THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

ClinicGrower provides electronic messaging and related technology services to and on behalf of health care providers for potential healthcare customers/clients. By submitting individually identifiable health information to ClinicGrower or our affiliated entities, including your name, contact information, and potential health concerns, it is expected that ClinicGrower will possess such individually identifiable health information that may be protected under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Furthermore, by submitting this potentially protected health information (PHI) to ClinicGrower, you agree that ClinicGrower may share such PHI with the specific health care provider from which you are seeking potential care, treatment, and education regarding a potential health concern.

In compliance with HIPAA, the HIPAA Privacy Regulations, and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), ClinicGrower:

• does not use or further disclose PHI other than as expressly permitted;
• does not sell, trade, or otherwise transfer to outside parties your PHI;
• keeps your PHI stored in secured networks and is only accessible by ClinicGrower agents, who have special access to such systems; furthermore, all sensitive and/or credit information you submit is encrypted via Secure Socket Layer (SSL) technology;
• agrees to ensure that any agents, including subcontractors, to whom it provides PHI received from, or created or received by ClinicGrower on behalf of the medical provider, also will agree to the same restrictions and conditions of confidentiality; and,
• shall make reasonable efforts to limit the use and/or disclosure of PHI to the minimum amount of information necessary as required by the medical provider to accomplish the intended purpose of the use or disclosure.

We will confirm receipt of your verifiable request within 10 days and provide information about how we will process your request.

We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.

Our disclosure(s) will cover the preceding 12 month period.

Should we deny your request, we will explain you the reasons behind our denial.

We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it.