Privacy Policy (HIPAA-Compliant)

Effective Date: 2024 and beyond
Last Updated: 2025

At Desert Spine and Scoliosis Center, protecting your privacy and the confidentiality of your health information is our top priority. This Privacy Policy describes how we collect, use, and protect your information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.

1. Information We Collect

We may collect both Protected Health Information (PHI) and non-PHI when you use our website phoenixspinesurgeon.com, including:

• Personal Information: Name, phone number, email, date of birth, etc.

• Health Information: Medical conditions, symptoms, or other details you voluntarily submit.

• Usage Information: IP address, browser type, pages visited, and other analytics data.

2. Use and Disclosure of Your Health Information

We may use and disclose your PHI for the following purposes:

• Treatment: To coordinate your care and communicate with referring physicians.

• Payment: To bill and collect payment from you, your insurance provider, or a third party.

• Healthcare Operations: To support quality assurance, staff training, and internal review.

• Legal Requirements: To comply with court orders, law enforcement requests, or other legal obligations.

We do not sell your personal or health information to third parties.

3. Your Rights Under HIPAA

As a patient, you have the following rights:

• Right to Access: You may request a copy of your medical records.

• Right to Amend: You may request corrections to inaccurate information.

• Right to Restrict Use: You may ask us to limit the use or sharing of your information.

• Right to Confidential Communication: You can request communications through specific channels (e.g., phone, email).

• Right to Accounting of Disclosures: You may request a list of how your PHI has been shared.

• Right to File a Complaint: You can file a complaint with us or with the U.S. Department of Health & Human Services if you believe your privacy rights have been violated.

To exercise these rights, please contact our Privacy Officer using the contact information below.

4. Data Security

We maintain strict administrative, technical, and physical safeguards to protect your information. These include encryption, secure servers, access controls, and staff training in HIPAA compliance.

However, please be aware that any information transmitted over the internet may not be 100% secure.

5. Electronic Communications

While we may offer appointment scheduling or forms through our website, please avoid sending sensitive medical information via unsecured email or contact forms unless specifically instructed.

If we communicate via email or text, you will be asked to give consent to such communication and may opt out at any time.

6. Cookies and Website Analytics

Our website may use cookies or analytics tools to improve user experience and monitor site performance. These tools may collect non-personal information such as IP address, pages visited, and browser type.

This data is used internally only and is not linked to your medical records.

7. Third-Party Services

Our website may contain links to third-party websites or tools (e.g., online bill pay or telemedicine platforms). We are not responsible for the privacy practices of those external sites or vendors.

8. Contact Information

For questions about this Privacy Policy or to file a privacy complaint, contact:

Privacy Officer
Desert Spine and Scoliosis Center
4566 E. Inverness Ave Suite 208
Mesa AZ 85206
(480) 993-1300

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Effective Date.” Your continued use of the site signifies acceptance of the revised policy.