Westchester Oral Surgery Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.

What personal information do we collect from the people that visit our blog, website or app?

When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, social security number or other details to help you with your experience.

When do we collect information?

We collect information from you when you subscribe to a newsletter, respond to a survey, fill out a form or enter information on our site.

How do we use your information?

We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

•To allow us to better service you in responding to your customer service requests.

• To administer a contest, promotion, survey or other site feature.

• To ask for ratings and reviews of services or products

•To follow up with them after correspondence (live chat, email or phone inquiries)

How do we protect your information?

Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.

We use regular Malware Scanning.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.

All transactions are processed through a gateway provider and are not stored or processed on our servers.

Do we use ‘cookies’?

We use cookies for ad tracking purposes.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.

Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information.

Third-party links

We do not include or offer third-party products or services on our website.

Google

Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en

We use Google AdSense Advertising on our website.

Google, as a third-party vendor, uses cookies to serve ads on our site. Google’s use of the DART cookie enables it to serve ads to our users based on previous visits to our site and other sites on the Internet. Users may opt-out of the use of the DART cookie by visiting the Google Ad and Content Network privacy policy.

We have implemented the following:

We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.

Opting out:

Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.

California Online Privacy Protection Act

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. – See more at: https://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf

According to CalOPPA, we agree to the following:

Users can visit our site anonymously.

Once this privacy policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.

Our Privacy Policy link includes the word ‘Privacy’ and can easily be found on the page specified above.

You will be notified of any Privacy Policy changes:

• On our Privacy Policy Page

Can change your personal information:

• By emailing us

• By calling us

How does our site handle Do Not Track signals?

We honor Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.

Does our site allow third-party behavioral tracking?

Facebook or any other third party may use cookies, web beacons and other storage technologies to collect or receive information. Users can opt out of the collection and use of information for ad targeting. To learn how, access: https://www.aboutads.info/choices.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

We do not specifically market to children under the age of 13 years old.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:

We will notify you via email

• Within 7 business days

We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

CAN SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

We collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions

• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

To be in accordance with CANSPAM, we agree to the following:

• Not use false or misleading subjects or email addresses.

• Identify the message as an advertisement in some reasonable way.

• Include the physical address of our business or site headquarters.

• Monitor third-party email marketing services for compliance, if one is used.

• Honor opt-out/unsubscribe requests quickly.

• Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can email us at

• Follow the instructions at the bottom of each email.

and we will promptly remove you from ALL correspondence.

This section of the notice describes how medical information about you may be used and disclosed and how you can obtain access to this information. Please review it carefully.

Introduction

We are required by law to maintain the privacy of “protected health information.” “Protected health information” includes any identifiable information that we obtain from you or others that relates to your physical or mental health, the health care you have received, or payment for your health care.

As required by law, this notice provides you with information about your rights and our legal duties and privacy practices with respect to the privacy of protected health information. This notice also discusses the uses and disclosures we will make of your protected health information. We must comply with the provisions of this notice, although we reserve the right to change the terms of this notice from time to time and to make the revised notice effective for all protected health information we maintain. You can always request a copy of our most current privacy notice from our office.

Permitted Uses and Disclosures

We can use or disclose your protected health information for purposes of treatment, payment and health care operations.

• Treatment means the provision, coordination or management of your health care, including consultations between health care providers regarding your care and referrals for health care from one health care provider to another. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. Therefore, the doctor may review your medical records to assess whether you have potentially complicating conditions like diabetes.
• Payment means activities we undertake to obtain reimbursement for the health care provided to you, including determinations of eligibility and coverage and other utilization review activities. For example, prior to providing health care services, we may need to provide to your insurance carrier (or other third party payor) information about your medical condition to determine whether the proposed course of treatment will be covered. When we subsequently bill the carrier or other third party payor for the services rendered to you, we can provide the carrier or other third party payor with information regarding your care if necessary to obtain payment.
• Health Care Operations mean the support functions of our practice related to treatment and payment, such as quality assurance activities, case management, receiving and responding to patient complaints, physician reviews, compliance programs, audits, business planning, development, management and administrative activities. For example, we may use your medical information to evaluate the performance of our staff in caring for you. We may also combine medical information about many patients to decide what services are not needed, and whether certain new treatments are effective.

Disclosures Related To Communications With You Or Your Family

We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you or relate specifically to your medical care through our office. For example, we may leave appointment reminders on your answering machine or with a family member or other person who may answer the telephone at the number that you have given us in order to contact you.

We may disclose your protected health information to your family or friends or any other individual identified by you when they are involved in your care or the payment for your care. We will only disclose the protected health information directly relevant to their involvement in your care or payment. We may also use or disclose your protected health information to notify, or assist in the notification of, a family member, a personal representative, or another person responsible for your care of your location, general condition or death. If you are available, we will give you an opportunity to object to these disclosures, and we will not make these disclosures if you object. If you are not available, we will determine whether a disclosure to your family or friends is in your best interest, and we will disclose only the protected health information that is directly relevant to their involvement in your care.

We will allow your family and friends to act on your behalf to pick up prescriptions, medical supplies, X-rays, and similar forms of protected health information, when we determine, in our professional judgment, that it is in your best interest to make such disclosures.

Other Situations

Organ and Tissue Donation. If you are an organ donor, we may release medical information to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.

Military and Veterans. If you are a member of the Armed Forces, we may release medical information about you as required by military command authorities. We may also release medical information about foreign military personnel to the appropriate foreign military authority.

Public Health Risks. We may disclose medical information about you for public health activities. These activities generally include the following:

• To prevent or control disease, injury or disability
• To report births and deaths
• To report victim of abuse, neglect, or domestic violence
• To report reactions to medications
• To notify people of product, recalls, repairs or replacements
• To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition

Health Oversight Activities. We may disclose medical information to federal or state agencies that oversee our activities. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws. We may disclose protected health information to persons under the Food and Drug Administration’s jurisdiction to track products or to conduct post-marketing surveillance.

Lawsuits and Disputes. If you are involved in a lawsuit or dispute, we may disclose medical information about you in response to a court or administrative order. We may also disclose medical information about you in a response to a subpoena, discovery request or other lawful process by someone else involved in the dispute.

Law Enforcement. We may release medical information if asked to do so by a law enforcement official:

• In response to a court order, subpoena, warrant, summons or similar process
• To identify or locate a suspect, fugitive, material witness, or missing person
• About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement
• About a death we believe may be the result of a criminal conduct
• About criminal conduct on our premises
• In emergency circumstances to report a crime; the location of the crime or victims or the identity, description or location of the person who committed the crime

Coroners, Medical Examiners and Funeral Directors. We may release medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients to funeral directors as necessary to carry out their duties.

Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary for the institution to provide you with health care, to protect your health and safety or the health and safety of others, or for the safety and security of the correctional institution.

Serious Threats. As permitted by applicable law and standards of ethical conduct, we may use and disclose protected health information if we, in good faith, believe that the use of disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Disaster Relief. When permitted by law, we may coordinate our uses and disclosures of protected health information with public or private entities authorized by law or by charter to assist in disaster relief efforts.

Your Rights

1. You have the right to request restrictions on our uses and disclosures of protected health information for treatment, payment and health care operations. However, we are not required to agree to your request.
2. You have the right to reasonably request to receive communications of protected health information by alternative means or at alternative locations.
3. Subject to payment of a reasonable copying charge as provided by state law, you have the right to inspect or obtain a copy of the protected health information contained in your medical and billing records and in any other practice records used by us to make decisions about you, except for:
   • Psychotherapy notes, which are notes recorded by a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint or family counseling session and that have been separated from the rest of your medical record
   • Information compiled in a reasonable anticipation of, or for use in, a civil, criminal, or administrative action or proceeding.
   • Protected health information involving laboratory tests when your access is required by law
   • If you are a prison inmate and obtaining such information would jeopardize your health, safety, security, custody, or rehabilitation or that of other inmates, or the safety of any officer, employee, or other person at the correctional institution or person responsible for transporting you
   • If we obtained or created protected health information as part of a research study for as long as the research is in progress, provided that you agreed to the temporary denial of access when consenting to participate in the research
   • Your protected health information is contained in records kept by a federal agency or contractor when your access is required by law&
   • If the protected health information was obtained from someone other than us under a promise of confidentiality and the access requested would be reasonably likely to reveal the source of the information

We may also deny a request for access to protected health information if:

1. A licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to endanger your life or physical safety or that of another person
2. The protected health information makes reference to another person (unless such other person is a health care provider) and a licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to cause substantial harm to such other person
3. The request for access is made by the individual’s personal representative and a licensed health care professional has determined, in the exercise of professional judgment, that the provision of access to such personal representative is reasonably likely to cause substantial harm to you or another person

If we deny a request for access for any of the three reasons described above, then you have the right to have our denial reviewed in accordance with the requirements of applicable law.

1. You have the right to request a correction to your protected health information, but we may deny your request for correction, if we determine that the protected health information or record that is the subject of the request:
   • Was not created by us, unless you provide a reasonable basis to believe that the originator of protected health information is no longer available to act on the requested amendment
   • Is not part of your medical or billing records
   • Is not available for inspection as set forth above
   • Is not accurate and complete

In any event, any agreed upon correction will be included as an addition to, and not a replacement of, already existing records.

1. You have the right to receive an accounting of disclosures of protected health information made by us to individuals or entities other than to you for the period provided by law, except for disclosures:
   • To carry out treatment, payment and health care operations as provided above
   • To persons involved in your care or for other notification purposes as provided by law
   • For national security or intelligence purposes as provided by law
   • To correctional institutions or law enforcement officials as provided by law
   • That occurred prior to April 14, 2003
   • That are otherwise not required by law to be included in the accounting
2. You have the right to request and receive a paper copy of this notice from us.
3. The above rights may be exercised only by written communication to us. Any revocation or other modification of consent must be in writing delivered to us.

Complaints

If you believe that your privacy rights have been violated, you should immediately contact our Practice or our Privacy Officer. All complaints must be submitted in writing. We will not take action against you for filing a complaint. You also may file a complaint with the Secretary of Health and Human Services.

Contacting Us

If there are any questions regarding this privacy policy, you may contact us using the information below.

19 Bradhurst Avenue, Suite 2500N
Hawthorne, New York 10532

Phone: 914-592-0440

Email: westchesteroralsurgery@gmail.com