Privacy Policy

Effective Date: September 3, 2025

EHR Secure Care (“we,” “our,” “us”) is committed to protecting the privacy, security, and confidentiality of all Protected Health Information (PHI) and Personally Identifiable Information (PII) entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), state laws, and applicable federal regulations.

1. Information We Collect

We collect and store information necessary for the provision of healthcare services and compliance with healthcare regulations, including:

Patient Information: Name, date of birth, gender, contact information, medical history, treatment details, medications, and insurance details.
Provider Information: Name, credentials, specialty, practice details, and contact information.
Technical Data: IP addresses, device identifiers, browser types, and system activity for audit, security, and troubleshooting.

2. How We Use Information

Information collected is used solely for:

Delivering and managing healthcare services.
Maintaining secure electronic health records (EHR).
Billing, claims processing, and insurance verification.
Quality assurance and performance improvement.
Legal and regulatory compliance.

3. Information Sharing & Disclosure

We do not sell patient or client information. We may share information only as permitted by law and HIPAA:

With authorized healthcare providers directly involved in treatment.
With insurance companies, payment processors, or billing partners.
With business associates under strict confidentiality agreements.
When required by law (e.g., public health reporting, law enforcement, court orders).

4. Data Security

We employ advanced security protocols to protect PHI and PII, including:

End-to-end encryption of data in transit and at rest.
Role-based access controls (staff only see patients assigned to them).
Multi-factor authentication for system access.
Continuous monitoring, logging, and auditing.
Regular security assessments and staff training.

5. Patient Rights

Patients have the following rights regarding their information:

Access & Copies: Request access to their medical records.
Corrections: Request corrections to inaccurate or incomplete records.
Restrictions: Request restrictions on certain uses or disclosures.
Confidential Communications: Request communications via secure methods.
Accounting of Disclosures: Request a record of certain disclosures of their PHI.

6. Data Retention

Records are retained in compliance with state and federal requirements and securely disposed of when no longer needed.

7. Cookies & Tracking (For Web Portal Users)

If accessing our system via web portal:

Minimal cookies are used strictly for authentication and session security.
We do not use cookies for marketing or third-party advertising.

8. Changes to This Policy

We may update this Privacy Policy as regulations or technology change. Any updates will be posted with a revised effective date.

9. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or your privacy rights, please contact:

Privacy Officer – EHR Secure Care
Konkai York
Charlotte, NC
Phone: (980) 355-9715
Email: ehr@iycgtechnologiesllc.com

🔐 Your privacy and the confidentiality of your health information are our highest priority. All data is protected in compliance with HIPAA and industry best practices.