CareClix Privacy Policy

Effective Date: October 24, 2023


1. Introduction and Scope

CareClix Services, LLC ("CareClix", "we", "us", or "our") provides advanced telehealth technology, comprehensive platform solutions, and clinical provider network coordination. This Privacy Policy is designed to govern your interactions, explain how we collect, store, handle, and secure your personal credentials and healthcare files when you utilize our online interface, portable applications, or engage in medical telehealth assessments.

We acquire several distinct categories of information from or about our active users. This includes Information You Provide (such as user credentials, biographical profiles, transactional and clinical histories, billing targets, and patient correspondence) and Information Collected Automatically (such as telemetry details, regional device identifiers, operating logs, connection metadata, cookies, tracking tags, and diagnostic stats).

Your metrics are utilized in strict alignment with legal and clinical parameters to operate, optimize, protect, and distribute the CareClix systems. Key processing frameworks include managing patient accounts, coordinating remote clinical evaluations, resolving billing concerns, upgrading system integrity, offering customer aid, preventing platform abuse, and fulfilling legal standard reporting obligations.

CareClix does not engage in selling or trading user identity records. We share files exclusively with medical specialists managing your treatment, contracted processing partners operating under strict confidentiality mandates, cloud services supporting platform mechanics, and legal authorities during regulatory inquiries or as demanded by statutory compliance.

For patient metrics categorized under federal law, CareClix operates as a designated Business Associate to physical clinics and physician structures. In this capacity, we administer rigorous protections over Protected Health Information (PHI) according to the Health Insurance Portability and Accountability Act (HIPAA), corresponding state legislation, and bilateral Business Associate Agreements (BAAs).

We deploy persistent, real-time security checking protocols. If an unauthorized entity gains access to or compromises records (a breach or data event), our response networks initiate isolation procedures immediately, carry out technical analysis, minimize negative outcomes, and issue required disclosures to consumers, clinics, and regulatory officers in compliance with law.

Information concerning any diagnostic processing, reference evaluation, or program dealing with substance use disorder is protected under special Federal regulations (42 CFR Part 2). CareClix implements specific structural access limits on Part 2 files, requiring explicit, written consent from patients before distributing substance rehabilitation records, with rare exceptions specified under law.

We utilize industry-certified mechanical, organizational, and physical barriers. Examples include end-to-end data encryption protocols during network transits and system storage, role-specific clearance limitations, routine testing against intrusions, and comprehensive team instruction regarding privacy guidelines to secure all operational environments.

Our platform's remote clinical encounters utilize private interactive video channels, encrypted audio networks, and secure digital message portals. Video streams are delivered in real-time and are never recorded or archived by CareClix unless explicitly requested by the patient and supervising medical professionals for formal EHR records.

Under the California Consumer Privacy Act (CCPA) and subsequent updates, California residents have the right to request comprehensive disclosure of data categories compiled about them, request secure disposal of their personal records, and opt out of data sharing activities. CareClix enforces these practices fully and does not discriminate against users exercising these options.

CareClix retains user information only for the duration required to satisfy diagnostic services, maintain records in compliance with clinical archiving mandates, process relevant billing transactions, defend against potential legal claims, and comply with state and national records retention laws.

For consumers located in Washington (under the My Health My Data Act) and Nevada, CareClix upholds specific and strict processing frameworks. We enforce explicit, opt-in consent before collecting or distributing consumer health data, and provide transparent channels for consumers to access and delete health-related tracking information.

Residents of Virginia, Colorado, Connecticut, Utah, and other jurisdictions possessing specific consumer data privacy laws have distinct privileges under state codes. These privileges commonly encompass rights to confirm personal data processing, correct errors, port records, and object to profiling. We fulfill compliant state-specific requests within standard statutory timelines.

CareClix complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly solicit or collect personal records directly from individuals under the age of 13 without verified parental or legal guardian consent. Pediatric remote care is only conducted under the direct supervision of an authorized parent or guardian.

You can manage your data settings. You have the right to unsubscribe from non-essential promotional messages, adjust browser settings to refuse web cookies, review or correct demographic details, and coordinate record deletions where compatible with clinical preservation laws.

Our platform, apps, and resources may contain links to external web tools. CareClix does not manage, endorse, or assume responsibility for the security controls, privacy procedures, or content published on external platforms, and we encourage users to review those third-party policies directly.

We reserve the right to modify this Privacy Policy to align with new legal requirements or platform updates. When changes are made, we will update the 'Effective Date' and display notification banners within user accounts or post alert banners on the homepage.

For questions, comments, or official record requests, please contact our Privacy Department by emailing privacy@careclix.com, by calling 1-800-CARECLIX, or sending written physical correspondence to: CareClix Services, LLC, Attn: Privacy Office, 1200 Fieldstone Dr, Winchester, VA 22601.