Privacy Policy
This Notice of Privacy Practices (“Notice”) describes how Innovative Healthcare (“IHCUS,” “we,” “our,” or “us”) may use and disclose your protected health information (“PHI”), your rights concerning that information, and our obligations under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (collectively, “HIPAA”). It also explains additional privacy and security measures applied to data collected through our website GetInnovative.care (the “Site”).
Our Legal Duties
We must safeguard PHI. We are required by law to maintain the privacy and security of PHI that identifies you.
We provide this Notice. We must give you this Notice of our legal duties and privacy practices and follow the terms of the Notice that is currently in effect.
We will inform you of breaches. If a breach occurs that compromises the privacy or security of your unsecured PHI, we will notify you without unreasonable delay and no later than 60 days after discovery, as required by HIPAA.
We may change this Notice. We reserve the right to change our privacy practices and this Notice at any time. Changes apply to all PHI we maintain. Revised notices will be posted on the Site and are available upon request.
How We May Use & Disclose Your Personal Health Information (PHI)
Under HIPAA, we may use or disclose PHI without your written authorization for the following purposes:
Examples:
- Coordinating care with a specialist or your pharmacy.
- Billing your health plan or a third-party payor.
- Quality improvement, internal auditing, credentialing, and staff training.
Other Permitted or Required Disclosures
We may also use or disclose PHI:
• When Required by Law – e.g., reporting abuse or responding to a court order.
• Public Health Activities – preventing or controlling disease, reporting adverse events.
• Health Oversight – audits, inspections, and licensure.
• Law Enforcement – identifying or locating a suspect, fugitive, or missing person.
• Research – under an Institutional Review Board waiver or with your written permission.
• Coroners, Medical Examiners, and Funeral Directors – to identify a deceased person.
• Organ & Tissue Donation – facilitating donation and transplantation.
• Serious Threat to Health or Safety – preventing harm to you or the public.
• Workers’ Compensation – complying with related laws.
• Specialized Government Functions – military and national-security activities.
Uses & Disclosures Requiring Your Written Authorization
We will obtain your written authorization for:
• Marketing communications for which we receive financial remuneration.
• Sale of PHI.
• Psychotherapy Notes (where applicable).
• Any other use or disclosure not described in this Notice.
You may revoke an authorization at any time in writing. Revocation will not affect actions already taken.
Your Rights
Obtain electronic or paper copies of your PHI.
Submit a written request to our Privacy Officer. Fees may apply.
Request Amendment
Ask us to correct PHI you believe is incorrect or incomplete.
Written request with reasoning; we may deny in limited circumstances.
Accounting of Disclosures
Receive a list of certain PHI disclosures made in the past six years.
Written request; first list free in a 12-month period.
Request Restrictions
Ask us to limit uses/disclosures. We are not required to agree, except for disclosures to a health plan for payment/operations when you paid out-of-pocket in full.
Written request specifying the restriction.
Confidential Communications
Ask us to contact you by alternative means or at alternative locations.
Written request specifying how/where to contact you.
Paper Copy of This Notice
Receive a paper copy at any time.
Contact our Privacy Officer
File a Complaint via email at: info@getinnovative.care
Complain if you believe your privacy rights have been violated.
Retaliation is prohibited.
Website-Specific Practices (innovativehealth.care)
Data We Collect Online
• PHI you voluntarily provide via forms, secure messaging, or telehealth portals.
• Usage data (IP address, browser type, pages visited) collected through cookies and similar technologies.
• Device and location data when you enable such features.
How We Use Website Data
• To provide services you request (e.g., schedule visits, refill prescriptions).
• To improve Site functionality and user experience.
• For security monitoring and fraud prevention.
• For analytics or marketing only in de-identified or aggregate form unless you have given explicit authorization.
1 HIPAA-Compliant Security Controls
• Encryption in Transit & at Rest for all PHI transmitted or stored via the Site.
• Access Controls & Authentication with role-based permissions.
• Audit Logs to track PHI access.
• Regular Risk Assessments in accordance with the HIPAA Security Rule.
• Business Associate Agreements with all vendors who handle PHI on our behalf (e.g., cloud hosting, email service providers).
Tracking Technologies & Cookies
• We do not use third-party advertising cookies on pages where PHI is collected.
• Essential cookies may be required for secure login and session management.
• You can adjust your browser settings to manage cookies, but disabling them may impair Site functionality.
Children’s Privacy
The Site is not directed to children under 13. We do not knowingly collect information from children without appropriate parental or guardian consent.
Data Retention
We retain PHI for as long as required by federal or state law, our record-retention policies, or contractual obligations—whichever is longer. Non-PHI website data is retained only as long as necessary for the purposes described above.
Use of Google Services (Analytics, Ads, Signals)
We use limited Google services to understand website usage and, where enabled, deliver and measure ads.
• Analytics: Google Analytics may collect data such as pages visited, device/browser type, and interactions.
• Advertising Features (if enabled): Google Ads and other third-party vendors may use cookies or device identifiers to serve ads based on prior visits to our website.
• Google Signals (if enabled): Provides aggregated, cross-device reports from users who have opted into Google account personalization.
Important: We do not send PHI to Google or any third-party advertising/analytics platform. Google products are used only for non-PHI traffic.
Questions & Complaints
• Privacy Officer
Name: Ellen Springs
Address: 10210 N. 92nd St. MPIII, Suite 104, Scottsdale, AZ 85258
Phone: 480-493-0900
Email:info@getinnovative.care
If you believe your privacy rights have been violated, you may submit a complaint to our Privacy Officer and/or the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”). We will not retaliate against you for filing a complaint.
Acknowledgment of Receipt
We may ask you to acknowledge in writing that you have received this Notice. Your acknowledgment does not waive any of your rights.
Quick-Reference Summary
• We will use PHI primarily for treatment, payment, and health-care operations.
• We will not sell or market your PHI without consent.
• You have the right to access, amend, and receive an accounting of your PHI.
• We deploy industry-standard safeguards—encryption, access controls, and BAAs—to protect PHI collected via https://getinnovative.care.
• Contact our Privacy Officer with any questions or concerns.
This Notice applies to all services provided by Innovative Healthcare through in-person, telehealth, or online channels (getinnovative.care).
Please review it regularly for updates.