Privacy Policy
At Health Immune Care ("we", "our", "us"), your privacy is a foundational pillar of the trust you place in us. This Privacy Policy explains in clear language how we collect, use, disclose, and safeguard your personal and health information when you use our website (healthimmunecare.com), mobile applications, and in-person wellness services (collectively, the "Services").
By using our Services, you consent to the practices described in this policy. If you do not agree, please discontinue use immediately.
1. Information We Collect
1.1 Information You Provide Directly
- Account Information: Name, email address, phone number, date of birth, and home address when you register or book a consultation.
- Health Information: Medical history, allergies, current medications, lab results, diagnostic reports, and wellness goals shared during consultations (Protected Health Information, or PHI).
- Financial Information: Billing address, payment method details (processed securely through PCI-DSS compliant providers; we do not store full card numbers).
- Communications: Messages sent through our contact forms, emails, chat logs, and call recordings (with consent).
1.2 Information Collected Automatically
- Device & Usage Data: IP address, browser type, operating system, pages visited, and session duration.
- Cookies & Similar Technologies: We use cookies and local storage to remember preferences and analyze traffic. See Section 7 for details.
- Location Data: General location (state/ZIP) inferred from IP, or precise location if you explicitly grant permission for at-home visits.
2. How We Use Your Information
We use your information strictly to deliver, operate, and improve our Services. Specifically, we use it to:
- Provide personalized wellness consultations, treatments, and coaching.
- Coordinate care between our specialists and your external providers (with consent).
- Process payments, manage billing, and prevent fraud.
- Send appointment reminders, results, and essential account notices.
- Send optional wellness newsletters and marketing (only with explicit opt-in).
- Comply with legal and regulatory obligations (HIPAA, state medical laws).
- Improve our Services through aggregated, anonymized analytics.
3. Legal Basis for Processing (GDPR/CCPA)
For users in the EU/EEA and California, we process personal data based on: (i) your explicit consent, (ii) performance of a contract, (iii) legitimate business interests that do not override your rights, or (iv) legal obligations.
4. How We Share Your Information
We do not sell your personal or health information. We share it only in the following limited circumstances:
- Service Providers: HIPAA-compliant vendors (labs, telehealth platforms, payment processors) under signed Business Associate Agreements (BAAs).
- Referral Partners: External specialists, only with your written consent.
- Legal Requirements: When required by law, court order, or to protect our legal rights.
- Business Transfers: In the event of a merger or acquisition, with notice and the option to opt-out.
All protected health information (PHI) is handled in strict accordance with the Health Insurance Portability and Accountability Act (HIPAA). Our systems are SOC 2 Type II audited, and every team member undergoes annual privacy training.
5. Your Privacy Rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data.
- Request a copy of your health records (HIPAA Right of Access).
- Opt out of marketing communications at any time.
- Restrict or object to certain processing activities.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@healthimmunecare.com. We respond within 30 days.
6. Data Retention
We retain medical records for a minimum of 10 years (or longer where state law requires). Marketing data is retained for 24 months after last interaction, and account data is retained for as long as your account is active. You may request earlier deletion at any time, subject to legal holds.
7. Cookies & Tracking Technologies
Our website uses essential cookies (for login and security), analytics cookies (Google Analytics 4 with IP anonymization), and marketing cookies (only with consent via our cookie banner). You can manage preferences anytime through the cookie settings in your browser or by contacting us.
8. Data Security
We implement industry-standard safeguards including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication for staff, and regular third-party penetration testing. While no system is 100% secure, we continuously invest to stay ahead of emerging threats.
9. Children's Privacy
Our Services are not directed to children under 13. For patients under 18, a parent or legal guardian must provide consent and manage the account on their behalf.
10. International Users
Health Immune Care is headquartered in the United States. If you access our Services from outside the U.S., your data will be transferred to and processed in the U.S., where privacy laws may differ from your country.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be posted on this page with a revised "Last Updated" date, and where required, we will seek your renewed consent.
12. Contact Us
607 Carpenter Way, Auburn, Alabama 36830, USA
Phone: (334) 209-0660
Email: privacy@healthimmunecare.com