Privacy Policy

1. Introduction

Great Era Health ("we," "our," or "us") is committed to protecting the privacy and security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare services, visit our website, or interact with our digital platforms.

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws. This policy describes your rights regarding your protected health information (PHI) and how we may use and disclose such information.

2. Information We Collect

2.1 Personal Health Information

We collect and maintain various types of personal health information, including:

• Medical history and current health conditions
• Diagnostic test results and medical records
• Treatment plans and medication information
• Insurance information and billing records
• Emergency contact information

2.2 Personal Information

We also collect personal information such as:

• Name, address, phone number, and email address
• Date of birth and Social Security number
• Employment information
• Family medical history
• Lifestyle and behavioral information relevant to your care

2.3 Technical Information

When you use our website or digital services, we may collect:

• IP address and device information
• Browser type and version
• Usage patterns and preferences
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Treatment

We use your health information to provide, coordinate, and manage your healthcare services, including:

• Diagnosing and treating medical conditions
• Coordinating care with other healthcare providers
• Providing preventive care and wellness programs
• Managing chronic conditions and follow-up care

3.2 Payment

We use your information for billing and payment purposes, including:

• Processing insurance claims
• Collecting payment for services
• Verifying insurance coverage
• Conducting utilization review

3.3 Healthcare Operations

We may use your information for healthcare operations such as:

• Quality assessment and improvement
• Staff training and education
• Business planning and development
• Compliance and risk management

4. Information Sharing and Disclosure

4.1 Authorized Disclosures

We may share your health information in the following circumstances:

• With your consent: When you provide written authorization
• For treatment: With other healthcare providers involved in your care
• For payment: With insurance companies and billing services
• For healthcare operations: With business associates who help us operate

4.2 Required Disclosures

We may be required to disclose your information without your consent in certain situations:

• Public health reporting (communicable diseases, vital statistics)
• Legal proceedings (court orders, subpoenas)
• Law enforcement activities
• Health oversight activities
• Emergency situations to prevent serious harm

5. Your Rights

Under HIPAA and other privacy laws, you have the following rights regarding your health information:

5.1 Right to Access

You have the right to request and receive copies of your medical records and other health information we maintain about you.

5.2 Right to Amend

You have the right to request corrections to your health information if you believe it is inaccurate or incomplete.

5.3 Right to Restrict

You have the right to request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations.

5.4 Right to Confidential Communications

You have the right to request that we communicate with you about your health information in a particular way or at a particular location.

5.5 Right to an Accounting

You have the right to request an accounting of disclosures of your health information that we have made for purposes other than treatment, payment, or healthcare operations.

5.6 Right to File a Complaint

You have the right to file a complaint with us or with the Department of Health and Human Services if you believe your privacy rights have been violated.

6. Data Security

We implement comprehensive security measures to protect your health information:

• Physical Safeguards: Secure facilities, locked file cabinets, and controlled access
• Technical Safeguards: Encryption, firewalls, and secure data transmission
• Administrative Safeguards: Staff training, access controls, and incident response procedures
• Regular Audits: Ongoing monitoring and assessment of security measures

7. Website and Digital Services

7.1 Cookies and Tracking

Our website uses cookies and similar technologies to improve your experience and analyze usage patterns. You can control cookie settings through your browser preferences.

7.2 Third-Party Services

We may use third-party services for website analytics, customer support, and other business functions. These services are bound by strict confidentiality agreements and data protection requirements.

7.3 Telehealth Privacy

Our telehealth platform uses end-to-end encryption and HIPAA-compliant technology to protect your virtual consultations and health data.

8. Data Retention

We retain your health information for the periods required by law and professional standards:

• Medical records: Minimum of 7 years after last treatment
• Financial records: 7 years after final payment
• Minor patient records: Until age of majority plus applicable retention period
• Mental health records: As required by state law

9. Business Associates

We work with various business associates who may have access to your health information to help us provide services. These include:

• Electronic health record vendors
• Billing and collection services
• IT support and cloud storage providers
• Legal and consulting services

All business associates are required to sign agreements ensuring they protect your health information according to HIPAA standards.

10. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting on our website. We will notify you of significant changes through:

• Email notifications to registered users
• Posted notices in our facilities
• Updates on our website

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: