Who We Are
Geh Family Practice is committed to protecting your personal health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy regulations.
Comments
When visitors leave comments on our site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.
An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. The Gravatar service privacy policy is available at Automattic Privacy Policy. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, please avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract location data from images on the website.
Cookies
- If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These last for one year.
- If you visit our login page, a temporary cookie will be set to check if your browser accepts cookies. This contains no personal data and is discarded when you close your browser.
- When you log in, several cookies will be set to save your login information and screen display choices.
- Login cookies last two days.
- Screen options cookies last one year.
- If you select “Remember Me,” your login will persist for two weeks. Logging out removes these cookies.
- If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and expires after one day.
Embedded Content from Other Websites
Articles on this site may include embedded content (videos, images, articles, etc.). Embedded content from other websites behaves the same way as if you had visited the other website directly.
These websites may collect data, use cookies, embed third-party tracking, and monitor your interaction with that embedded content (including if you are logged in to that website).
Who We Share Your Data With
If you request a password reset, your IP address will be included in the reset email.
We do not sell or share protected health information (PHI) for marketing purposes.
How Long We Retain Your Data
- If you leave a comment, the comment and its metadata are retained indefinitely.
- For users who register on our website, we store the personal information they provide in their user profiles.
- All users can see, edit, or delete their personal information at any time (except username changes). Website administrators can also see and edit that information.
HIPAA Notice: Health-related information submitted through patient portals, forms, or secure communication tools is retained according to medical record retention laws and HIPAA requirements.
What Rights You Have Over Your Data
If you have an account on this site or have left comments, you may request an exported file of your personal data we hold, including any data you have provided. You may also request that we erase personal data we hold about you, except data we are required to keep for administrative, legal, or security purposes.
HIPAA Rights: Patients also have the right to:
- Access and obtain a copy of their medical records.
- Request corrections to their health information.
- Request restrictions on certain uses and disclosures of PHI.
- Receive a record of certain disclosures of PHI.
Requests related to medical records should be directed to Geh Family Practice’s Privacy Officer at Tel:667 320 0424
geh.crnp@gehfp.com
Where Your Data Is Sent
Visitor comments may be checked through an automated spam detection service.
HIPAA Compliance: Any health information collected through patient forms, portals, or secure email is transmitted and stored in accordance with HIPAA security standards, using encryption and access controls to protect your privacy.
Perfect — here’s a HIPAA Notice of Privacy Practices (NPP) draft for Geh Family Practice. This is a required document for healthcare providers under HIPAA. It is typically separate from the website Privacy Policy and must be available to all patients (both online and in-office).
Notice of Privacy Practices
Effective Date: [Insert Date]
Geh Family Practice
This Notice describes how your medical information may be used and disclosed and how you can get access to this information. Please review it carefully.
Our Commitment to Your Privacy
At Geh Family Practice, we are committed to protecting the privacy of your protected health information (PHI). PHI includes information about your health, medical history, treatment, and payment for healthcare services.
HIPAA (Health Insurance Portability and Accountability Act) requires us to:
- Keep your PHI private.
- Provide you with this Notice of our legal duties and privacy practices.
- Abide by the terms of the Notice currently in effect.
How We May Use and Disclose Your Health Information
We may use or share your PHI for the following purposes without additional written authorization:
1. Treatment
To provide, coordinate, or manage your healthcare. For example, your doctor may share information with a specialist regarding your treatment.
2. Payment
To bill and receive payment for services. For example, we may send information to your insurance company for reimbursement.
3. Healthcare Operations
For internal operations such as quality improvement, staff training, and compliance audits.
Other Uses and Disclosures Allowed or Required by Law
We may also use or disclose your PHI without your authorization in situations such as:
- Public health reporting (e.g., disease prevention, reporting child abuse).
- Health oversight activities (e.g., audits, investigations).
- Legal proceedings (e.g., in response to a court order).
- Law enforcement purposes (e.g., reporting certain injuries).
- Workers’ compensation claims.
- To avert a serious threat to health or safety.
- Military and national security purposes (if applicable).
Uses and Disclosures Requiring Your Written Authorization
We will not use or share your PHI for marketing, sale of PHI, or most psychotherapy notes unless you provide written authorization. You may revoke authorization at any time in writing.
Your Rights Regarding Your Health Information
You have the following rights under HIPAA:
- Right to Access and Obtain a Copy
You may request to see and obtain a copy of your medical records, either electronically or in paper form. - Right to Request Amendments
If you believe your records are incorrect, you may request corrections. - Right to Request Restrictions
You may ask us not to share certain information for treatment, payment, or operations. (We are not always required to agree, except when the restriction is for payment purposes and you pay out of pocket in full.) - Right to Confidential Communications
You may request we communicate with you in a specific way (e.g., phone, email, or alternate address). - Right to an Accounting of Disclosures
You may request a list of disclosures of your PHI made in the past six years (not including disclosures for treatment, payment, or operations). - Right to a Paper Copy of this Notice
You may request a printed copy of this Notice at any time.
Our Responsibilities
- We are required by law to maintain the privacy and security of your PHI.
- We must notify you in the event of a breach that may have compromised your information.
- We will not use or disclose your PHI in ways not covered by this Notice unless you give us written authorization.
Changes to This Notice
We reserve the right to change this Notice at any time. The revised Notice will be posted on our website and available in our office.
Questions or Complaints
If you have questions about this Notice or believe your privacy rights have been violated, you may contact:
Privacy Officer
Geh Family Practice
700c poole rd, Westminster
Tel:667 320 0424
geh.crnp@gehfp.com
You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
⚖️ Legal Requirement: Every healthcare provider must distribute this NPP to patients, make it available on their website, and post it prominently in their office.