This Notice of Privacy Policy is effective as of 12/12/24.
1. WHAT INFORMATION IS BEING COLLECTED
Personal Information you actively provide to us or we collect from third parties, business partners, other users, and service providers, or which is publicly available.
Your contact information/Identifiers: Name, username, email address, phone number, identity documents, and any other identifiers you provide when accessing or using the service.
Your payment information, if you provide it: Billing name, address, and credit card or other payment information.
Other information: Social media profiles, LinkedIn URLs, custom profiles and any other information about you that you may voluntarily provide or any information about you that may be publicly available.
User content:
Files, any content of communication in any format (including but not limited to documents, SMS, pictures, transcripts, notes, recordings, voicemails, etc.) or other information you upload, provide, grant access to or otherwise implement. *Note you control the content that you provide, and it may include any category of personal information.
Your communications with us:
Surveys, voice and video calls transcripts, emails and SMS messages. Please note: Your phone calls and video call with Dr Rosen are not recorded.
We use do NOT cookies and similar tracking technology to collect and use personal information about you.
2- FOR WHAT PURPOSE IS THAT INFORMATION BEING COLLECTED We use your personal information for the following purposes, to: Communicate with you; Verify your identity to prevent fraud in compliance with applicable law; Create your account for remote prescription software program and for billing; Provide you with a service including respond to your requests for support.
We do not pass any individual's consent to receive SMS to any third party. We do not share phone numbers with third parties for the purpose of allowing those third parties to send SMS.
3- HOW, WHY, AND WHAT PERSONAL INFORMATION WE SHARE WITH THIRD PARTIES SMS opt-in consent and phone numbers for the purpose of SMS are not being shared with any third parties under any circumstances. We may share and disclose your personal information to your pharmacy (via a for remote prescription software program) or for billing purpose (credit card, bank), as identified in the section 1. WHAT INFORMATION IS BEING COLLECTED, solely for legitimate business or legal purposes as described in this Notice and in accordance with applicable law, with the following third parties: Law enforcement agencies, regulatory or governmental bodies, or other third parties in order to respond to legal process, comply with any legal obligation; protect or defend our rights, interests or property or that of third parties; or prevent or investigate wrongdoing in connection with our service. If needed clinically, we may share your name and date of birth to obtain a history of controlled substance from the Prescription Monitoring Program registry, or to register lab results in the Clozapine registry (REMS program).
We provide you with the opportunity to access, review, modify, and delete your personal information that we process.
We provide our services as ordered by our customers and in that context, we act as a service provider on behalf of our customers. In particular, when processing the content of communications such as voicemails, faxes, recordings, etc., in connection with our services, we do so on behalf of our customers and in accordance with their instructions as a service provider. This means that if you believe Dr Rosen may have collected or stored personal information about you as a service provider or if you wish to access, review, modify or delete any content of your communications, under applicable law or otherwise, you should direct your request to Dr Rosen.
Privacy Practices Background: The HIPAA Privacy Rule gives individuals a fundamental new right to be informed of the privacy practices of their health plans and of most of their health care providers, as well as to be informed of their privacy rights with respect to their personal health information. Health plans and covered health care providers are required to develop and distribute a notice that provides a clear explanation of these rights and practices. The notice is intended to focus individuals on privacy issues and concerns, and to prompt them to have discussions with their health plans and health care providers and exercise their rights.
How the Rule Works: General Rule. The Privacy Rule provides that an individual has a right to adequate notice of how a covered entity may use and disclose protected health information about the individual, as well as his or her rights and the covered entity’s obligations with respect to that information. Most covered entities must develop and provide individuals with this notice of their privacy practices.
The Privacy Rule does not require the following covered entities to develop a notice: • Health care clearinghouses, if the only protected health information they create or receive is as a business associate of another covered entity. See 45 CFR 164.500(b)(1). • A correctional institution that is a covered entity (e.g., that has a covered health care provider component). • A group health plan that provides benefits only through one or more contracts of insurance with health insurance issuers or HMOs, and that does not create or receive protected health information other than summary health information or enrollment or disenrollment information. See 45 CFR 164.520(a).
Content of the Notice: Covered entities are required to provide a notice in plain language that describes: • How the covered entity may use and disclose protected health information about an individual. • The individual’s rights with respect to the information and how the individual may exercise these rights, including how the individual may complain to the covered entity. • The covered entity’s legal duties with respect to the information, including a statement that the covered entity is required by law to maintain the privacy of protected health information. • Whom individuals can contact for further information about the covered entity’s privacy policies.
Dr Rosen Intake Forms care providers with direct treatment relationships with individuals.
Providing the Notice: • A covered entity must make its notice available to any person who asks for it. • A covered entity must prominently post and make available its notice on any web site it maintains that provides information about its customer services or benefits. • Health Plans must also: - Provide the notice to individuals then covered by the plan no later than April 14, 2003 (April 14, 2004, for small health plans) and to new enrollees at the time of enrollment. - Provide a revised notice to individuals then covered by the plan within 60 days of a material revision. - Notify individuals then covered by the plan of the availability of and how to obtain the notice at least once every three years. • Covered Direct Treatment Providers must also: - Provide the notice to the individual no later than the date of first service delivery (after the April 14, 2003 compliance date of the Privacy Rule) and, except in an emergency treatment situation, make a good faith effort to obtain the individual’s written acknowledgment of receipt of the notice. If an acknowledgment cannot be obtained, the provider must document his or her efforts to obtain the acknowledgment and the reason why it was not obtained. - When first service delivery to an individual is provided over the Internet, through e-mail, or otherwise electronically, the provider must send an electronic notice automatically and contemporaneously in response to the individual’s first request for service. The provider must make a good faith effort to obtain a return receipt or other transmission from the individual in response to receiving the notice. - In an emergency treatment situation, provide the notice as soon as it is reasonably practicable to do so after the emergency situation has ended. In these situations, providers are not required to make a good faith effort to obtain a written acknowledgment from individuals. - Make the latest notice (i.e., the one that reflects any changes in privacy policies) available at the provider’s office or facility for individuals to request to take with them, and post it in a clear and prominent location at the facility. • A covered entity may e-mail the notice to an individual if the individual agrees to receive an electronic notice.
See 45 CFR 164.520(c) for the specific requirements for providing the notice.
Organizational Options: • Any covered entity, including a hybrid entity or an affiliated covered entity, may choose to develop more than one notice, such as when an entity performs different types of covered functions (i.e., the functions that make it a health plan, a health care provider, or a health care clearinghouse) and there are variations in its privacy practices among these covered functions. Covered entities are encouraged to provide individuals with the most specific notice possible. • Covered entities that participate in an organized health care arrangement may choose to produce a single, joint notice if certain requirements are met. For example, the joint notice must describe the covered entities and the service delivery sites to which it applies. If any one of the participating covered entities provides the joint notice to an individual, the notice distribution requirement with respect to that individual is met for all of the covered entities. See 45 CFR 164.520(d).
Public health and safety: We may share your medical information to obey federal, state and local laws that require us to share information that affects public health and safety. By law we must: • report contagious diseases to public health agencies. • report births, deaths, burn injuries, and cases of suspected abuse or neglect to state and local offices of the government that keep track of this data. • share information necessary for disaster relief activities with the Red Cross or other relief agencies so they can tell your family members where you are and your health condition.
We will not share your personal information with third parties for the third parties’ direct marketing purposes unless you have agreed to such disclosure.
We will verify your request using your name and email. Depending on the nature of your request, we may need additional information to verify your identity. You may authorize an agent to make a request on your behalf to exercise your privacy rights under applicable privacy laws.
To exercise your rights or to allow your authorized agent to exercise your rights, please submit, or have your authorized agent submit, a ticket by contacting Dr Rosen at 1-800-542-1544.
Terms of Service: • Information on the types of messages you can expect to receive: - Scheduling: information about what is needed in order to schedule a visit with Dr Rosen, potential time for a meeting, confirmation or cancelation of a scheduled meeting. - Fees: information about the fees. • Standard messaging disclosures: - Messaging frequency may vary. - Message and data rates may apply. - You can opt out at any time by texting "STOP." - For assistance, text "HELP" or visit our Privacy Policy and Terms of Service Policy at https://drosenmd.com/privacy-policy.html - You can also manage your communication preferences (email, SMS, phone, video conferencing platform) by contacting Dr Rosen at 1-800-542-1544.
5- HOW WE KEEP YOUR PERSONAL INFORMATION SECURED
Keeping your information secure is important to us. We have taken appropriate steps designed to reduce the risk that your personal information may be subject to loss, misuse, unauthorized access, disclosure, alteration or destruction.
For more information on Dr Rosen’s security measures, please contact contacting Dr Rosen at 1-800-542-1544.
6- THIRD-PARTY LINKS AND SERVICES
This Notice does not apply to, nor are we responsible for, the privacy, information or other practices of any third parties, including any third party operating any site or service to which the Website or Apps link including but not limited to social media sites. The inclusion of a link on the Website or Apps does not imply our endorsement of the linked site or service. You should check the privacy notices of those sites before providing your personal information to them.
7- DATA RETENTION
We will retain your personal information for no longer than is necessary to fulfill the purposes for which the information was originally collected unless a longer retention period is required or permitted by law, for legal, tax or regulatory reasons, or other legitimate and lawful business purposes.
Where we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.
8- CHILDREN'S PRIVACY Patients younger than the age of 18 are usually considered minors. Most of the time, the parents or legal guardians of minor patients make decisions about their children’s medical care, control release of their children’s medical information and have the privacy rights described in paragraph 4- HOW WE RESPECT YOUR PRIVACY RIGHTS. However, there are times when minor patients may make decisions about their own care. In such situations, the minor patient controls release of the medical information and has the rights described in this Notice. For example, by law, minors such as adolescents may seek care on their own for medical conditions such as mental health issues, sexually transmitted diseases, drug dependencies, HIV and pregnancy. In addition, some minors (for example, those who are married, have been pregnant or have graduated from high school) have the same rights as adults in making decisions about all their own medical care. When minor patients are allowed by law to make decisions about their own medical care, they control release of their medical information even to their parents/legal guardians and have the privacy rights described in paragraph 4 of this Notice.
9- UPDATES TO THIS NOTICE
We may update this Notice from time to time in response to changing legal, technical, or business developments. If we make changes to our Notice, we will post those changes on this page in addition to updating the "Last Updated" or effective date at the top of this webpage. If we make material changes, we will notify you either by emailing you or by posting a notice of such changes prominently on this page prior to such material changes taking effect.
10- CONTACT US
If you have any questions, comments or concerns about this notice, please contact Dr Rosen at 1-800-542-1544.