Privacy Policy

Cheryl Emanuel, Nurse Practitioner (“we,” “us,” or “our”), respects your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (the “Site”) or use our virtual consultation services (the “Services”). As a healthcare provider, we comply with HIPAA, HITECH, and applicable state privacy laws.

1. Information We Collect

We collect two main types of information:

Personal Information:

• Contact details (name, email, phone, address).

• Payment information (processed via secure third-party gateways like Stripe; we do not store card details).

• Account credentials (if you create an account).

Protected Health Information (PHI):

• Medical history, symptoms, medications, diagnoses, and consultation notes shared during virtual visits.

• Audio/video recordings (if applicable, with your consent).

• This data is collected to provide telehealth services.

We also collect automatically:

• Device info, IP address, browser type, usage data (via cookies/analytics).

2. How We Use Your Information

• Service Delivery: To schedule, conduct, and follow up on virtual consultations; issue prescriptions; and communicate care plans.

• Payments and Billing: Process fees and generate invoices.

• Improvements: Analyze usage to enhance the Site/Services (anonymized where possible).

• Legal Compliance: Meet HIPAA reporting, audits, or legal requirements.

• Marketing: With consent, send newsletters or service updates (opt-out anytime).

We do not sell your data.

3. How We Share Your Information

We share information only as necessary:

• Service Providers: HIPAA-compliant vendors for telehealth (e.g., Doxy.me), payments (e.g., Stripe), hosting, and email (e.g., via Business Associate Agreements).

• Legal Requirements: With authorities for public health, court orders, or abuse prevention.

• Business Transfers: In case of merger/sale (with notice).

• With Consent: For referrals or third-party services you authorize.

No sharing with marketers or advertisers.

4. HIPAA Notice of Privacy Practices

As your healthcare provider:

• Your Rights: Access, amend, or restrict PHI; request confidential communications; file complaints with us or HHS (healthit.gov).

• Our Duties: Safeguard PHI; notify of breaches; limit uses to treatment/payment/operations.

• Full HIPAA Notice available upon request or during your first consultation.

5. Data Security

• We use encryption (SSL/TLS), access controls, secure servers, and regular audits.

• PHI is stored in HIPAA-compliant systems with backups.

• You are responsible for securing your devices and passwords.

6. Cookies and Tracking

• We use essential cookies for Site functionality and optional analytics (e.g., Google Analytics—opt-out via browser settings).

• No tracking for advertising.

7. Children’s Privacy

Services are not for children under 13 (or 18 without guardian consent). We do not knowingly collect their data.

8. International Users

Services are US-based; data may be stored in the US. Non-US users consent to US data laws.

9. Your Choices

• Update preferences via account settings or email info@cheryl.telehealthpractices.com.

• Opt-out of non-essential emails.

• Request deletion (subject to legal retention for PHI: typically 6+ years).

10. Changes to This Policy

We may update this Policy. Changes will be posted here with the update date. Continued use constitutes acceptance.

11. Contact Us

Questions or complaints? Email info@cheryl.telehealthpractices.com or mail: Cheryl Emanuel, APRN [Your Address]. For HIPAA issues, contact our Privacy Officer at the same email.

Thank you for trusting us with your health information.