1. Introduction
Nourish Health Group ("we," "us," "our") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and healthcare services.
By accessing or using our services, you consent to the practices described in this policy. We operate in full compliance with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), and other applicable federal and state privacy laws.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly, including:
- Full name, date of birth, gender, and contact details
- Mailing address, ZIP code, and geographic region
- Phone number and email address
- Emergency contact information
- Insurance provider and policy details
- Billing and payment information (processed securely via encrypted gateways)
2.2 Protected Health Information (PHI)
As a healthcare provider, we collect and maintain protected health information, which may include:
- Medical history, diagnoses, and treatment records
- Medication lists and allergy information
- Lab results, imaging reports, and clinical notes
- Care plans, progress notes, and treatment outcomes
- Information shared during telehealth consultations
2.3 Technical Information
When you visit our website, we automatically collect:
- IP address, browser type, and device information
- Pages visited, time spent, and referring URLs
- Cookie identifiers and similar tracking technologies
3. How We Use Your Information
We use your information for the following legitimate business purposes:
- Providing, coordinating, and managing your healthcare services
- Scheduling appointments and communicating with you about your care
- Processing insurance claims, billing, and payments
- Maintaining accurate medical records and treatment histories
- Coordinating care with other healthcare providers you authorize
- Sending appointment reminders, health tips, and service updates
- Conducting quality assurance and improving our services
- Complying with legal, regulatory, and licensing requirements
- Preventing fraud, abuse, and unauthorized access
4. How We Share Information
We do not sell your personal or health information under any circumstances. We may share your information only in these limited situations:
- With your written consent: To family members, caregivers, or other providers you specifically authorize
- For treatment purposes: With other healthcare professionals involved in your care
- For payment: With your insurance company to process claims
- For healthcare operations: With business associates who have signed HIPAA-compliant agreements
- As required by law: To comply with legal obligations, court orders, or government requests
- In emergencies: When necessary to protect your health or safety
5. HIPAA Compliance
Nourish Health Group maintains strict compliance with HIPAA Privacy and Security Rules. Our safeguards include:
- Administrative safeguards: workforce training, access controls, and audit procedures
- Physical safeguards: secure facilities, device controls, and media disposal protocols
- Technical safeguards: 256-bit AES encryption, unique user authentication, automatic logoff, and audit logging
- Business Associate Agreements (BAAs) with all third-party service providers
- Regular risk assessments and security incident response procedures
6. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and improve our services. Types of cookies we use:
- Essential cookies: Required for core website functionality
- Preference cookies: Remember your settings and preferences
- Analytics cookies: Help us understand how visitors use our site
- Marketing cookies: Used to display relevant content (only with consent)
You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.
7. Your Data Rights
Depending on your state of residence, you may have the following rights regarding your personal information:
- Right to access: Request a copy of the personal information we hold about you
- Right to correct: Request correction of inaccurate information
- Right to delete: Request deletion of your personal information (subject to legal retention requirements)
- Right to restrict processing: Limit how we use your information
- Right to data portability: Receive your information in a structured, machine-readable format
- Right to opt-out: Unsubscribe from marketing communications at any time
- Right to withdraw consent: Withdraw consent for processing at any time
To exercise these rights, contact us using the information provided at the end of this policy.
8. Data Security
We implement industry-leading security measures to protect your information, including:
- 256-bit AES encryption for all data at rest and in transit
- Multi-factor authentication for all system access
- Regular security audits, penetration testing, and vulnerability assessments
- Firewall protection, intrusion detection, and continuous monitoring
- Limited access on a need-to-know basis with role-based permissions
- Employee training on privacy and security best practices
Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to notifying affected individuals and authorities in the event of a data breach, in accordance with applicable laws.
9. Data Retention
We retain your information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with state-specific requirements, typically 6-10 years from the last date of service.
10. Children's Privacy
Our services are available to individuals of all ages, but we collect information about minors only through their parents or legal guardians. We comply with the Children's Online Privacy Protection Act (COPPA) and obtain parental consent before collecting any information from children under 13.
11. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer:
- Nourish Health Group
- Address: 8853 Lawrence 2040, Miller, Missouri 65707, USA
- Phone: (417) 452-2384
- Email: info@nourishhealthgroup.com
We will respond to your inquiry within 30 days of receipt.