Privacy Information

Notice of Privacy Practices

Effective Date: April 14, 2003
Revised Date: July 30, 2013
Revised December 18, 2014
Revised July 19, 2018

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

View the Notice of Privacy Practices

A. PURPOSE OF THE NOTICE.

Longstreet Clinic is committed to preserving the privacy and confidentiality of your health information that is created and/or maintained at our clinic. State and federal laws and regulations require us to implement policies and procedures to safeguard the privacy of your health information. This Notice will provide you with information regarding our privacy practices and applies to all of your health information created and/or maintained at our clinic, including any information that we receive from other health care providers or facilities. The Notice describes the ways in which we may use or disclose your health information and also describes your rights and our obligations concerning such uses or disclosures.

We will abide by the terms of this Notice, including any future revisions made to the Notice as required or authorized by law. We reserve the right to change this Notice and to make the revised Notice effective for past and future health information about you. We will post a copy of the current Notice, which will identify its effective date, in our clinic and on our website at www.longstreetclinic.com

B. USES AND DISCLOSURES OF HEALTH INFORMATION FOR TREATMENT, PAYMENT, AND HEALTH CARE OPERATIONS.

1. Treatment, Payment and Health Care Operations. The following section describes different ways that we may use and disclose your health information for purposes of treatment, payment, and health care operations. We explain each of these purposes below and include examples of the types of uses or disclosures that may be made for each purpose. We have not listed every type of use or disclosure, but the ways in which we use or disclose your information will fall under one of these purposes.

a. Treatment. Your health information will be used to provide you with health care treatment and services. We may disclose your health information to doctors, nurses, nursing assistants, technicians, medical and nursing students, or other personnel who are involved in your health care.

For example, if we need to refer you to another health care provider to receive certain services. We will share information with that health care provider in order to coordinate your care and services.

b. Payment. Disclosure of your health information may be necessary to bill and receive payment from you, an insurance company, or another third party for the health care services you receive from us. We also may disclose health information about you to your health plan in order to obtain prior approval for the services provided to you, or to determine that your health plan will pay for the treatment.

For example, we may need to give health information to your health plan in order to obtain prior approval to refer you to a health care specialist, such as a neurologist or orthopedic surgeon, or to perform a diagnostic test such as a magnetic resonance imaging scan (“MRI”) or a CT scan.

c. Health Care Operations. Your health information may be disclosed in order to perform the necessary administrative, educational, quality assurance, and business functions of our clinic.

For example, your health information may be used to evaluate the performance of our staff in caring for you. We also may use your health information to evaluate whether certain treatment or services offered by our clinic are effective. In addition, we may use a sign-in sheet at the registration desk where you will be asked to sign your name and indicate your physician. We may also call you by name in the waiting room when your physician is ready to see you.

C. USES AND DISCLOSURES OF HEALTH INFORMATION IN SPECIAL SITUATIONS.
We may use or disclose your health information in certain special situations as described below. For these situations, you have the right to limit these uses and disclosures as provided for in Section F of this Notice.

1. Appointment Reminders. Your health information may be used for purpose of contacting you to remind you of a health care appointment.

2. Treatment Alternatives & Health-Related Products and Services. Disclosure of your health information may be necessary in the process of informing you of treatment alternatives or health-related products or services that may be of interest to you.

For example, if you are diagnosed with a diabetic condition, we may contact you to inform you of a diabetic instruction class that we offer at our clinic.

3. Family Members and Friends. Your health information may be disclosed to individuals, such as family members and friends, who are involved in your care or who help pay for your care. We may make such disclosures when: (a) we have your verbal agreement to do so; (b) we make such disclosures and you do not object; or (c) we can infer from the circumstances that you would not object to such disclosures.

For example, if your spouse comes into the exam room with you, we will assume that you agree to our disclosure of your information while your spouse is present in the room.

We also may disclose your health information to family members or friends in instances when you are unable to agree or object to such disclosures, provided that we feel it is in your best interests to make such disclosures and the disclosures relate to that family member or friend’s involvement in your care.

For example, if you present to our clinic with an emergency medical condition, we may share information with the family member or friend that comes with you to our clinic.

4. Marketing – Longstreet Clinic will not use or disclose your health information for marketing purposes without an authorization.

5. Sale of PHI – The sale of health information without the express written authorization of the individual is prohibited.

6. Fundraising – Your provider may contact you to raise funds. You may opt out of receiving fundraising communications.

7. Health Information Exchange – Longstreet Clinic participates in the HealtheConnection Health Information Exchange, a secure network through which your health information is shared with your other healthcare providers as necessary, and as permitted under Federal and State law. You have the right to opt out of HealtheConnection. For more information please call 770-533-6580.

D. OTHER PERMITTED OR REQUIRED USES AND DISCLOSURES OF HEALTH INFORMATION.

There are certain instances in which we may be required or permitted by law to use or disclose your health information without your permission. These instances are as follows:

1. As required by law. We may disclose your health information when required by federal, state, or local law to do so. For example, we are required by the Department of Health and Human Services (DHHS) to disclose your health information in order to allow DHHS to evaluate whether we are in compliance with the federal privacy regulations.

2. Public Health Activities. Your health information may be disclosed to public health authorities that are authorized by law to receive and collect health information for the purpose of preventing or controlling disease, injury, or disability; to report births, deaths, suspected abuse or neglect, reactions to medications; or to facilitate product recalls.

3. Health Oversight Activities. Your health information may be disclosed to a health oversight agency that is authorized by law to conduct health oversight activities, including audits, investigations, inspections, or licensure and certification surveys. These activities are necessary for the government to monitor the persons or organizations that provide health care to individuals and to ensure compliance with applicable state and federal laws and regulations.

4. Judicial or administrative proceedings. We may disclose your health information to courts or administrative agencies charged with the authority to hear and resolve lawsuits or disputes. Disclosure of your health information pursuant to a court order, a subpoena, a discovery request, or other lawful process issued by a judge or other person involved in the dispute may be necessary, but only if efforts have been made to (i) notify you of the request for disclosure or (ii) obtain an order protecting your health information.

5. Worker’s Compensation. When your health condition arises out of a work-related illness or injury, we may disclose your health information to worker’s compensation programs.

6. Law Enforcement Official. Your health information may be disclosed in response to a request received from a law enforcement official to report criminal activity or to respond to a subpoena, court order, warrant, summons, or similar process.

7. Research. Under certain limited circumstances, we may use or disclose your health information for research purposes.

8. To Avert a Serious Threat to Health or Safety. When necessary to prevent a serious threat to the health or safety of you or other individuals, we may use or disclose your health information.

9. Military and Veterans. If you are a member of the armed forces, we may use or disclose your health information as required by military command authorities.

10. National Security and Intelligence Activities. For purposes of intelligence, counterintelligence, and other national security activities, as authorized by law, we may use or disclose your health information to authorized federal officials

11. Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may use or disclose your health information to the correctional institution or to the law enforcement official as may be necessary (i) for the institution to provide you with health care; (ii) to protect the health or safety of you or another person; or (iii) for the safety and security of the correctional institution.

12. Coroners, Medical Examiners, and Funeral Directors. We may disclose your health information to coroners, medical examiners, and funeral directors for the purpose of identifying a decedent, determining a cause of death, or otherwise necessary to enable these parties to carry out their duties consistent with applicable law.

E. USES AND DISCLOSURES PURSUANT TO YOUR WRITTEN AUTHORIZATION.

Except for the purposes identified in Sections B through D, we will not use or disclose your health information for any other purposes unless we have your specific written authorization. You have the right to revoke a written authorization at any time as long as you do so in writing. If you revoke your authorization, we will no longer use or disclose your health information for the purposes identified in that authorization, except to the extent that we may have already taken some action due to your previously signed authorization.

Uses and Disclosures Subject to State and Other Laws. In addition to the federal privacy regulations that require this notice (called the HIPAA regulations), there are Georgia and other federal health information privacy laws. These laws on occasion may require your specific written permission prior to disclosures of certain particularly sensitive information (such as mental health, drug/alcohol abuse, or HIV/AIDS information) in circumstances that the HIPAA regulations would permit disclosure without your permission. Longstreet Clinic is required to comply not only with the HIPAA regulations but also with any other applicable laws that impose more strict nondisclosure requirements.

F. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION.

You have the following rights regarding your health information. You may exercise each of these rights, in writing, by providing us with a completed form that you can obtain from Longstreet Clinic Medical Records Department. In some instances, we may charge you for the cost(s) associated with providing you with the requested information. Additional information regarding how to exercise your rights, and the associated costs, can be obtained from Longstreet Clinic Medical Records Department.

1. Right to Inspect and Copy. You have the right to inspect and copy health information that may be used to make decisions about your care. We may deny your request to inspect and copy your health information in certain limited circumstances. If you are denied access to your health information, you may request that the denial be reviewed.

2. Right to Amend. You have the right to request an amendment of your health information that is maintained by or for our clinic. We may deny your request if it is not properly submitted or does not include a reason to support your request. We may also deny your request if the information sought to be amended: (a) was not created by us, unless the person or entity that created the information is no longer available to make the amendment; (b) is not part of the information that is kept by or for our clinic; (c) is not part of the information which you are permitted to inspect and copy; or (d) is accurate and complete.

3. Right to an Accounting of Disclosures. You have the right to request an accounting of the disclosures of your health information made by us. This accounting of disclosures will not include the following: a) disclosures made before April 14, 2003, b) disclosures to carry out treatment, payment, and health care operations, c) disclosures to an individual regarding their own information, d) disclosures for national security or intelligence purposes, e) disclosures to correctional institutions or law enforcement officials

4. Right to Request Restrictions. You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the health information we disclose about you to someone, such as a family member or friend, who is involved in your care or in the payment of your care. For example, you could ask that we not use or disclose information regarding a particular treatment that you received. We are not required to agree to your request. If we do agree, that agreement must be in writing and signed by you and us.

You have the right to request that your provider restrict certain health information from disclosure to health plans where you pay, out of pocket in full for the care.

5. Right to Request Confidential Communications. You have the right to request that we communicate with you about your health care in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail.

6. Right to a Paper Copy of this Notice. You have the right to receive a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice.

7. Notification of Breach. You have the right to receive notifications whenever a breach of your unsecured health information occurs.

G. QUESTIONS OR COMPLAINTS.
If you have any questions regarding this Notice or wish to receive additional information about our privacy practices, please contact our Privacy Officer at 770-533-6580. If you believe your privacy rights have been violated, you may file a complaint, in writing, with our clinic or with the HHS Office of Civil Rights (OCR). There will be no retaliation for filing a complaint with either the Longstreet Clinic Privacy Officer or OCR.

The Longstreet Clinic, P. C.
Robert Scully, Privacy Officer
725 Jesse Jewell Parkway, Suite 270
Gainesville, Ga. 30501
Telephone: 770-533-6580
Fax: 770-535-2642

General Information we collect & how it is used

Personal Identifying Information
Visitors can browse all NGHS websites without providing any personal identifiable information. Certain information may not be personally identifiable when standing alone (e.g., your age), but may become so when combined with other information (e.g., your age and name). Whether you provide this information is your choice; however, in many instances this type of information is required to participate in a particular activity, realize a benefit we may offer, or receive additional information you may request.

Certain pages contain forms that give visitors the option of providing us with contact information including name, physical address, phone, and email address if you choose to contact us. Providing this information is voluntary. The information you submit is shared internally with NGHS employees who need this information to help respond to your request or improve NGHS operations. Information submitted may be used to evaluate the technical functionality of our website. Information provided may also be utilized to address inappropriate use or communications associated with our website.

We do not share any personally identifiable information of any individual collected on our website with any third party unrelated to us, except in situations where we must provide information for legal purposes or investigations, to protect our rights in or the safety of our website, to protect the safety or rights of other users of our website or if so directed by such individual through a proper authorization.

Non-Personal Identifying Information
We collect non-personal information such as website usage, traffic patterns, site performance and related statistics in aggregate based on our tracking of your visits to our website. Non-personal information may include the type of browser you are using, the third-party website from which your visit originated, the operating system you are using, the domain name of your Internet service provider, the search terms you use on our website, and the specific web pages you visit.

How we collect Information

Newsletters and Email Communications
NGHS offers you the opportunity to receive e-newsletters and e-publications related to our services, news and announcements. You can sign up for free and can unsubscribe at any time through the contact information contained in those communications.

Other communications that you send to us via email may be shared with a customer service representative, employee, medical expert or other NGHS employee that is best able to respond to your inquiry. Email communications are not completely secure or confidential. It is possible that an email may be accessed or read by other internet users. Please do not use email for communications you wish to keep protected and secure.

“Phishing” is a scam designed to steal your personal information. If you receive an email that looks like it is from us asking you for your personal information, do not respond. We will never request your password, user name, credit card information or other personal information through email.

Forms and Surveys
Our website contains forms through which users may request information or supply feedback to us. In some cases, telephone numbers, email addresses or return addresses are required so that we can supply requested information to you, and in other cases, correct names and addresses are required to process credit card payments. All information collected on forms throughout our website are stored on a HIPAA-compliant server to ensure that information remains secure.

After you fill out a form, we may contact you with follow-up information related to your request. We do not provide any information supplied on our web forms to any outside organization for any reason (other than where we may be required to by law, or as necessary to process credit card information). We do not save this personal information for any other reason.

Occasionally, we may survey visitors to our site. The information from these surveys is used in aggregate form to help us understand the needs of our visitors so that we can improve our site. We generally do not ask for information in surveys that would personally identify you. If we do request contact information for follow-up, you may decline to provide it. If survey respondents provide personal information (such as an email address) in a survey, it is shared only with those people who need to see it to respond to the question or request.

Cookies
We collect information about visitors to our site using “first party cookies”, which are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser. Cookies are never associated with specific personal identities. First party cookies are distinct from third party cookies that they are created and directly served by the company hosting the website.

We may use both session ID cookies and persistent cookies. A session ID cookie expires when you close your internet browser. A persistent cookie is stored on your computer. Cookies enable us to track and target the interest of our visitors to enhance your experience on our website.

You can delete our cookies at any time. The “help” section, located on the toolbar of most browsers, will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie or how to disable cookies altogether. Since cookies allow you to take full advantage of some of our website’s best features, we recommend that you leave them turned on.

IP Addresses
Our internet server automatically tracks (but does not store) the Internet Protocol (IP) address of the computers that access our site. An IP address is a number that is assigned to your computer when you access the internet. NGHS may use this information to evaluate how visitors navigate our websites and help improve the content.

Please note that although such information is not personally identifiable, we can determine from an IP address a visitor’s Internet Service Provider and the geographic location of his or her point of connectivity.

Location Tracking
An IP address must be assigned to devices that access the internet. IP addresses are used to make the connection between your device and the websites and services you use. You can’t prevent a website or app from getting the IP address of your device.

Your IP address includes some general information about your device location and we use that information to display your approximate location in the website and mobile app user experience. We identify your device’s approximate location from your IP address, which is provided to us when you visit our website. We do this to provide you a customized experience on our website and mobile app, including the display of location-based information that is relevant to you and your care.

Please note for mobile apps, you may opt in or out of location-based services by changing the location permission settings on your device.

Analytics
NGHS utilizes Google Analytics 4 to gather certain information automatically and store for analytical purposes. This information includes browser type, referring/exit pages, operating system, date/time stamp (to the closest hour), and clickstream data. Internet (IP) addresses and internet service providers (ISP) information is collected, but not stored or retained. We use this information to track and compile non-personal information to analyze trends, monitor visitor traffic within our website content, and gather aggregate demographic information about our visitors. We may combine this log file information with other information we collect from or about you to help improve the services we offer, our marketing, analytics or website functionality.

You may choose to opt out of Google Analytics by going to the following links:

Call Tracking Systems
We use two call tracking systems, Call Tracking Metrics and CallRail, to monitor the quality of some of our calls and improve our marketing efforts or website user experience. Both systems are HIPAA-compliant platforms that treats all personal identifiable data with a high degree of security.

Links to other websites
Our website content may contain links to other websites not owned by NGHS. These third-party websites have different privacy notices and practices. If you submit any information to those websites, your information is governed by the Privacy Statement published on that website. We encourage you to carefully read the Privacy Statement for any website you visit.

Information Security

NGHS provides reasonable and appropriate security measures to protect our website content and any personal information you may provide against foreseeable hazards. When you enter sensitive information (such as a credit card numbers or Protected Health Information) on our forms, we encrypt the transmission of that information using secure socket layer technology (SSL).

When you come across a web page that is secured, your browser will likely display a “closed lock” or other symbol to inform you that SSL has been enabled. The web address should start with “https://” rather than “http://”. SSL allows a secure connection between your web browser and a web server. No computer system or information however can ever by fully protected from every possible threat or hazard and therefore we cannot warrant the security of any information you transmit to us, and you do so at your own risk.

We do not share personal information with third parties unrelated to NGHS, except when required to for legal purposes or investigations. We may share your personal information with third parties who we have contracted with to help us provide services. We will ensure that these third parties have agreed not to use or disclose your personal information except to help us provide the services.