Privacy Policy & HIPAA Notice

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Information We Collect

When you complete our health assessment quizzes, we collect:

• Your name and contact information (email, phone)
• Your baby's name and age
• Health assessment responses about your baby's symptoms, patterns, and behaviors
• Quiz results and personalized recommendations

This information constitutes Protected Health Information (PHI) under HIPAA regulations.

How We Use Your Information

We use your health information for:

• Treatment: To provide you with personalized health recommendations
• Communication: To send you your quiz results via email
• Healthcare Operations: To improve our services and understand patient needs

How We Protect Your Information

We implement appropriate security measures to protect your PHI:

• Secure, encrypted data transmission (HTTPS/TLS)
• Encrypted data storage
• Limited access - only authorized admin can view your information
• Automatic session timeouts for security
• Audit logging of all data access
• Regular security updates and monitoring

Information Sharing

Your health information is shared only as necessary:

• With Dr. Gatto at Serenity Acupuncture & Medicine for review and recommendations
• Via email to the address you provide
• We do NOT sell, rent, or share your information with third parties for marketing

We work with HIPAA-compliant service providers who have signed Business Associate Agreements (BAAs).

Your Rights

Under HIPAA, you have the right to:

• Access: Request a copy of your health information
• Amendment: Request corrections to your information
• Accounting: Receive a list of disclosures of your information
• Restriction: Request limits on how we use or share your information
• Confidential Communication: Request we contact you in a specific way
• Deletion: Request deletion of your information (with some exceptions)

To exercise these rights, please contact us at info@samnj.com or call 201-403-2020.

Data Retention

We retain your health information as long as necessary to provide you with care and services. You may request deletion of your information at any time by contacting us.

Breach Notification

In the unlikely event of a breach of your health information, we will notify you within 60 days as required by HIPAA regulations.

Changes to This Policy

We reserve the right to update this privacy policy. We will post any changes on this page and update the "Last Updated" date. We will notify you of significant changes via email.

Questions or Concerns

If you have questions about this privacy policy or concerns about how your information is handled, please contact:

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated.