Privacy Policy

At CardioCare, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our online services, or interact with our clinic. Please read this policy carefully.

1. Information We Collect

We may collect the following categories of information:

• Personal Identifiers: Name, email address, phone number, date of birth, and mailing address when you book an appointment or contact us.
• Health Information: Medical history, current medications, symptoms, and other health data you provide in forms or during consultations. This includes Protected Health Information (PHI) as defined by HIPAA.
• Technical Data: IP address, browser type, device information, pages visited, and time spent on our website via cookies and analytics tools.
• Communication Records: Emails, contact form submissions, and any correspondence you send us.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide medical services, process appointments, and communicate with you about your care.
• To send appointment reminders, health tips, newsletters, and clinic updates (only if you opt in).
• To improve our website, services, and patient experience through analytics.
• To comply with legal obligations, including medical record‑keeping and HIPAA requirements.
• To process payments and insurance claims (when applicable).

3. HIPAA Compliance & Protected Health Information

CardioCare is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Any Protected Health Information (PHI) you share with us — whether online, in‑person, or through our telehealth platform — is protected under HIPAA regulations. We maintain administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of your PHI.

We will never disclose your PHI without your written authorization, except as permitted or required by law (e.g., for treatment, payment, or healthcare operations).

4. Data Sharing and Disclosure

We do not sell, rent, or lease your personal information to third parties. We may share your information only in these limited circumstances:

• With Your Consent: When you explicitly direct us to share your information.
• Service Providers: With third‑party vendors who perform services on our behalf (e.g., appointment scheduling, email delivery, IT support) and who are contractually bound to protect your data.
• Legal Requirements: If required by law, court order, or government regulation.
• Emergency Situations: In a medical emergency, we may share necessary information with emergency responders.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. Cookies are small data files stored on your device. You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

We use Google Analytics to collect anonymous usage data. Google Analytics may set its own cookies. You can opt out of Google Analytics by installing the Google Analytics Opt‑out Browser Add‑on.

6. Data Security

We implement industry‑standard security measures to protect your personal information, including SSL encryption for data transmission, firewalls, secure servers, and regular vulnerability assessments. Access to your health information is restricted to authorized personnel who require it for treatment, payment, or healthcare operations.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the highest standards.

7. Data Retention

We retain your personal and health information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Medical records are typically retained for a minimum of seven years from your last visit, or longer if mandated by state or federal regulations. Non‑medical personal data is retained only as long as needed for business or legal purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the health and personal data we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Deletion: Request the deletion of your data, subject to legal retention requirements.
• Opt‑Out: Unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any email or contacting us directly.
• Data Portability: Request a structured, machine‑readable copy of your data.

To exercise these rights, please contact our Privacy Officer using the information below. We will respond within the timeframe required by law.

9. Children's Privacy

Our website and services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

10. Third‑Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices or content of these third‑party websites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. The "Last updated" date at the top of this page indicates when revisions were made. We encourage you to review this policy periodically. Material changes may be communicated via email or a notice on our website.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Privacy Officer:

• Email: privacy@cardiocare.com
• Phone: +1 (212) 555-0123
• Address: 123 Medical Center Drive, Suite 400, New York, NY 10001

This privacy policy is intended to comply with applicable U.S. federal and state laws, including HIPAA and the California Consumer Privacy Act (CCPA) where applicable.