Privacy Policy & HIPAA Practices

Introduction

Unmeasurable Heights of Strength Healthcare Services ("UHS Healthcare," "we," "us," or "our") is committed to protecting the privacy and confidentiality of your protected health information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and medical information when you visit our website, use our services, or interact with our practice.

We are required by law to maintain the privacy of your health information, provide you with this notice of our legal duties and privacy practices, and notify affected individuals following a breach of unsecured PHI. Nacole Brown, MSN, AGPCNP-BC and all members of our workforce adhere to the standards set forth by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state laws.

This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully. By using our website and services, you acknowledge the practices described in this policy.

Information We Collect

We collect information necessary to provide you with quality healthcare services. The types of information we may collect include:

• Personal Identifiers: Your full name, date of birth, Social Security number, address, telephone number, email address, and emergency contact information.
• Medical History and Records: Past and present medical conditions, symptoms, diagnoses, treatment plans, medication lists, immunization records, laboratory and imaging results, and family medical history.
• Insurance and Billing Information: Health insurance policy numbers, group plan numbers, Medicare or Medicaid identifiers, billing addresses, and payment transaction records.
• Payment Information: Credit or debit card details, billing correspondence, and financial account information used for processing payments and copayments.
• Website Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and interaction data collected through cookies and similar technologies when you visit our website.
• Communication Records: Notes from phone conversations, emails, patient portal messages, and telehealth visit recordings or transcripts as permitted by applicable law and with your consent.

How We Use Your Information

UHS Healthcare uses your information for the following purposes, as permitted under HIPAA:

• Treatment: We use your medical information to provide, coordinate, and manage your healthcare. This includes sharing information with other healthcare providers, specialists, laboratories, pharmacies, and imaging centers involved in your care.
• Payment: We use your information to bill and collect payment from you, your insurance company, or a third-party payer. This includes determining eligibility, processing claims, and conducting utilization review.
• Healthcare Operations: We use your information for practice operations such as quality assessment, patient satisfaction surveys, credentialing, licensing, training healthcare professionals, legal and auditing functions, and business management.
• Communication: We may contact you regarding appointment reminders, treatment alternatives, health-related benefits or services, prescription refill notices, and other relevant health information. We may communicate via phone, text message, email, or patient portal based on the preferences you have provided.
• Legal Compliance: We use and disclose information as required by federal, state, or local law, including public health reporting, Workers' Compensation claims, law enforcement requests, and judicial or administrative proceedings.

Information Sharing

We do not sell your personal information or protected health information. We may share your information only as described in this policy and as permitted by law:

• Insurance Companies and Payers: We share information needed to verify coverage, obtain prior authorization, and process claims for services rendered.
• Other Healthcare Providers: We share information with referring physicians, specialists, hospitals, laboratories, diagnostic imaging centers, and pharmacies involved in your care.
• Business Associates: We share information with third-party service providers who perform functions on our behalf, such as billing services, electronic health record (EHR) vendors, telehealth platform providers, transcription services, and practice management consultants. These business associates are contractually bound to protect your information.
• Legal and Government Entities: We disclose information when required by law, such as to public health authorities, law enforcement, court orders, or for Workers' Compensation purposes.
• Family and Personal Representatives: With your written authorization or as permitted by law, we may share information with family members, close friends, or legal guardians involved in your care or payment for care.

Any other use or disclosure of your PHI will not be made without your written authorization, which you may revoke at any time in writing, except to the extent we have already taken action based on your authorization.

Data Security

Protecting your information is a top priority. UHS Healthcare implements administrative, physical, and technical safeguards to prevent unauthorized access, use, or disclosure of your PHI. These measures include encryption at rest and in transit, strict authentication controls, secure storage, and staff training.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, our privacy practices, or your rights under HIPAA, please contact our Privacy Officer:

This Notice of Privacy Practices is effective as of January 1, 2026.