Effective Date: November 1, 2024
This Privacy Policy outlines how Brio Clinical (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal and health information. It is designed to comply with applicable privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) and other federal and state regulations. By using our services, you agree to this policy’s terms.
1. Definitions
- Protected Health Information (PHI): Individually identifiable health information subject to HIPAA regulations.
- Personal Data: Any information that identifies or can be used to identify an individual.
- Data Controller: The entity responsible for deciding how personal data is processed.
- Business Associate: An entity that performs functions or activities on behalf of Brio Clinical that involve the use or disclosure of PHI.
2. Scope of Policy
This Privacy Policy applies to all information collected or submitted when using our services, visiting our websites, or engaging in our testing services.
3. Information Collection
We collect information in the following ways:
- Directly from You: Information provided during registration, appointments, or consultations, including name, address, phone number, email, and health history.
- From Healthcare Providers: Medical records and test orders necessary to perform services.
- From Third-Party Sources: Insurance information, demographic data, or technical details collected through cookies and other online tracking mechanisms.
4. Legal Basis for Processing
We process personal and health information based on the following legal grounds:
- Consent: When you have given explicit consent to use your data.
- Contractual Necessity: To provide requested services or perform obligations under a contract.
- Legal Obligations: To comply with applicable laws, regulations, or court orders.
- Legitimate Interests: When it is necessary for our legitimate business interests, such as improving services, provided this does not override your rights.
5. Use of Information
We use your information to:
- Provide and Improve Services: Perform laboratory testing and deliver results to healthcare providers.
- Communication: Contact you about appointments, results, or administrative matters.
- Billing and Insurance: Process payments and manage claims with insurance companies.
- Research and Development: Anonymized data may be used for research purposes in accordance with applicable laws.
- Compliance and Security: Detect, prevent, and address fraud, legal compliance, and security threats.
6. Data Sharing and Disclosure
Your data may be shared under the following circumstances:
- With Healthcare Professionals: To facilitate treatment or care.
- Business Associates and Service Providers: Third-party vendors that help us deliver services must comply with strict confidentiality agreements.
- Legal and Regulatory Authorities: To comply with subpoenas, court orders, or other lawful requests.
- Mergers and Acquisitions: If Brio Clinical is involved in a merger, sale, or acquisition, your data may be transferred as part of the transaction.
7. Data Protection and Security
We employ various security measures, including encryption, access controls, and secure storage to protect your data. Despite our best efforts, no system is entirely secure. We cannot guarantee the absolute security of your information.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to personalize your experience and analyze usage patterns. You may disable cookies in your browser settings, but some features may not work as intended.
9. International Data Transfers
If you access our services from outside the United States, your information may be transferred to and processed in the U.S., which may have different data protection laws.
10. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Obtain a copy of the information we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data under certain conditions.
- Restriction of Processing: Limit how we use your data.
- Data Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to data processing based on legitimate interests or for marketing purposes.
- Withdrawal of Consent: Revoke consent at any time without affecting prior processing.
11. HIPAA and Protected Health Information (PHI)
Brio Clinical is committed to maintaining the confidentiality and security of your Protected Health Information (PHI) as required by the Health Insurance Portability and Accountability Act (HIPAA). PHI includes any health information that can be used to identify you and is related to your physical or mental health, healthcare services, or payment for those services.a. Permitted Uses and Disclosures of PHI:We may use or disclose your PHI for the following purposes:
- Treatment: To healthcare providers involved in your care.
- Payment: To insurers or payors to facilitate claims and reimbursements.
- Healthcare Operations: For activities such as quality assessment, staff training, and compliance monitoring.b. Other Permitted Disclosures:We may disclose PHI without your authorization in specific circumstances, such as:
- Public Health Activities: Reporting communicable diseases or adverse events.
- Law Enforcement and Legal Proceedings: As required by court orders or subpoenas.
- Health Oversight Activities: For audits, investigations, and inspections authorized by law.
- Organ Donation and Research: If certain conditions are met to protect your privacy.c. Authorization Requirement:For uses and disclosures of PHI not covered by this policy or law, we will obtain your written authorization. You may revoke this authorization at any time, except to the extent we have relied on it.d. Your Rights Regarding PHI:You have specific rights related to your PHI, including:
- Access to Records: You may request to inspect or obtain a copy of your PHI.
- Amendments: You may request amendments to your records if you believe they are incorrect or incomplete.
- Accounting of Disclosures: You may request a list of disclosures made of your PHI for purposes other than treatment, payment, or healthcare operations.
- Request for Restrictions: You may request restrictions on certain uses or disclosures of your PHI.e. Complaints:If you believe your privacy rights have been violated, you may file a complaint with Brio Clinical or with the U.S. Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.
12. Third-Party Links
Our website may contain links to external sites not controlled by Brio Clinical. We are not responsible for the privacy practices of these third parties. Please review their privacy policies separately.
13. Children’s Privacy
Our services are not directed toward children under 13. We do not knowingly collect information from children without parental consent.
14. Data Retention
We retain personal and health information as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of significant updates by posting the new policy on our website and updating the effective date.
16. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: info@brioclinical.com
- Mailing Address: 1910 S Archibald Ave # U Ontario, CA 91761, USA
**Acknowledgment and Agreement:** By using our services, you acknowledge that you have read and understood this Privacy Policy.
