Privacy Policy

01 Introduction

Exploring Your Health ("we," "us," or "our") is committed to protecting your privacy and maintaining the security of your personal and protected health information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws.

02 Information We Collect

2.1 Personal Information

When you use our services, we may collect the following personal information:

• Name, address, phone number, email address, and date of birth
• Emergency contact information
• Payment and billing information
• Insurance information (if provided for your records)

2.2 Protected Health Information (PHI)

In the course of providing medical services, we collect and maintain PHI including:

• Medical history, current symptoms, and health conditions
• Laboratory test results and diagnostic information
• Medications, supplements, and treatment plans
• Clinical notes and progress records
• Body composition measurements and other health metrics

2.3 Technical Information

When you visit our website, we automatically collect certain information including:

• IP address, browser type, and device information
• Pages visited and time spent on our website
• Referring website and search terms used to find us
• Cookies and similar tracking technologies (see Section 8)

03 How We Use Your Information

3.1 Treatment, Payment, and Healthcare Operations

We use your information primarily for:

• Treatment: Providing, coordinating, and managing your healthcare services
• Payment: Processing payments and managing billing activities
• Healthcare Operations: Quality improvement, staff training, and business administration

3.2 Communication

We may use your contact information to:

• Schedule appointments and send appointment reminders
• Communicate test results and treatment updates
• Send educational materials and newsletters (with your consent)
• Respond to your inquiries and provide customer support

3.3 Legal Obligations

We may use or disclose your information when required by law, such as:

• Complying with court orders or legal processes
• Reporting certain diseases to public health authorities
• Preventing serious threats to health or safety
• Cooperating with law enforcement in specific circumstances

04 How We Share Your Information

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our practice, including:

• Laboratory testing facilities
• Pharmacy and supplement dispensaries
• Electronic health record (EHR) system providers
• Payment processing services
• Telehealth platform providers
• Marketing and website analytics services

All service providers are required to maintain the confidentiality and security of your information and may only use it for the purposes we specify.

4.2 Healthcare Providers

With your authorization, we may share your PHI with other healthcare providers involved in your care, such as specialists, your primary care physician, or emergency medical personnel.

4.3 Business Associates

We have Business Associate Agreements (BAAs) with vendors who have access to PHI, ensuring they comply with HIPAA privacy and security requirements.

4.4 We Do Not Sell Your Information

Exploring Your Health does not sell, rent, or trade your personal or health information to third parties for marketing purposes.

05 Your Privacy Rights

Under HIPAA and other privacy laws, you have the following rights regarding your health information:

5.1 Right to Access

You have the right to inspect and obtain a copy of your medical records and other PHI we maintain about you. Requests should be made in writing.

5.2 Right to Amend

If you believe information in your medical record is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances but will provide you with a written explanation.

5.3 Right to an Accounting of Disclosures

You may request a list of certain disclosures of your PHI that we have made. This does not include disclosures for treatment, payment, or healthcare operations.

5.4 Right to Request Restrictions

You may request that we restrict how we use or disclose your PHI. We are not required to agree to your request but will consider it carefully.

5.5 Right to Confidential Communications

You may request that we communicate with you in a specific way or at a specific location (e.g., only via email or only at a work phone number).

5.6 Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Privacy Policy at any time, even if you have previously agreed to receive it electronically.

5.7 Right to Opt Out of Marketing

You may opt out of receiving educational emails, newsletters, or other marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.

06 How We Protect Your Information

6.1 Security Measures

We implement appropriate technical, physical, and administrative safeguards to protect your information, including:

• Encryption of data in transit and at rest
• Secure, HIPAA-compliant electronic health record systems
• Access controls and authentication requirements
• Regular security audits and risk assessments
• Employee training on privacy and security practices
• Secure disposal of physical and electronic records

6.2 Telehealth Security

We use secure, encrypted telehealth platforms that comply with HIPAA requirements. However, you are responsible for ensuring you join appointments from a private location using a secure internet connection.

07 Data Retention

We retain your medical records and PHI for the period required by state and federal law, typically a minimum of 7 years from the date of your last appointment. After this period, records are securely destroyed.

08 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us improve your browsing experience and understand how visitors use our site.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant advertisements (if you've consented)

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of our website.

09 Third-Party Websites

Our website may contain links to third-party websites, such as laboratory testing facilities, pharmacies, or educational resources. We are not responsible for the privacy practices of these sites and encourage you to review their privacy policies.

10 Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors without parental consent. If we become aware that we have inadvertently collected information from a minor, we will take steps to delete it.

11 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information in Section 14.

12 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated to you via email or through a notice on our website. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13 Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by HIPAA regulations. Notification will be provided without unreasonable delay and no later than 60 days after discovery of the breach.

14 Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

15 Filing a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with:

• Exploring Your Health Contact our Privacy Officer using the information in Section 14.
• U.S. Department of Health and Human Services Office for Civil Rights, 200 Independence Avenue S.W., Washington, D.C. 20201 — or visit www.hhs.gov/ocr/privacy

You will not be penalized or retaliated against for filing a complaint.