Privacy Policy and Protection of Protected Health Information (PHI) for MelioraTx Web Platform
Effective Date: [08/01/2024]
1. Introduction
MelioraTx, a part of Meliora Centrum, is committed to protecting the privacy and security of the Protected Health Information (PHI) collected through our web platform. This policy outlines the practices and procedures for the collection, use, storage, and disclosure of PHI in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable laws of Puerto Rico.
2. Scope
This policy applies to all users of the MelioraTx web platform, including employees, contractors, volunteers, and any other individuals who have access to PHI through the platform.
3. Definitions
- Protected Health Information (PHI): Individually identifiable health information related to an individual’s physical or mental health, healthcare provision, or payment for healthcare that is collected and stored on the platform.
- Designated Record Set: Records that contain PHI and are used to make decisions about patients.
4. Collection and Use of PHI
4.1 Information Collected The MelioraTx web platform collects the following basic patient information:
- Name
- Weight
- Height
- Age
- Physical activity level
- Progress notes created by the therapist
- Scheduled appointments
4.2 Use of PHI The PHI collected is used to:
- Provide and manage the services of the MelioraTx platform.
- Facilitate the evaluation of progress and treatment planning by therapists.
- Relevant communication between healthcare professionals and patients.
5. Patient Access and Control over PHI
5.1 Right of Access Patients have the right to access their PHI in the designated record set. They can request access to their information, as well as correction or deletion of inaccurate data, by contacting MelioraTx at [melioracentrum@gmail.com].
5.2 Restrictions and Authorizations Patients may request restrictions on certain uses and disclosures of their PHI. These requests will be evaluated and, where possible, complied with in accordance with applicable laws.
6. Disclosure of PHI
6.1 Disclosure to Third Parties MelioraTx does not sell or rent patient PHI to third parties. PHI is only shared with trusted third parties involved in the operation of the platform or the provision of services, always under confidentiality agreements and in compliance with HIPAA.
6.2 Legal Compliance MelioraTx may disclose PHI when required by law, to respond to legal processes, or to protect the rights, property, or safety of MelioraTx, its users, or others.
7. Information Security
7.1 Security Measures We implement reasonable administrative, technical, and physical security measures to protect PHI from loss, theft, and unauthorized access. This includes the use of encryption, user authentication, and access controls.
7.2 Evaluation and Improvement We regularly evaluate and improve our security practices to ensure the continued protection of PHI.
8. Cookies and Similar Technologies
The MelioraTx web platform uses cookies and similar technologies to enhance functionality and user experience. Users may configure their browsers to reject cookies, though this may limit the functionality of the platform.
9. Policy Updates
MelioraTx reserves the right to update this Privacy Policy at any time. Any changes will be notified through the platform, and the effective date will be updated accordingly.
10. Contact
For any questions or concerns about this Privacy Policy or the handling of your PHI, users may contact MelioraTx at [melioracentrum@gmail.com].