Privacy Policy

Personal Information

We collect personal information that you voluntarily provide to us, including:

• Name, email address, and phone number
• Date of birth and gender
• Medical history and health information
• Insurance information
• Payment information
• Appointment preferences and scheduling information

Health Information

As a healthcare provider, we collect and maintain detailed health information including:

• Medical history and current health conditions
• Laboratory test results
• Treatment plans and progress notes
• Medication history and current prescriptions
• Vital signs and physical examination findings

Website Usage Information

We automatically collect certain information when you visit our website:

• IP address and browser information
• Pages visited and time spent on our site
• Referring website information
• Device and operating system information

Healthcare Providers

We may share your health information with other healthcare providers involved in your care, including:

• Specialists and consultants
• Laboratories and diagnostic facilities
• Pharmacies for prescription fulfillment
• Emergency medical services when necessary

Insurance and Payment Processing

We share necessary information with:

• Your insurance company for claims processing
• Payment processors for billing purposes
• Collection agencies (only if payment is overdue)

Payment Processing with Stripe

We use Stripe, Inc. ("Stripe") as our payment processor to securely handle payment transactions. When you make a payment through our website or services:

• Payment Data Collection: Stripe collects and processes your payment information, including credit card numbers, billing addresses, and other payment details necessary to complete transactions.
• Data Sharing: We share necessary payment information with Stripe to process your payments. This includes transaction amounts, payment methods, and billing information.
• PCI Compliance: Stripe is PCI-DSS Level 1 certified, the highest level of certification available in the payment industry. Your payment card data is encrypted and handled according to strict security standards.
• Data Storage: We do not store your full credit card numbers or sensitive payment information on our servers. Payment data is securely stored and processed by Stripe.
• Stripe's Privacy Policy: Stripe's use of your personal information is governed by their privacy policy, available at https://stripe.com/privacy.
• International Transfers: Stripe may process and store your payment information in the United States or other countries where Stripe operates. By using our payment services, you consent to this transfer.

For questions about payment processing or to exercise your rights regarding payment data, you may contact Stripe directly or contact us at privacy@impacthealthclinics.com.

Legal Requirements

We may disclose your information when required by law, including:

• Court orders or legal subpoenas
• Public health reporting requirements
• Law enforcement investigations
• Protection of patient safety

Security Measures

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest
• Secure servers and databases
• Regular security audits and updates
• Employee training on privacy and security
• Access controls and authentication
• PCI-DSS compliant payment processing through Stripe
• Secure payment gateway integration

HIPAA Compliance

As a healthcare provider, we are fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable state and federal privacy laws.