Retained for tax and audit purposes.
- Website/Technical Data. Stored for shorter periods, usually months, unless required for security or troubleshooting.
- Deletion. When no longer needed, data is securely destroyed or anonymized.
8. Children’s Privacy
We provide healthcare for all ages but treat the privacy of minors with special care:
- Parents/guardians must authorize services for patients under 18, except in legally permitted circumstances.
- Information on minors is never used for marketing.
- Access to pediatric records is handled according to federal and state requirements.
9. International Data Transfers
If information is stored or processed by vendors outside the United States, we require contractual and technical safeguards, such as encryption, to ensure data remains protected under equivalent standards.
10. Policy Updates
We may revise this Privacy Policy periodically to reflect changes in law, technology, or our practices.
- Updates will be posted with a new “Effective Date.”
- Significant changes may be communicated by email or patient notices.
- Continued use of our website or services after updates means you accept the revised policy.
