Privacy Policy

Effective Date: [9/01/2022]

Last Updated: [10/5/2026]

[Hannah Williams, NP in Family Health, PLLC ] ("we," "us," or "our") respects your privacy and is committed to protecting the personal and medical information of our patients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [Website URL] (the "Site") and use our telemedicine services.

1. Important Note on Health Information & HIPAA

If you are located in the United States, protected health information (PHI) collected during telemedicine consultations or transmitted through our secure patient portal is subject to the Health Insurance Portability and Accountability Act (HIPAA).

Please note that general communications sent through standard website contact forms, unencrypted emails, or general website browsing are not considered secure or HIPAA-compliant channels for medical advice. Please use our official secure Patient Portal [Link to Portal] for any protected health information.

2. Information We Collect

We may collect several types of information from and about users of our Site and Services:

A. Personal Information You Provide Voluntarily

• Contact Information: Name, email address, phone number, and mailing address provided via contact forms or booking requests.

• Account & Patient Portal Data: Information created when registering for our secure patient portal.

• Telemedicine & Health Data: Medical history, symptoms, insurance details, payment details, and consultation notes (collected strictly through HIPAA-compliant video/portal channels).

B. Automatically Collected Information

When you visit our Site, our web servers and standard analytics tools may automatically record:

• Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, and duration of visit.

• Cookies & Tracking Technologies: Small data files stored on your device to improve Site functionality and user experience. You can disable cookies through your browser settings, though some Site features may function improperly.

3. How We Use Your Information

We use the information we collect to:

• Provide, schedule, and manage virtual healthcare consultations and services.

• Communicate with you regarding appointments, reminders, treatment plans, or administrative matters.

• Process payments for medical services rendered.

• Maintain, analyze, and optimize our website's security, performance, and functionality.

• Comply with legal, regulatory, and professional healthcare obligations.

4. How We Share & Disclose Your Information

We do not sell, rent, or trade your personal or health information to third parties or advertisers. We may share your information only in the following limited circumstances:

• Healthcare Operations & Treatment: With pharmacies, laboratories, specialist healthcare providers, or medical equipment suppliers involved directly in your treatment.

• HIPAA-Compliant Service Providers: With third-party vendors (such as secure EHR systems, video platforms, billing clearinghouses, and cloud storage providers) who execute Business Associate Agreements (BAAs) promising strict confidentiality and compliance.

• Legal Requirements: When required by applicable federal or state laws, subpoenas, court orders, or to protect the health, safety, or legal rights of our practice, patients, or the public.

5. Security of Your Information

We employ industry-standard physical, technical, and administrative safeguards to protect your personal and health information against unauthorized access, loss, or misuse:

• Encrypted video consultations and messaging via HIPAA-compliant platforms.

• Secure Socket Layer (SSL) encryption across our website.

• Strict access controls restricted strictly to essential staff.

While we strive to use commercially reasonable means to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

6. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your information, including:

• Access & Correction: The right to inspect, copy, or request amendments to your health records maintained by our practice.

• Communications: The right to request confidential communications via specific channels (e.g., preferred phone number or email address).

• Opt-Out: You may opt out of non-essential promotional emails at any time by following the unsubscribe instructions included in the email.

To exercise any of these rights, please contact us using the details below.

7. Third-Party Websites & Links

Our Site may contain links to external third-party websites (e.g., health resources, payment gateways, or patient portals). We are not responsible for the privacy practices, security, or content of those external sites. We encourage you to review their respective privacy policies before providing any personal information.

8. Children's Privacy

I do not treat any pediatric patients at this time. 

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated policy on our Site, with the updated "Effective Date" at the top of the page.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact me utilizing the information at the botttom of this page.

​

11. Important Note on Health Information & HIPAA

If you are located in the United States, protected health information (PHI) collected during telemedicine consultations or transmitted through our secure patient portal is subject to the Health Insurance Portability and Accountability Act (HIPAA).

Please note that general communications sent through standard website contact forms, unencrypted emails, or general website browsing are not considered secure or HIPAA-compliant channels for medical advice. Please use our official secure Patient Portal [Link to Portal] for any protected health information or scheduling requests.

21. Telemedicine & Video Visit Privacy Standards

Because video consultations substitute for in-person medical visits, we adhere to strict clinical and technical privacy standards to keep your sessions confidential:

A. Telemedicine Platform & Encryption

• End-to-End Encryption: All video visits and audio transmissions are conducted using HIPAA-compliant video technology encrypted in transit using industry-standard protocols (e.g., AES 256-bit encryption and TLS).

• Business Associate Agreements (BAA): We maintain legally binding Business Associate Agreements with our video technology providers, binding them to the same strict HIPAA privacy and security standards that apply to our medical practice.

• No Unencrypted Channels: Video consultations are never conducted over standard, consumer-grade video applications (such as public FaceTime or Skype) unless specifically permitted under emergency federal regulatory waivers.

B. Session Recording Policy

• No Automatic Audio/Visual Recording: Video visits are not recorded or saved by our practice or our platform vendors. The video feed is a live, real-time audio-visual stream.

• Consent Requirement: Neither the practitioner nor the patient may audio-record or video-record a consultation without express, written consent from both parties prior to the session.

• Clinical Documentation: Notes, medical observations, diagnoses, and treatment plans resulting from the video visit are summarized in your electronic health record (EHR) within our secure patient portal, just as they would be during an in-person clinic visit.

C. Physical Privacy & Session Environment

To preserve doctor-patient confidentiality during remote sessions:

• Practitioner Environment: All telemedicine visits are conducted by the practitioner from a private, secure location where unauthorized individuals cannot view or overhear your consultation.

• Patient Environment: We strongly recommend that you participate in your video session from a private, quiet space with a secure internet connection. Avoid public Wi-Fi networks and public locations (e.g., coffee shops) to prevent accidental disclosure of your health information.