Privacy Policy

1. Information We Collect

We may collect personal information about you in several ways:

• Directly from You: Contact details including your legal name, email address, telephone number, mailing address, date of birth, insurance carrier details, and details about your mental health inquiry or appointment preference.
• Protected Health Information (PHI): When you become a patient, we collect clinical information necessary to provide psychiatric evaluations, therapy, medication management, and ongoing treatment under our Notice of Privacy Practices (NPP).
• Website Usage & Technical Data: Browser type, operating system, IP address, device type, pages viewed, time spent on pages, and referral sources collected via standard automated server logs and secure cookies.
• Communication Records: Records and copies of your correspondence (including emails, website chat inquiries, and SMS text messages where applicable).

3. How We Use Your Information

We use your information exclusively for legitimate medical practice operations, including:

• Scheduling and confirming psychiatric, psychotherapy, and telepsychiatry consultations.
• Providing clinical evaluation, treatment planning, and psychotropic medication management.
• Billing insurance providers, verifying copayments/deductibles, and processing patient payments.
• Responding to customer service inquiries, clinical messages, and website requests.
• Maintaining regulatory compliance with Florida Department of Health and federal HIPAA mandates.
• Enhancing website security, preventing fraudulent activity, and diagnosing technical issues.

4. No Sale of Personal Information & No Affiliate Marketing

Diatan Health Services does not engage in affiliate marketing, lead generation brokering, list rentals, or the purchase or sale of consumer contact leads. We never sell your personal information, contact information, or health records to any third party for financial or commercial gain.

5. Disclosure of Your Information

We only disclose your information to authorized third parties under the following limited circumstances:

• HIPAA Business Associates: Trusted technology vendors, EHR (Electronic Health Record) platforms, electronic prescribing clearinghouses, and billing processors that have signed strict Business Associate Agreements (BAAs) legally binding them to maintain HIPAA-level confidentiality.
• Insurance Payers: To process claims and verify eligibility for medical coverage as authorized by you.
• Legal and Emergency Requirements: When required by subpoena, court order, or applicable law, or when necessary in emergency situations to protect the vital health or life of the patient or public (e.g., imminent self-harm or harm to others).

6. Data Security & Retention

We maintain robust physical, electronic, and procedural safeguards conforming to federal standards. All online communications are encrypted using Transport Layer Security (TLS 1.3). Digital medical records are stored in secure, encrypted cloud environments. However, no transmission over the internet is 100% impenetrable; please do not send sensitive personal health information over unencrypted email or public contact forms.

7. Your Privacy Rights Under HIPAA

You have statutory rights regarding your Protected Health Information (PHI):

• The right to inspect and receive an electronic or physical copy of your medical record.
• The right to request an amendment to your health record if you believe information is incorrect.
• The right to request restrictions on certain uses and disclosures of your health data.
• The right to request confidential communications through specified means (e.g., specific phone number).
• The right to receive an accounting of disclosures made by our practice.
• The right to obtain a paper copy of our complete Notice of Privacy Practices upon request.