Privacy Policy

1. Introduction

Remedius Medical Group(“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our patient portal or communicate with us, including via text message (SMS).

This policy applies to all information collected through our website and patient portal at portal.remediusmedical.com and any related services.

2. Information We Collect

We may collect the following types of information:

• Personal Identifiers: Name, date of birth, address, phone number, and email address.
• Protected Health Information (PHI): Medical history, diagnoses, medications, allergies, and other health-related data submitted through our intake forms.
• Contact Preferences: Whether you have opted in to receive SMS notifications.
• Device & Usage Data: IP address, browser type, and pages visited, collected automatically for security and audit purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide and coordinate in-home medical care services.
• Send appointment confirmations and scheduling notifications.
• Send intake form links and care-related communications.
• Comply with applicable laws, including HIPAA.
• Maintain security and audit logs as required by law.

4. SMS / Text Message Communications

5. HIPAA Notice of Privacy Practices

Remedius Medical Group is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). We handle your Protected Health Information (PHI) in accordance with our HIPAA Notice of Privacy Practices. Your PHI is used only for treatment, payment, and healthcare operations, or as otherwise permitted by law.

For a full copy of our HIPAA Notice of Privacy Practices, please contact us at care@remediusmedical.com.

6. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share your information with:

• Healthcare Providers: Nurses, physicians, and clinical staff involved in your care.
• Service Providers: HIPAA-compliant vendors (e.g., cloud storage, email delivery, scheduling software) bound by Business Associate Agreements (BAAs).
• Legal Requirements: When required by law, court order, or government authority.

We will never share your phone number, mobile information, or personal information with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent records are not sold, rented, or shared for any marketing use.

7. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including encryption at rest and in transit, access controls, and audit logging. All vendors who handle PHI are required to sign a HIPAA Business Associate Agreement (BAA).

8. Data Retention

We retain patient records for a minimum of 7 years from the date of last service, or as required by California law. SMS opt-in/opt-out records are retained for a minimum of 4 years.

9. Your Rights

You have the right to:

• Access and receive a copy of your health information.
• Request corrections to your health information.
• Opt out of SMS communications at any time by replying STOP.
• Request restrictions on how we use or disclose your information.
• File a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors without verifiable parental or guardian consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. The effective date at the top of this page will reflect the most recent revision. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your privacy rights, please contact us: