Privacy Policy

Golden Assistance Clinic ("we", "us", "our", or the "Clinic") is a telehealth primary-care practice serving patients in Florida and New York. We respect your privacy and are committed to handling your personal and protected health information with care, discretion, and clinical integrity.

This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you hold over it. It applies to our website, online forms, telehealth platform, and any communications you exchange with the Clinic.

We collect information in three categories:

• Information you provide. Your name, date of birth, contact details, insurance information, the reason for your visit, your medical history, medications, symptoms, and anything you share with your clinician during care.
• Information created through care. Clinical notes, prescriptions, lab orders and results, referrals, treatment plans, and follow-up correspondence — all considered Protected Health Information (PHI) under HIPAA.
• Information collected automatically. Standard web analytics such as IP address, device and browser type, referring URL, and pages visited — used in aggregate to keep the site secure and functioning well.

We use information only for legitimate clinical and operational purposes:

• To deliver, document, and follow up on the clinical care you request.
• To contact you about appointments, prescriptions, labs, and care plans.
• To verify your identity and confirm your location in a state we are licensed in.
• To process payment and, where applicable, coordinate with your insurer.
• To comply with legal, regulatory, and professional record-keeping obligations.
• To secure our website and detect or prevent fraud and abuse.

We do not sell your personal information. We do not use your protected health information for advertising. We do not share data with third parties for their own marketing purposes.

As a healthcare provider, the Clinic is a HIPAA "covered entity". Your Protected Health Information (PHI) is governed by the HIPAA Privacy and Security Rules in addition to this Policy. PHI is used and disclosed only for treatment, payment, healthcare operations, or with your written authorization — except where law requires or permits otherwise.

You may request a copy of our Notice of Privacy Practices at any time by contacting our office.

We share information only with parties who help us deliver your care or run our practice safely:

• Pharmacies, laboratories, and partner facilities involved in your treatment.
• Insurance carriers and billing partners where you have authorized billing.
• HIPAA-compliant technology vendors (telehealth platform, electronic health record, secure messaging) operating under written Business Associate Agreements.
• Regulators, public health authorities, and courts where required by law.
• Other clinicians involved in your care, with your consent.

We use administrative, technical, and physical safeguards designed to protect your information — including encryption in transit and at rest, role-based access controls, vendor due diligence, and routine review of our security posture. No system is perfectly secure; we encourage you to use a private device and trusted network when sharing sensitive information with us.

We retain medical records for the period required by Florida and New York law and applicable professional standards. Operational records (billing, correspondence) are kept only as long as needed to fulfil the purpose for which they were collected, or as required by law.

Depending on the law that applies to you, you may have the right to:

• Request access to and a copy of the records we hold about you.
• Request correction of inaccurate information.
• Request restriction of certain uses of your information.
• Request an accounting of certain disclosures.
• Withdraw consent to optional uses such as marketing communications.

To exercise these rights, contact our office using the details below. We will respond within the timelines required by applicable law.

Our website uses a small number of cookies to keep the site functioning, remember your preferences, and understand aggregate usage so we can improve content. You can manage cookies through your browser settings; doing so may limit some features of the site. We do not place advertising cookies and do not allow third parties to track you across the web through our site.

Our services are intended for adults. We do not knowingly collect personal information from children under 13 through this website. If you believe a child has provided information to us, please contact our office and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practice. The "Last updated" date above will always show when the most recent revision was made. Material changes will be highlighted on this page.

Questions about this Privacy Policy or about how we handle your information? Email info@goldenassistanceclinic.com, call our office, or visit our contact page. We respond personally within one business day.