Privacy Policy & Notice of Privacy Practices

Vally Medical Group, APC ("Vally Medical Group," "we," "us," or "our") is committed to protecting the privacy of our patients and website visitors. This Privacy Policy describes how we collect, use, and safeguard your information, including protected health information (PHI) regulated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and information collected through our website at vallymdhawaii.com.

1. Information We Collect

Protected Health Information

As a healthcare provider, we collect and maintain protected health information (PHI) necessary to provide medical care, process insurance claims, and conduct our healthcare operations. PHI may include your name, date of birth, address, phone number, email, social security number, insurance information, medical history, diagnoses, treatment records, billing records, and any other information you provide during your care at one of our clinics.

Website Information

When you visit vallymdhawaii.com, we may automatically collect non-identifying information such as your IP address, browser type, pages visited, time spent on pages, and referring website. If you voluntarily submit information through a contact form, appointment request, or feedback page, we collect the information you provide.

2. How We Use Your Information

We use your information for the following purposes:

• Treatment: To provide, coordinate, and manage your medical care.
• Payment: To bill you or your insurance for services rendered.
• Healthcare Operations: To run our practice, train staff, evaluate quality of care, and comply with legal requirements.
• Patient Communications: To contact you regarding appointments, test results, care instructions, and post-visit feedback.
• Legal Compliance: To comply with federal, state, and local laws, including public health reporting, judicial and administrative proceedings, and law enforcement requests.

4. Your HIPAA Rights

Under HIPAA, you have the following rights regarding your protected health information:

• Right to Access: You may request a copy of your medical records.
• Right to Amend: You may request corrections to your medical records if you believe information is inaccurate or incomplete.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations.
• Right to Request Confidential Communications: You may request that we communicate with you in a specific manner or at a specific location.
• Right to a Paper Copy of This Notice: You may request a printed copy of this Notice at any time by contacting any of our clinics.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights.

5. When We May Share Your Information

We may share your protected health information without your written authorization in the following circumstances, as permitted or required by HIPAA:

• With other healthcare providers involved in your treatment
• With your health plan or insurer for payment purposes
• With business associates who provide services to our practice under a signed Business Associate Agreement
• When required by law, including public health reporting, abuse reporting, judicial proceedings, and law enforcement
• For workers' compensation claims as authorized under Hawaii state law
• To avert a serious threat to health or safety

For any other uses or disclosures of your PHI not described above, we will obtain your written authorization, which you may revoke at any time.

6. How We Protect Your Information

We maintain physical, administrative, and technical safeguards to protect your information, including encryption of electronic PHI, access controls on our systems, staff training on privacy and security, secure disposal of paper records, and Business Associate Agreements with vendors who handle PHI on our behalf.

7. Website Cookies and Analytics

Our website may use cookies and similar technologies to improve user experience and analyze site traffic. These technologies do not collect your protected health information. You may disable cookies in your browser settings, though some site features may not function properly as a result.

8. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children under 13 through our website. Parents or guardians who provide medical information on behalf of a minor patient are acting as the minor's personal representative under HIPAA.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make significant changes, we will update the effective date above and post the revised policy on this page. Continued use of our services after a policy update constitutes acceptance of the revised policy.

10. Contact Us

To file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, visit hhs.gov/ocr/complaints or call 1-877-696-6775. You will not be retaliated against for filing a complaint.