Health Clinic AbleEst. 2020 · USA

Privacy Policy

Health Clinic Able ("we," "us," or "our") is committed to protecting your privacy and your protected health information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way. We comply with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), and all applicable U.S. state and federal privacy laws.

1Information We Collect

We collect several categories of information to deliver and improve our services:

• Personal Identifiers — name, email, phone, mailing address, date of birth, Social Security number (when required for insurance).
• Protected Health Information (PHI) — medical history, diagnoses, lab results, medications, treatment notes, prescriptions, and payment records related to your care.
• Financial Information — billing address, credit/debit card numbers (processed by PCI-DSS-compliant third parties; we never store full numbers).
• Technical Data — IP address, browser type, device identifiers, cookies, page views, and referring URLs.
• Communications — emails, chat transcripts, call recordings (with consent), and form submissions.

2How We Use Your Information

We use the information we collect to:

• Provide, coordinate, and bill for clinical and wellness services.
• Communicate with you regarding appointments, results, reminders, and care plans.
• Improve our website, mobile applications, and clinical protocols.
• Conduct de-identified research and quality-improvement initiatives.
• Comply with legal and regulatory obligations (HIPAA, state medical board rules, tax law).
• Protect against fraud, abuse, and security threats.

3How We Share Your Information

We do not sell, rent, or trade your personal information. We disclose PHI only as permitted by HIPAA:

• Treatment — with other providers involved in your care (labs, pharmacies, specialists).
• Payment — with insurers, clearinghouses, and collections when necessary.
• Operations — with business associates (EMR vendors, telehealth platforms) who sign BAAs.
• Legal — in response to subpoenas, court orders, or public-health mandates.
• Your Authorization — only with your written consent.

4Cookies & Tracking Technologies

Our website uses essential cookies for login and session management, analytics cookies (Google Analytics 4 with IP anonymization) to understand usage, and optional marketing cookies that you may opt out of via the cookie banner. You can disable non-essential cookies at any time through your browser settings.

5Data Security

We protect your information with enterprise-grade safeguards including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, SOC 2 Type II certified infrastructure, annual penetration testing, and employee HIPAA training with signed confidentiality agreements. While no system is perfectly secure, we continuously invest in layered defenses to minimize risk.

6Data Retention

We retain medical records in accordance with state law (typically 7–10 years after last visit, or until a minor reaches 21). Marketing and newsletter data is retained until you unsubscribe or request deletion. Financial records are kept for 7 years per IRS requirements.

7Your Rights

Depending on your state of residence, you may have the right to:

• HIPAA — access, amend, receive an accounting of disclosures, and request restrictions on your PHI.
• CCPA/CPRA — know, delete, correct, and opt out of the sale of personal information (we do not sell).
• State Laws — additional rights under laws such as VCDR (VA), CPA (CO), and CTDPA (CT).

To exercise any right, email privacy@healthclinicable.com.

8Children's Privacy

Our services are intended for individuals 18 and older (or minors with a parent/guardian account holder). We do not knowingly collect information from children under 13 without verifiable parental consent.

9Third-Party Links

Our website may contain links to external sites (e.g., patient portals, lab portals). We are not responsible for their privacy practices and encourage you to review their policies before submitting any information.

10International Transfers

All personal and health data is stored and processed within the United States on U.S.-based infrastructure. We do not transfer PHI outside the U.S. without a compliant data-processing agreement.

11Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with a revised "Last updated" date. Continued use of our services constitutes acceptance of the updated policy.

12Contact Us

For privacy questions, HIPAA complaints, or to exercise your rights:

• Privacy Officer — privacy@healthclinicable.com
• Mail — Health Clinic Able, Attn: Privacy Officer, 1 State Farm Pl, Bloomington, IL 61710
• Phone — (615) 373-2320