CareClix Privacy Policy
Effective Date: October 24, 2023
1. Introduction and Scope
CareClix Services, LLC ("CareClix", "we", "us", or "our") provides advanced telehealth technology, comprehensive platform solutions, and clinical provider network coordination. This Privacy Policy is designed to govern your interactions, explain how we collect, store, handle, and secure your personal credentials and healthcare files when you utilize our online interface, portable applications, or engage in medical telehealth assessments.
2. Categories of Information We Collect
We acquire several distinct categories of information from or about our active users. This includes Information You Provide (such as user credentials, biographical profiles, transactional and clinical histories, billing targets, and patient correspondence) and Information Collected Automatically (such as telemetry details, regional device identifiers, operating logs, connection metadata, cookies, tracking tags, and diagnostic stats).
3. How We Use Information
Your metrics are utilized in strict alignment with legal and clinical parameters to operate, optimize, protect, and distribute the CareClix systems. Key processing frameworks include managing patient accounts, coordinating remote clinical evaluations, resolving billing concerns, upgrading system integrity, offering customer aid, preventing platform abuse, and fulfilling legal standard reporting obligations.
4. How We Disclose Information
CareClix does not engage in selling or trading user identity records. We share files exclusively with medical specialists managing your treatment, contracted processing partners operating under strict confidentiality mandates, cloud services supporting platform mechanics, and legal authorities during regulatory inquiries or as demanded by statutory compliance.
5. HIPAA and Protected Health Information
For patient metrics categorized under federal law, CareClix operates as a designated Business Associate to physical clinics and physician structures. In this capacity, we administer rigorous protections over Protected Health Information (PHI) according to the Health Insurance Portability and Accountability Act (HIPAA), corresponding state legislation, and bilateral Business Associate Agreements (BAAs).
6. Privacy and Security Incidents
We deploy persistent, real-time security checking protocols. If an unauthorized entity gains access to or compromises records (a breach or data event), our response networks initiate isolation procedures immediately, carry out technical analysis, minimize negative outcomes, and issue required disclosures to consumers, clinics, and regulatory officers in compliance with law.
7. Substance Use Disorder Records (42 CFR Part 2)
Information concerning any diagnostic processing, reference evaluation, or program dealing with substance use disorder is protected under special Federal regulations (42 CFR Part 2). CareClix implements specific structural access limits on Part 2 files, requiring explicit, written consent from patients before distributing substance rehabilitation records, with rare exceptions specified under law.
8. Data Security
We utilize industry-certified mechanical, organizational, and physical barriers. Examples include end-to-end data encryption protocols during network transits and system storage, role-specific clearance limitations, routine testing against intrusions, and comprehensive team instruction regarding privacy guidelines to secure all operational environments.
9. Telehealth-Specific Information Practices
Our platform's remote clinical encounters utilize private interactive video channels, encrypted audio networks, and secure digital message portals. Video streams are delivered in real-time and are never recorded or archived by CareClix unless explicitly requested by the patient and supervising medical professionals for formal EHR records.
10. California Privacy
Under the California Consumer Privacy Act (CCPA) and subsequent updates, California residents have the right to request comprehensive disclosure of data categories compiled about them, request secure disposal of their personal records, and opt out of data sharing activities. CareClix enforces these practices fully and does not discriminate against users exercising these options.
11. Data Retention
CareClix retains user information only for the duration required to satisfy diagnostic services, maintain records in compliance with clinical archiving mandates, process relevant billing transactions, defend against potential legal claims, and comply with state and national records retention laws.
12. Consumer Health Data
For consumers located in Washington (under the My Health My Data Act) and Nevada, CareClix upholds specific and strict processing frameworks. We enforce explicit, opt-in consent before collecting or distributing consumer health data, and provide transparent channels for consumers to access and delete health-related tracking information.
13. Additional State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, and other jurisdictions possessing specific consumer data privacy laws have distinct privileges under state codes. These privileges commonly encompass rights to confirm personal data processing, correct errors, port records, and object to profiling. We fulfill compliant state-specific requests within standard statutory timelines.
14. Children and Minors
CareClix complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly solicit or collect personal records directly from individuals under the age of 13 without verified parental or legal guardian consent. Pediatric remote care is only conducted under the direct supervision of an authorized parent or guardian.
15. Your Choices
You can manage your data settings. You have the right to unsubscribe from non-essential promotional messages, adjust browser settings to refuse web cookies, review or correct demographic details, and coordinate record deletions where compatible with clinical preservation laws.
16. Third-Party Websites and Services
Our platform, apps, and resources may contain links to external web tools. CareClix does not manage, endorse, or assume responsibility for the security controls, privacy procedures, or content published on external platforms, and we encourage users to review those third-party policies directly.
17. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy to align with new legal requirements or platform updates. When changes are made, we will update the 'Effective Date' and display notification banners within user accounts or post alert banners on the homepage.
18. Contact Information
For questions, comments, or official record requests, please contact our Privacy Department by emailing privacy@careclix.com, by calling 1-800-CARECLIX, or sending written physical correspondence to: CareClix Services, LLC, Attn: Privacy Office, 1200 Fieldstone Dr, Winchester, VA 22601.