Privacy and Patient Rights Policy
At American Wellness & Rehab Clinic, your privacy is our priority. We safeguard your Protected Health Information in full compliance with the Health Insurance Portability and Accountability Act (HIPAA) and uphold your rights with strict security and confidentiality standards.
Our Commitment to Your Privacy
At American Wellness & Rehab Clinic, your privacy and trust are our top priorities. We are fully committed to protecting your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA), as well as all applicable Utah and federal privacy laws.
We understand that your medical information is deeply personal, and we maintain strict safeguards to ensure that your information remains private, secure, and used only for authorized purposes.
Patient Rights
As a patient of American Wellness & Rehab Clinic, you have the following rights:
Right to Access: You may request copies of your medical records or ask to review them at any time.
Right to Amend: You can request corrections to your records if you believe there is an error.
Right to Confidential Communications: You may request that we contact you in a specific way (e.g., by phone, email, or mail).
Right to Restrict Disclosure: You may request limits on how your information is shared with others.
Right to an Accounting of Disclosures: You can request a list of instances where your health information was shared for reasons other than treatment, payment, or healthcare operations.
Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or directly with the U.S. Department of Health and Human Services.
How We Use and Protect Your Medical Information
Your medical information may be used or disclosed only for the following purposes:
Treatment: To provide, coordinate, or manage your care across our healthcare providers and support staff.
Payment: To bill for the healthcare services provided to you and to verify insurance benefits (if applicable).
Healthcare Operations: To monitor quality, train staff, and improve clinic performance.
We do not share, sell, or disclose your medical information to third parties for marketing purposes without your written consent.
All electronic records are stored in a HIPAA-compliant electronic medical record (EMR) system, protected by encryption, password protection, and secure access protocols. Physical records (if applicable) are kept in locked, restricted areas accessible only to authorized personnel.
Telemedicine and Electronic Communication
When receiving care through telemedicine or virtual consultations, your information is transmitted through encrypted, secure video platforms compliant with HIPAA standards. We do not record telemedicine sessions without your written consent.
All consents and disclosures for telemedicine are documented and stored within your medical record.
Data Retention and Security
We retain medical records for the time required by Utah and federal law.
We maintain administrative, technical, and physical safeguards to protect your PHI against unauthorized access, alteration, disclosure, or destruction.