Privacy Policy

 Privacy Policy

Effective Date: February 3, 2025

1. Introduction
Welcome to Georgia Primary Care dba Primary Clinic (“we,” “us,” or “our”). We are dedicated to protecting the privacy and security of your personal and health information, as well as providing transparency about how data is collected and used on our website. This Privacy Policy outlines the practices we follow in collecting, using, disclosing, and safeguarding your information—including Protected Health Information (PHI) under HIPAA and other information related to your interactions with our website. By accessing or using our website and services, you agree to the practices described in this Privacy Policy.

2. Information We Collect
We collect information from you through our website and clinical services to enhance your experience and improve our services. The types of information we collect include:

• Personal Identification Information: Such as your name, mailing address, telephone number, email address, and other similar contact details.
• Medical Information: Including health history, treatment records, prescriptions, laboratory results, and other health-related data (collected as part of our healthcare services).
• Financial Information: Billing details, insurance information, and payment records for processing healthcare services.
• Website Usage Information: Data related to your interactions with our website, such as IP addresses, browser type, device type, operating system, and pages visited. We may use cookies, web beacons, and similar tracking technologies to collect this information.
• Communication Data: Records of your interactions with us via email, contact forms, live chats, and telehealth sessions.
• Location Information: When you access location-based features of our website or services, we may collect data regarding your geographic location.

3. How We Use Your Information
We use the collected information for a variety of purposes, including:

• Provision of Healthcare Services: To provide, manage, and improve your healthcare through diagnosis, treatment, and follow-up care, including telehealth consultations.
• Administrative Functions: For scheduling, billing, and processing insurance claims.
• Website Functionality and Improvement: To personalize your experience on our website, monitor website traffic, troubleshoot issues, and optimize content and performance.
• Legal and Regulatory Compliance: To meet the requirements of applicable laws and regulations, including HIPAA, and to respond to legal processes.
• Marketing and Communication: To send you updates, newsletters, appointment reminders, and information about our services, provided you have consented to receive such communications.
• Research and Quality Assurance: In de-identified or aggregated form, for purposes such as quality improvement, research, and public health initiatives, as permitted by law.

4. Disclosure of Your Information
We may disclose your information under the following circumstances:

• With Your Consent: Information may be shared with your explicit consent, such as sharing with other healthcare providers for coordinated care.
• For Treatment, Payment, and Healthcare Operations (TPO): As allowed under HIPAA, PHI may be shared with third-party service providers who support our healthcare operations, under strict confidentiality agreements.
• Website Operations and Analytics: Third-party service providers, including web analytics and advertising partners, may receive non-personally identifiable information to help us understand website usage and improve service quality. These third parties are contractually obligated to maintain data confidentiality.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process, such as in response to subpoenas, court orders, or government requests.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to confidentiality obligations.
• Public Health and Safety: When necessary to protect the health or safety of individuals or the public, or in compliance with public health directives.

5. Data Security and Safeguards
We implement a range of security measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Sensitive data transmitted through our website and telehealth platforms is encrypted using industry-standard Secure Socket Layer (SSL)/Transport Layer Security (TLS) protocols.
• Access Controls: We enforce strict access controls, ensuring that only authorized personnel can access your PHI and other sensitive data. Regular training on data security and HIPAA compliance is provided to our staff.
• Secure Storage: All data, including PHI, is stored on secure servers with multi-factor authentication, regular backups, and security audits.
• Monitoring and Auditing: Continuous system monitoring and periodic audits are conducted to identify and address potential vulnerabilities.
• Incident Response: In the event of a data breach, we have an established incident response plan that includes prompt notification to affected individuals, regulatory authorities, and steps to mitigate any potential harm.

6. HIPAA Compliance
As a healthcare provider, we adhere to HIPAA regulations and have implemented policies to safeguard PHI:

• Privacy Rule Adherence: We use and disclose PHI only as permitted by the HIPAA Privacy Rule. You retain rights over your PHI, including access, amendment, and requests for restrictions on certain uses.
• Security Rule Implementation: Our systems and practices are designed to protect electronic PHI (ePHI) according to HIPAA Security Rule standards.
• Breach Notification: In the event of unauthorized access or a breach involving PHI, we will notify the affected individuals and the appropriate authorities in compliance with HIPAA requirements.
• Business Associate Agreements: All third-party vendors with access to PHI are required to sign Business Associate Agreements (BAAs) ensuring their compliance with HIPAA standards.

7. Your Rights and Choices
We recognize and respect your rights regarding your information:

• Access and Correction: You have the right to request access to and correction of your personal and health information.
• Disclosure Restrictions: While you may request restrictions on the disclosure of your information, we may be limited in accommodating such requests by applicable law.
• Communication Preferences: You may choose to opt in or out of non-essential communications, although essential service-related communications may still be sent.
• Consent and Data Portability: You may provide consent for the use of your data for various purposes. Where applicable, you may also request the portability of your information in a structured, commonly used format.

8. Data Retention and Disposal
We retain your personal and health information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to provide you with quality care, and to comply with legal obligations. When the data is no longer needed, it is securely disposed of through methods that prevent its reconstruction or use by unauthorized parties.

9. General Website Privacy Practices
In addition to the healthcare-specific data practices outlined above, this section covers general website privacy measures:

• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your browsing experience, analyze site usage, and deliver personalized content and advertising. You can manage your cookie preferences through your browser settings.
• Third-Party Links: Our website may include links to third-party websites. Please be aware that these external sites have their own privacy policies, and we are not responsible for the content or practices of those sites.
• User-Generated Content: Any information you voluntarily provide through website forms, forums, or reviews is collected in accordance with this Privacy Policy. We may publish user-generated content, but we recommend not sharing sensitive personal or health information in these public areas.
• Data Aggregation and Analytics: We may use aggregated, non-personally identifiable data for research, analytics, and reporting purposes. This information helps us understand how our users interact with our website and improve our services.

10. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date. Your continued use of our website or services following the posting of changes constitutes your acceptance of the revised policy.

11. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Georgia Primary Care dba Primary Clinic
1445 Woodmont Lane NW Atlanta, GA 30318
888-991-4911
[email protected]

For issues related specifically to your PHI or HIPAA rights, please contact our designated Privacy Officer using the information above.