Primrose Medical ("Primrose," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information, including Protected Health Information (PHI), when you visit www.primrosemedical.org or use our telehealth services.
1. Scope
This Policy applies to information collected through our website, online forms, scheduling tools, and during virtual visits. It does not apply to third-party websites, services, or platforms that we do not own or control, even if linked from our website.
2. Information We Collect
We only collect information that is necessary to provide care, communicate with you, and improve our services.
Information you provide directly
- Contact details: name, email, phone number, and the content of any message you send through our forms.
- Appointment details: date of birth, reason for visit, insurance information (if applicable), and scheduling preferences.
- Health information: medical history, current medications, symptoms, lab results, and clinical notes generated during your care.
Information collected automatically
- Usage data: pages visited, time on site, referring URLs, and general device information (browser, operating system, approximate location based on IP).
- Cookies and similar technologies: see our Cookie Policy for details on what we use and how to control them.
3. How We Use Information
We use the information described above to:
- Provide, schedule, and document medical care.
- Respond to inquiries submitted through our contact form.
- Send appointment reminders, secure messages, and care-related communications.
- Operate, maintain, and improve our website and services.
- Comply with legal, regulatory, and professional obligations.
We do not sell your personal information, and we do not use your health information for advertising.
4. Protected Health Information (PHI)
If you receive care from Primrose, your PHI is handled in accordance with HIPAA and applicable Florida law. PHI is stored within HIPAA-compliant systems, accessed only by authorized personnel, and used solely for treatment, payment, and healthcare operations, unless you authorize otherwise or disclosure is required by law.
Our Notice of Privacy Practices, provided at intake, describes your rights regarding PHI in detail.
6. Data Security
We use administrative, technical, and physical safeguards designed to protect your information, including encrypted transmissions, access controls, and ongoing staff training. While no system is completely secure, we continuously work to align our practices with industry standards and regulatory requirements.
7. Data Retention
We retain personal information only as long as needed to provide care, fulfill the purposes described in this Policy, or comply with legal, accounting, or reporting obligations. Medical records are retained according to applicable law and professional standards in the State of Florida.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion or restriction of certain information, subject to legal limits (e.g., medical record retention).
- Withdraw previously given consent.
- File a complaint with a relevant regulator.
To exercise any of these rights, contact us using the details below.
9. Children's Privacy
Our services are intended for adults (18+). We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, please contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through this page or, where appropriate, by other reasonable means.
11. Contact Us
Questions or requests regarding this Privacy Policy can be directed to:
Primrose Medical · Privacy Office
Email · privacy@primrosemedical.com
Mailing address · Available upon request