Privacy Policy
Welcome to the official website of Kelvin E. Yeh, MD. Your privacy is extremely important to us. This Privacy Policy explains how we collect, use, and protect your personal and health information. We are committed to safeguarding your privacy and complying with applicable laws, including HIPAA (Health Insurance Portability and Accountability Act).
Information We Collect
We may collect the following types of information:
- Personal Information: Such as your name, email address, phone number, and any health-related information you provide when contacting us, booking an appointment, or during medical consultations.
- Health Information: Any medical history, diagnoses, treatments, prescriptions, and other health-related data you provide to us for appointment purposes or consultations.
- Non-Personal Information: Includes your browser type, IP address, and other information to enhance website functionality and improve the user experience.
- Cookies & Tracking Technologies: To enhance the functionality of our website and provide analytics to improve our services.
How We Use Your Information
Your information is used for the following purposes:
- Scheduling and managing appointments.
- Providing medical consultations and healthcare services.
- Responding to inquiries and providing customer support.
- Improving website functionality, security, and user experience.
- Ensuring compliance with legal obligations, including healthcare regulations such as HIPAA.
SMS Consent
We respect your privacy and are committed to protecting your personal information. If you choose to provide your mobile number for appointment reminders, updates, or other communications, your SMS consent will be used solely for communication purposes related to our services.
SMS consent is not shared with third parties or affiliates for marketing purposes. We do not sell, rent, or disclose your SMS consent information to outside parties unless required by law or necessary to provide you with our services.
You may opt out of receiving SMS messages from us at any time by following the instructions provided in the message or by contacting us directly.
You may receive SMS messages related to appointment reminders, rescheduling, billing notifications, and post-visit follow-ups. The frequency of these messages may vary depending on your interactions with our services.
Data Protection & Security
We take the protection of your personal and health information seriously. We implement industry-standard security measures to safeguard your data against unauthorized access, use, or disclosure. These include encryption, access controls, and regular audits to ensure compliance with HIPAA and other privacy regulations.
Sharing Your Information
We do not sell, rent, or trade your personal or health-related information to third parties. However, we may share your information with authorized third parties for purposes such as:
- Providing healthcare services (e.g., doctors, medical professionals, healthcare facilities).
- Complying with legal requirements (e.g., government agencies, law enforcement, as required by law).
- Contracted service providers who assist in operating our website and business, all under strict confidentiality agreements.
HIPAA and Health Information Privacy
We are committed to protecting the privacy and security of your personal health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Any information you provide through our website, including contact forms or SMS communications, is treated with strict confidentiality.
We do not share your protected health information (PHI) with third parties without your consent, unless permitted or required by law.
For more information about HIPAA and health information privacy, you may visit the website of the U.S. Department of Health and Human Services at https://www.hhs.gov/hipaa/for-professionals/privacy/index.html.
Data Retention
We retain your personal information for as long as necessary to provide medical care, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Once your information is no longer required, we take appropriate steps to securely delete or de-identify it in accordance with applicable regulations.
Your Rights
You have the right to access, update, or request the deletion of your personal and health information. If you wish to exercise these rights or have any concerns about your data, you must make a request in writing.
Under HIPAA, you also have the right to request a copy of your medical records and to request corrections if any information is inaccurate.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or to comply with legal requirements. Any changes will be reflected on this page, and we encourage you to review this policy regularly.