Privacy Policy

Privacy Policy & Notice of Privacy Practices

Welcome to Sand Canyon Urgent Care’s HIPAA Information Section

Sand Canyon Urgent Care (“we,” “our,” or “us”) is committed to protecting your privacy and complying with the Health Insurance Portability and Accountability Act (HIPAA) and California’s Confidentiality of Medical Information Act (CMIA). This Privacy Policy and Notice of Privacy Practices describes how we collect, use, and disclose your Protected Health Information (PHI) and outlines your rights under HIPAA.

1. Our Legal Responsibilities

We are required by law to:

Ensure that your medical information remains private (with certain exceptions)
Provide you with this notice detailing our legal duties and privacy practices
Follow the terms of this notice while it remains in effect

This policy applies to:

All Sand Canyon Urgent Care personnel, including doctors, nurses, and support staff
Off-site service locations affiliated with Sand Canyon Urgent Care
Any healthcare provider authorized to enter information into your medical records

2. Information Collected and How We Use It

We collect two types of information: Protected Health Information (PHI) and Non-Personal Information.

2.1 Protected Health Information (PHI)

We collect PHI when you voluntarily provide it, including but not limited to:

Name
Date of birth
Address
Phone number
Email address
Medical history and treatment information
Insurance and billing details

How We Use PHI:

For Treatment: We may use your PHI to provide medical treatment or services, share it with doctors, nurses, and specialists involved in your care, or coordinate follow-up care.
For Payment: Your PHI may be used for billing, claims processing, and payment collection from insurers or third-party payers.
For Healthcare Operations: PHI may be used for quality improvement, staff training, and administrative functions.
As Required by Law: We will disclose PHI when mandated by federal, state, or local laws.

2.2 Non-Personal Information

We may collect certain data automatically through cookies, pixel tags, tracking technologies, and analytics tools. This includes:

Browser type and version
Device identifiers
IP address and location data
Website usage and browsing activity

You may disable cookies through browser settings, but doing so may impact the functionality of our Sites.

3. Special Situations for Use & Disclosure of PHI

3.1 Individuals Involved in Your Care or Payment

We may release medical information about you to a friend or family member involved in your medical care or payment for your care.

3.2 Public Health & Safety

We may disclose PHI to government agencies for:

Disease prevention and control
Reporting abuse or neglect (children, elders, or dependent adults)
Medication or product recalls
Notifying individuals of potential exposure to diseases

3.3 Legal & Law Enforcement Requests

We may disclose PHI:

In response to court orders, subpoenas, or investigations
To law enforcement regarding criminal activity or missing persons
To correctional institutions for inmates requiring medical care
To federal officials for national security purposes

3.4 Workers’ Compensation

We may release medical information about you to comply with workers’ compensation laws and claims.

We do not sell personal or medical information. However, PHI may be disclosed under the following conditions:

With Service Providers: Third-party vendors assisting in operations, billing, or technical support in compliance with HIPAA.
Business Transfers: In the event of a merger or sale, PHI may be transferred under strict privacy protocols.
Retention: We retain PHI as long as required to fulfill medical and legal obligations, then securely delete or anonymize data.

5. Security Measures

We implement industry-standard security protocols, including:

HIPAA-compliant encryption for stored and transmitted data
Secure access controls and authentication protocols
Regular security audits and risk assessments

Despite these measures, no system is 100% secure. We encourage users to protect their credentials and report any security concerns.

6. Patient Rights Under HIPAA

You have the right to:

Access & Copy Records: Request and obtain copies of your medical records.
Request an Amendment: Ask for corrections to inaccurate health information.
Receive an Accounting of Disclosures: See a list of parties who have accessed your PHI.
Request Restrictions: Limit how your information is shared (though we are not required to comply in all cases).
Opt-Out of Marketing Communications: Unsubscribe from promotional emails.
File a Complaint: Report violations to our Privacy Officer or the U.S. Department of Health and Human Services (HHS).

To exercise these rights, contact us here or send us an email at info@scucmc.com.

7. Special Notice to California Residents

Under the California Consumer Privacy Act (CCPA) and Confidentiality of Medical Information Act (CMIA), California residents have the right to:

Request details on personal data collection and sharing
Request deletion of non-medical personal data (Note: PHI is exempt from deletion requests under HIPAA and CMIA)
Opt-out of data sharing for advertising purposes

To submit a request, contact us here or send us an email at info@scucmc.com. Please include Data Request in the subject line.

8. Breach Notification Policy

In compliance with HIPAA’s Breach Notification Rule, we will notify affected individuals of any data breaches involving PHI within 60 days of discovery. If a breach affects 500 or more individuals, we will notify the U.S. Department of Health and Human Services (HHS) and the media, as required by law.

9. Children’s Privacy

Our Sites are not intended for individuals under 18. We do not knowingly collect PHI from children under 18. If you believe we have collected such information, please contact us here immediately or email us at info@scucmc.com.

10. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our Sites, and significant changes may be communicated through email notifications. Your continued use of our Sites constitutes acceptance of any updates.

11. Contact Information

For any questions or concerns regarding this Privacy Policy, contact us at:

Sand Canyon Urgent Care
Email: info@scucmc.com

Irvine Location
15775 Laguna Canyon Rd #100, Irvine, CA 92618
(949) 417-0272

Laguna Hills Location
23521 Paseo De Valencia #101, Laguna Hills, CA 92653
(949) 206-4633

Effective Date

This policy is effective as of January 1, 2025.