Midi Health (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
We may collect the following types of information when you use our website or visit our practice:
Personal Information: Name, email address, phone number, and mailing address when you contact us, schedule an appointment, or fill out a form.
Health Information: Medical history, insurance details, and other health-related information provided during appointments or through patient forms, handled in accordance with HIPAA (Health Insurance Portability and Accountability Act) regulations.
Website Usage Data: Information such as your IP address, browser type, and pages visited, collected automatically through cookies and analytics tools to help us improve our website.
How We Use Your Information
We use the information we collect to:
- Schedule and manage appointments
- Provide and coordinate your medical care
- Communicate with you about your health, billing, or practice updates
- Improve our website and patient experience
- Comply with legal and regulatory requirements
How We Protect Your Information
We use reasonable administrative, technical, and physical safeguards to protect your personal and health information from unauthorized access, disclosure, or misuse. Health information specifically is handled in compliance with HIPAA requirements, and is only shared with parties involved in your care, billing, or as required by law.
Sharing Your Information
We do not sell or rent your personal information. We may share information only with:
- Healthcare providers involved in your treatment
- Insurance companies for billing purposes
- Legal authorities when required by law
- Service providers who help us operate our website or practice, under confidentiality agreements
Cookies
Our website may use cookies to improve functionality and understand how visitors use our site. You can disable cookies through your browser settings, though some features of the site may not work as intended.
Your Rights
You have the right to:
- Request access to your medical records
- Request corrections to inaccurate information
- Ask how your health information has been used or shared
- Withdraw consent for certain uses, where applicable
To exercise any of these rights, contact us at sotikafirm@gmail.com or [Insert phone number].
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.
Contact Us
If you have questions about this Privacy Policy or how your information is handled, reach out to us:
Email: sotikafirm@gmail.com Phone: [Insert phone number] Address: [Insert address]
Important note, not just a formality here: since you’re handling actual patient health information, a generic template like this isn’t enough on its own — HIPAA has specific notice requirements (a “Notice of Privacy Practices”) that go beyond a standard website privacy policy. I’d strongly recommend having an attorney familiar with healthcare compliance review this before it goes live, especially the sections on health information handling and patient rights. Want me to draft the Terms of Service page next, or a simpler HIPAA Notice of Privacy Practices outline to pair with this?