Privacy Policy

Who we are

This policy applies to Aurelia Concierge Medicine and to this website. You can reach us at membership@aurelia-concierge.example.com, by phone at (310) 555-0164, or by mail at 9440 Brighton Way, Suite 400, Beverly Hills, CA 90210.

Information we collect

We only collect what we need to respond to you and provide our services.

• Contact details you give us, such as your name, email address, phone number and address.
• Details about the service you are requesting, entered in quote, booking or contact forms.
• Technical data such as browser type, device and pages visited, collected through cookies you allow.
• Records of our communications with you, including calls, emails and messages.

How we use your information

We use personal information to:

• Respond to enquiries and prepare quotes or appointments.
• Deliver, schedule and follow up on the services you request.
• Send service reminders and, where you have agreed, occasional offers.
• Improve our website and meet our legal and regulatory obligations.

Sharing

We do not sell your personal information. We share it only with trusted providers who help us run our business, such as scheduling, payment and email platforms, and only under agreements that require them to protect it. We may disclose information where the law requires it.

Retention and security

We keep information only as long as we need it for the purposes above or as required by law. We use administrative, technical and physical safeguards appropriate to the sensitivity of the data.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information, and to opt out of marketing at any time. Contact us using the details above and we will respond within 30 days.

HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully. Aurelia Concierge Medicine is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the regulations made under it, and we are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

Protected health information is information that identifies you and relates to your past, present or future physical or mental health, the care we provide, or payment for that care. It includes your record, our clinical notes, laboratory and imaging results, prescriptions, and the fact that you are a patient of this practice.

• Treatment: we use and disclose PHI to provide, coordinate and manage your care, including with the specialists, laboratories, imaging centres, pharmacies and hospitals involved in your treatment.
• Payment: we use PHI to prepare superbills and statements, and to support prior authorisation and claims where you ask us to submit to your health plan.
• Health care operations: we use PHI for quality review, clinician training, credentialing, audit, and business management of the practice.
• With your written authorisation: for anything not otherwise permitted by law, including most marketing uses and any sale of PHI, we obtain your signed authorisation first, and you may revoke it in writing at any time.
• As required by law: including public health reporting, communicable disease reporting, suspected abuse or neglect, court orders and subpoenas, workers' compensation, and to avert a serious and imminent threat to health or safety.

Your rights over your health information

Under HIPAA and California law you have the following rights. To exercise any of them, write to us or use the secure member portal.

• Access and copies: you may inspect and obtain a copy of your record, in an electronic format where we hold it electronically. We respond within 30 days and do not charge for a standard electronic copy.
• Amendment: you may ask us to amend information you believe is incorrect or incomplete. If we decline we will tell you why in writing, and you may file a statement of disagreement that becomes part of the record.
• Accounting of disclosures: you may request a list of certain disclosures we have made in the six years before your request.
• Restriction: you may ask us to restrict how we use or disclose your PHI. We are not required to agree, except that we must agree to withhold information from a health plan where you have paid for the service in full yourself.
• Confidential communications: you may ask us to contact you in a particular way or at a particular address, and we will accommodate reasonable requests.
• Paper copy: you may request a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Breach notification: you have the right to be notified if a breach occurs that may have compromised the privacy or security of your information.

How we safeguard and how to complain

Records are held in an encrypted electronic health record with role-based access control and access logging. Staff receive HIPAA training at induction and annually. Business associates who handle PHI on our behalf, including our electronic health record vendor, reference laboratories and billing support, do so under written business associate agreements.

If you believe your privacy rights have been violated you may complain to us in writing at 9440 Brighton Way, Suite 400, Beverly Hills, CA 90210, by email at membership@aurelia-concierge.example.com, or by telephone on (310) 555-0164. You may also complain to the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

We may change this notice and make the new notice effective for all PHI we maintain. The current notice is always posted on this page with its effective date.

California-specific privacy rights

California residents have additional protections under the Confidentiality of Medical Information Act (CMIA) and, for information not governed by HIPAA, under the California Consumer Privacy Act as amended. Medical information held by a provider of health care is generally exempt from the CCPA, but information collected through this website that is not PHI may fall within it.

Where the CCPA applies, you may request disclosure of the categories and specific pieces of personal information collected, deletion of that information, correction of inaccurate information, and you may opt out of any sale or sharing of personal information. We do not sell or share personal information. To make a request, contact us using the details above.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed.