Legal

Privacy Policy

Last Updated: January 2026

At Emerald Peak Health, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our healthcare services. We are committed to protecting your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws.

Information We Collect

Personal Information

We may collect personal identification information including your name, email address, phone number, mailing address, and other contact details when you:

  • Subscribe to our newsletter
  • Contact us through our website
  • Schedule an appointment
  • Register as a patient

Protected Health Information (PHI)

As your healthcare provider, we collect and maintain medical records that may include:

  • Medical history and current health conditions
  • Test results and diagnoses
  • Treatment plans and prescriptions
  • Insurance and billing information
  • Other information necessary for your care

Technical Information

We automatically collect certain information when you visit our website, including:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our site
  • Referring website addresses

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our healthcare services
  • Process appointments and patient registrations
  • Communicate with you about your care, appointments, and health-related matters
  • Send you newsletters and updates (with your consent)
  • Respond to your inquiries and provide customer support
  • Comply with legal obligations and regulatory requirements
  • Detect, prevent, and address fraud or security issues
  • Improve our website and user experience

HIPAA Compliance & Information Sharing

We comply with HIPAA regulations and protect your Protected Health Information (PHI).

We do not sell, trade, or rent your personal information or PHI to third parties. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly authorize us to share your information
  • For Treatment: With other healthcare providers involved in your care
  • For Payment: With insurance companies and billing services to process claims
  • For Healthcare Operations: For quality assessment, staff training, and operational improvements
  • Legal Requirements: When required by law, court order, or regulatory authorities
  • Public Health Activities: To prevent or control disease, injury, or disability as required by law
  • Business Associates: With vendors who provide services on our behalf (e.g., EMR systems, billing services) under strict confidentiality agreements

Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure servers and databases
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis
  • Staff training on privacy and security practices
  • HIPAA-compliant electronic medical records systems

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

Your Rights

Under HIPAA and applicable privacy laws, you have the right to:

  • Access: Request a copy of your medical records and personal information
  • Amendment: Request corrections to inaccurate or incomplete information
  • Accounting: Receive an accounting of disclosures of your PHI
  • Restriction: Request restrictions on certain uses and disclosures of your information
  • Confidential Communications: Request to receive communications by alternative means or at alternative locations
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Data Portability: Request your information in a commonly used electronic format

To exercise these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by law.

Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. Cookies are small data files stored on your device.

We use cookies to:

  • Remember your preferences and settings
  • Understand how you use our website
  • Improve website functionality and performance

You can control cookies through your browser settings. Note that disabling cookies may affect your experience on our website.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our website is not intended for children under 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information about a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: info@emeraldpeak.health

Subject line: "Privacy Inquiry"

We will respond to your privacy-related inquiries within 30 days.

Notice of Privacy Practices: For more information about how we use and disclose your Protected Health Information (PHI), please request a copy of our HIPAA Notice of Privacy Practices during your visit or contact us to receive a copy.