Privacy Policy & HIPAA Notice of Privacy Practices

All Family Care Health PC, doing business as Red Canyon Medical Clinic ("we," "us," or "our"), is committed to protecting the privacy of your personal information and protected health information (PHI). This policy explains how we collect, use, disclose, and safeguard your information when you use our website, fill out forms, communicate with us, or receive clinical services at our clinic.

This document serves as both our website privacy policy and our HIPAA Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (45 CFR Parts 160 and 164).

1. Information We Collect

a) Information You Provide

When you contact us, fill out forms on our website, or visit our clinic, we may collect:

• Name, date of birth, sex, and contact information (phone, email, address)
• Insurance information and payment details
• Medical history, current medications, allergies, and symptoms
• Family and social history
• Emergency contact information
• Government-issued identification and insurance card images
• Electronic signatures

b) Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address, browser type, and device information
• Pages viewed and time spent on the site
• Referring website or search terms

We do not use tracking technologies to collect, transmit, or process protected health information through our website analytics.

c) SMS and Email Communications

If you opt in to receive text messages or emails from us, we collect your phone number or email address and records of communications sent. Your mobile phone number will never be sold, shared, rented, or disclosed to any third party for marketing purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

a) Treatment

We use your health information to provide, coordinate, and manage your medical care. This includes sharing information with other providers involved in your treatment, sending prescriptions to your pharmacy, and making referrals.

b) Payment

We use your information to bill and collect payment for services. This may include submitting claims to your insurance company, verifying coverage, and processing self-pay transactions.

c) Healthcare Operations

We may use your information for quality improvement, staff training, compliance auditing, and other administrative functions necessary to run our clinic.

d) Appointment Reminders and Communications

We may contact you by phone, email, or text message to remind you of upcoming appointments, provide follow-up instructions, or share health-related information relevant to your care.

e) As Required by Law

We may disclose your information when required by federal, state, or local law, including mandatory reporting obligations.

3. How We Share Your Information

We do not sell your personal information or protected health information. We may share your information in the following circumstances:

• Service providers: Companies that help us operate our clinic and website, such as our electronic health records system, email service, payment processor, and web hosting provider. These parties are bound by confidentiality agreements or Business Associate Agreements where required by HIPAA.
• Other healthcare providers: Physicians, specialists, laboratories, or hospitals involved in your care, as permitted for treatment purposes.
• Insurance companies: For billing, claims processing, and coverage verification.
• Legal and regulatory authorities: In response to a court order, subpoena, or legal process, or as required for public health reporting, abuse reporting, or other mandatory disclosures.
• With your authorization: For any purpose not described above, we will obtain your written authorization before using or disclosing your PHI. You may revoke authorization at any time in writing.

4. Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before:

• Using or disclosing psychotherapy notes (if applicable)
• Using your PHI for marketing purposes
• Selling your PHI (which we will never do)
• Any other use not described in this notice

You may revoke your authorization at any time by submitting a written request to our Privacy Officer. Revocation does not apply to actions already taken in reliance on your authorization.

5. Your Rights Regarding Your Health Information

Under HIPAA and Nevada law, you have the following rights:

a) Right to Inspect and Copy

You may request to inspect and obtain a copy of your medical records and billing records. We will respond within 30 days of your request. Reasonable copy fees may apply.

b) Right to Amend

If you believe your health information is incorrect or incomplete, you may request an amendment. We will respond within 60 days. We may deny the request in certain circumstances, and you have the right to file a statement of disagreement.

c) Right to an Accounting of Disclosures

You may request a list of certain disclosures we have made of your health information. The first request in a 12-month period is free; additional requests may incur a reasonable fee.

d) Right to Request Restrictions

You may request that we restrict how we use or disclose your health information for treatment, payment, or operations. We are not required to agree to all restriction requests, but we must agree if you pay for a service in full out of pocket and ask us not to share that information with your insurance company.

e) Right to Request Confidential Communications

You may ask us to contact you in a specific way or at a specific location. For example, you may ask that we only call you at your work number. We will accommodate reasonable requests.

f) Right to a Paper Copy

You may request a paper copy of this notice at any time, even if you previously agreed to receive it electronically.

g) Right to Be Notified of a Breach

If a breach of your unsecured PHI occurs, we will notify you as required by law.

6. Telehealth Services

Red Canyon Medical Clinic offers telehealth services via secure audio and video platforms. When you use telehealth:

• Your visit is conducted through HIPAA-compliant technology
• Information shared during your telehealth visit is treated with the same privacy protections as an in-person visit
• Recordings of telehealth sessions are not made unless you provide separate written consent

7. SMS/MMS Communications

If you consent to receive text messages from us:

• Messages may include appointment reminders, billing notifications, and clinical follow-ups
• Message frequency varies; message and data rates may apply
• Consent is not required to receive clinical services
• To opt out, reply STOP to any message
• For help, reply HELP or contact us at info@redcanyonclinic.com or (725) 240-6626
• Your phone number will never be sold, shared, or disclosed to third parties for marketing

8. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including:

• Encryption of data transmitted through our website (TLS/SSL)
• Access controls limiting who can view your information
• HIPAA training for all staff who handle protected health information
• Secure storage of uploaded documents

No method of electronic transmission or storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

9. Data Retention

We retain medical records in accordance with Nevada state law and federal requirements. Generally, adult medical records are retained for at least 5 years from the date of last treatment. Records for minors are retained until the patient reaches the age of majority plus the applicable retention period.

Website analytics data and non-clinical contact information may be retained for as long as needed for business purposes and then securely deleted.

10. Cookies and Tracking

Our website may use cookies and similar technologies for:

• Essential functions: Session management and security
• Analytics: Understanding how visitors use our site to improve the experience

We do not use tracking technologies to collect protected health information. You can manage cookies through your browser settings.

11. Children and Minors

We provide clinical services to patients of all ages, including children. For patients under 18, a parent or legal guardian must consent to treatment and is responsible for the patient's account.

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website without parental consent.

12. Nevada Privacy Rights

Under Nevada law (NRS 603A), you may submit a request directing us not to sell your personal information. We do not sell your personal information. If you wish to submit such a request, please contact our Privacy Officer.

13. Breach Notification

In the event of a breach of your unsecured protected health information, we will notify you in accordance with HIPAA's Breach Notification Rule (45 CFR Part 164, Subpart D) and Nevada state breach notification law (NRS 603A.220). Notification will include a description of the breach, the types of information involved, steps you can take to protect yourself, and what we are doing to investigate and mitigate the breach.

14. Changes to This Notice

We reserve the right to update this privacy policy and HIPAA notice at any time. Changes will be posted on this page with a revised effective date. We encourage you to review this page periodically. The current version of this notice is available at our clinic and on our website.

15. Complaints

If you believe your privacy rights have been violated, you may:

• File a complaint with our Privacy Officer at the contact information below
• File a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue SW, Washington, DC 20201, or by calling 1-877-696-6775, or online at hhs.gov/ocr/complaints

You will not be penalized or retaliated against for filing a complaint.

16. Contact Information