Effective Date: 1.10.2024

At Timber View Wellness Center ("we," "our," "us"), your privacy is a top priority. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with the CTIA (Cellular Telecommunications Industry Association) guidelines, the Health Insurance Portability and Accountability Act (HIPAA), and applicable Illinois privacy laws, including the Biometric Information Privacy Act (BIPA).

1. Information We Collect

We may collect the following types of information:

a. Personal Information

• Contact Details: Name, address, email, and phone number.

• Demographic Information: Date of birth, gender, and other similar data.

• Biometric Information (if applicable): Fingerprints, facial recognition data, or other identifiers protected under Illinois law.

• Protected Health Information (PHI): Medical records, health history, treatment information, insurance details, and any other health-related data as defined by HIPAA.

b. Non-Personal Information

• Device information such as IP address, browser type, operating system, and mobile device identifiers.

• Usage data related to how you interact with our website, mobile app, or services.

2. How We Use Your Information

We use the information we collect to:

• Provide and enhance our services.

• Communicate with you regarding appointments, updates, and promotions.

• Ensure compliance with legal obligations, including Illinois privacy laws and HIPAA requirements.

• Improve security and fraud prevention.

• Conduct billing and insurance-related activities.

3. Information Sharing and Disclosure

We do not sell, rent, or lease your personal information to third parties. However, we may share your information in the following circumstances

• Service Providers: To third-party vendors who assist in providing our services (e.g., payment processors, IT support) in compliance with HIPAA regulations through Business Associate Agreements (BAAs).

• Legal Compliance: When required by law or to protect our rights, users, or the public.

• Consent: With your explicit consent for specific purposes.

• Treatment, Payment, and Healthcare Operations (TPO): Sharing PHI for treatment, payment processing, or healthcare operations as permitted by HIPAA.

4. Biometric Information Compliance (BIPA)

If we collect biometric information, we will:

• Inform you in writing about the collection, purpose, and storage duration.

• Obtain your written consent before collection.

• Securely store biometric data using industry-standard safeguards.

• Retain biometric information only as long as necessary to fulfill its purpose and comply with legal requirements.

• Permanently delete biometric data within three years of your last interaction with us.

5. HIPAA Compliance

We are committed to complying with HIPAA standards to protect your Protected Health Information (PHI). This includes:

• Safeguards: Implementing administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of PHI.

• Access Control: Limiting access to PHI to authorized personnel only.

• Training: Ensuring staff members are trained on HIPAA compliance.

• Reporting Breaches: Promptly reporting any unauthorized access, use, or disclosure of PHI as required by law.

6. Data Security

We implement industry-standard measures to protect your information, including encryption, secure servers, and regular security audits. However, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

As an Illinois resident and under HIPAA, you have the following rights:

• Access: Request access to the personal data and PHI we hold about you.

• Correction: Request corrections to inaccurate or incomplete data.

• Deletion: Request the deletion of your data, subject to legal and contractual obligations.

• Restriction: Request restrictions on certain uses and disclosures of PHI.

• Accounting of Disclosures: Request a record of certain disclosures of your PHI.

• Opt-Out: Decline certain data uses, such as marketing communications.

To exercise your rights, contact us at info@timberviewwellness.org

8. Children's Privacy

We do not knowingly collect personal information from children, under the age of 13, without the consent of a guardian. If you believe a child has provided us with personal information, and consent of the guardian has not been given, please contact us immediately.

9. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or other factors. The "Effective Date" at the top of this page indicates when the latest revisions were made.

10. Contact Information

For questions or concerns about this Privacy Policy, please contact us at:

Timber View Wellness Center
101 E. DeYoung St,

Marion, Il 62959

618.693.9139

info@timberviewwellness.org

This Privacy Policy is designed to provide transparency and assurance about your privacy rights and how Timber View Wellness Center handles your data, including Protected Health Information under HIPAA. Thank you for trusting us with your information.