Privacy Policy
Last updated: February 2025
Catalpa Clinic PLLC ("Catalpa Clinic," "we," "our," or "us") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website (www.catalpaclinic.com) and use our services.
Information We Collect
We may collect the following types of information:
- Personal Information: Name, date of birth, address, phone number, email address, and insurance information that you provide when scheduling appointments, completing intake forms, or contacting our office.
- Health Information: Medical history, diagnoses, treatment plans, medications, lab results, and other clinical information necessary for your care. This information is classified as Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).
- Website Usage Data: We may collect non-personally identifiable information about how you interact with our website, such as browser type, pages visited, and time spent on the site. This data helps us improve the website experience.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, coordinate, and manage your healthcare
- To schedule and confirm appointments
- To process insurance claims and billing
- To communicate with you about your care, test results, and follow-up needs
- To comply with legal and regulatory requirements
- To improve our services and website
HIPAA Compliance
As a healthcare provider, Catalpa Clinic is subject to the Health Insurance Portability and Accountability Act (HIPAA). We maintain appropriate administrative, technical, and physical safeguards to protect the privacy and security of your Protected Health Information (PHI). Your PHI will not be used or disclosed except as permitted or required by law.
You have the right to request a copy of our full Notice of Privacy Practices, which provides detailed information about how your health information may be used and disclosed. Please contact our office to request a copy.
Information Sharing and Disclosure
We do not sell, trade, or rent your personal or health information to third parties. We may share your information only in the following circumstances:
- For Treatment: With other healthcare providers involved in your care, such as specialists, laboratories, or hospitals.
- For Payment: With your insurance company or other entities as needed to process claims and receive payment for services.
- For Healthcare Operations: For quality improvement, training, or compliance activities as permitted by HIPAA.
- As Required by Law: When required by federal, state, or local law, such as for public health reporting or court orders.
- With Your Consent: For any purpose not described above, we will obtain your written authorization before sharing your information.
Third-Party Services
Our website may contain links to third-party services, including our patient portal (Elation Health), online scheduling, and payment processing. These services have their own privacy policies, and we encourage you to review them. Third-party services we use include:
- Elation Health: Electronic health records and patient portal
- Google Maps: Embedded map on our contact page
- Elfsight: Google Reviews display widget
Data Security
We implement reasonable security measures to protect your personal and health information from unauthorized access, use, alteration, or disclosure. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Rights
Under HIPAA and applicable state law, you have the following rights regarding your health information:
- The right to access and receive a copy of your health records
- The right to request corrections to your health records
- The right to request restrictions on certain uses and disclosures
- The right to receive an accounting of disclosures
- The right to receive a copy of this Privacy Policy
- The right to file a complaint if you believe your privacy rights have been violated
Children's Privacy
Catalpa Clinic provides care to patients ages 14 and older. For patients ages 14 to 17, a parent or legal guardian must provide consent for treatment and is responsible for the patient's account. We comply with all applicable laws regarding the privacy of minors' health information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:
Catalpa Clinic PLLC
2528 Wheaton Way, Suite 203
Bremerton, WA 98310
Phone: (360) 362-0170
Fax: (360) 995-0304
Email: info@catalpaclinic.com