Your Privacy Matters

Privacy Policy

Last Updated: January 2025

At ECI - Exo Chiropractic Injury, we are committed to protecting your privacy and maintaining the confidentiality of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or receive care at our facility.

We understand that your trust is essential, especially when it comes to sensitive health data. This policy outlines our practices in clear, straightforward terms so you can make informed decisions about your information.

01

Information We Collect

Personal Information

When you schedule an appointment, become a patient, or interact with our website, we may collect personal information including your name, address, email address, phone number, date of birth, insurance information, and emergency contact details.

Health Information

As a healthcare provider, we collect protected health information (PHI) necessary for diagnosis, treatment, and care coordination. This includes medical history, current symptoms, treatment records, diagnostic images, insurance claims, and billing information. All health information is handled in strict compliance with HIPAA regulations.

Website Usage Data

When you visit our website, we automatically collect certain technical information including your IP address, browser type, device information, pages visited, time spent on pages, and referring website. This data helps us improve our website performance and user experience.

02

How We Use Your Information

Treatment and Care

To provide chiropractic care, injury recovery services, diagnostic evaluations, treatment planning, and ongoing patient care management.

Payment and Billing

To process insurance claims, verify coverage, handle billing inquiries, and maintain financial records related to your care.

Healthcare Operations

To improve quality of care, train staff, conduct internal audits, maintain compliance with legal and regulatory requirements, and manage our practice operations.

Communication

To send appointment reminders, treatment updates, respond to inquiries, and share important practice information or health education materials.

Legal Compliance

To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, including HIPAA and state privacy laws.

03

Cookies and Analytics

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user behavior. Cookies are small text files stored on your device that help us remember your preferences and improve site functionality.

Types of Cookies We Use

  • Essential cookies required for basic website functionality
  • Analytics cookies that help us understand how visitors interact with our site
  • Functional cookies that remember your preferences and settings

Third-Party Analytics

We may use third-party analytics services such as Google Analytics to collect and analyze website usage data. These services use cookies to track visitor behavior in aggregate form, helping us improve our website and services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect the functionality of our website.

04

Third-Party Disclosure

We do not sell, trade, or otherwise transfer your personal information or protected health information to outside parties except as described below. Your privacy is paramount, and we share information only when necessary for your care or required by law.

Healthcare Providers

We may share your health information with other healthcare providers, specialists, or facilities involved in your care and treatment.

Insurance Companies

We disclose information to your insurance carrier as necessary for claims processing, coverage verification, and payment authorization.

Service Providers

We work with trusted third-party vendors who assist with billing, IT services, and practice management. These vendors are contractually obligated to protect your information.

Legal Requirements

We may disclose information when required by law, court order, subpoena, or to protect the rights, property, or safety of our practice, patients, or others.

05

Data Retention and Security

How Long We Keep Your Information

We retain your personal and health information for as long as necessary to provide you with care and services, comply with legal and regulatory requirements, and maintain accurate business records. Medical records are typically retained for a minimum of seven years from the date of last treatment, or longer as required by state and federal law. Financial records are maintained according to applicable tax and accounting regulations.

Security Measures

We implement robust physical, technical, and administrative safeguards to protect your information from unauthorized access, use, or disclosure. These measures include secure servers, encrypted data transmission, access controls, regular security audits, staff training, and secure storage of physical records. While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

06

Your Privacy Rights

You have specific rights regarding your personal and health information. We are committed to honoring these rights and responding to your requests in a timely manner.

Access Your Records

You have the right to request and receive copies of your medical records and other personal information we maintain about you.

Request Corrections

If you believe information in your records is incorrect or incomplete, you may request that we amend it.

Accounting of Disclosures

You may request a list of certain disclosures of your health information that we have made to third parties.

Request Restrictions

You may request restrictions on how we use or disclose your health information, though we are not always required to agree to your request.

Confidential Communications

You may request that we communicate with you about medical matters in a certain way or at a certain location.

Receive Notice of Breach

You have the right to be notified if there is a breach of your unsecured protected health information.

07

Questions About Privacy

If you have questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how your information is handled, please contact us using the information below. We are here to help and will respond to your inquiry as promptly as possible.

For formal privacy complaints or to request a copy of our HIPAA Notice of Privacy Practices, please submit your request in writing to our Privacy Officer at the address above or via email.

Policy Updates

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the date at the top of this policy. Material changes will be prominently posted on our website or communicated to you directly. Your continued use of our services after any changes indicates your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.