Privacy Policy

Introduction

William A. Crum O.D., P.L.C. (InVision Eye Care) is committed to protecting your privacy and maintaining the confidentiality of your personal health information. This Privacy Policy describes how we collect, use, and protect your information when you visit our practice or use our services.

This policy complies with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws.

Information We Collect

Personal Health Information (PHI)

We collect and maintain the following types of information:

• Contact information (name, address, phone number, email)
• Date of birth and demographic information
• Insurance information
• Medical history and current health conditions
• Eye examination results and test data
• Prescription information
• Treatment records and clinical notes
• Billing and payment information

Website Information

When you visit our website or use our patient portal, we may collect:

• IP address and browser information
• Pages visited and time spent on our website
• Information submitted through contact forms
• Login credentials for the patient portal

How We Use Your Information

We use your information for the following purposes:

Treatment

• Providing eye care services and treatment
• Coordinating care with other healthcare providers
• Maintaining accurate medical records
• Prescription management

Payment

• Processing insurance claims
• Billing for services rendered
• Collection activities when necessary

Healthcare Operations

• Quality assurance and improvement
• Training staff and students
• Business planning and administration
• Compliance with legal requirements

Information Sharing and Disclosure

We do not sell, rent, or share your personal health information except as described in this policy or as authorized by you. We may share your information in the following circumstances:

• With Your Consent: When you provide written authorization
• Treatment Coordination: With other healthcare providers involved in your care
• Legal Requirements: When required by law or court order
• Public Health: For public health activities as required by law
• Emergency Situations: To prevent serious threat to health or safety
• Business Associates: With vendors who provide services on our behalf under strict confidentiality agreements

Your Rights

Under HIPAA, you have the following rights regarding your health information:

Data Security

We implement appropriate physical, technical, and administrative safeguards to protect your personal health information, including:

• Secure storage of physical records in locked cabinets
• Electronic health records protected by passwords and encryption
• Limited access to information on a need-to-know basis
• Regular staff training on privacy and security procedures
• Secure transmission of information when required
• Regular security assessments and updates

Website and Technology

Cookies and Tracking

Our website may use cookies to improve your browsing experience. You can disable cookies in your browser settings, though this may affect website functionality.

Patient Portal Security

Our patient portal uses secure, encrypted connections to protect your information. You are responsible for maintaining the confidentiality of your login credentials.

Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to our website. We will notify you of significant changes by posting a notice in our office and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our practice or with the Department of Health and Human Services. You will not be retaliated against for filing a complaint.