We collect and maintain health information necessary to provide quality cardiac care, including:
When you use our website and telemedicine platform, we may collect IP addresses, browser type, pages visited, and device information.
We use your health information to provide, coordinate, and manage your cardiac care — including virtual consultations, treatment plans, prescriptions, lab orders, and follow-up care.
We use your information for billing activities, including processing payments and providing superbills for insurance reimbursement.
We may use de-identified information for quality improvement, staff training, and compliance with legal requirements.
We will not share your health information without your written authorization except as permitted by HIPAA, including: coordinating care with other providers you designate; processing payments; complying with court orders or law enforcement requests; and preventing serious harm in emergencies.
All third-party vendors (EMR, billing services) are bound by Business Associate Agreements requiring them to protect your information.
We use HIPAA-compliant video conferencing with end-to-end encryption. We do not record telemedicine visits without your explicit written consent. To protect your privacy, please join from a private location using a secure internet connection.
We implement encrypted data transmission and storage, secure password-protected medical records systems, limited access on a need-to-know basis, regular security assessments, and comprehensive staff privacy training.
In the event of a breach of your unsecured health information, we will notify you within 60 days as required by law.
ElinMed — Privacy Officer: Christabel E. Nyange, MD, MPH
Email: [email protected] |
To file a federal complaint: HHS Office for Civil Rights, 200 Independence Avenue S.W., Washington D.C. 20201 | 1-877-696-6775