Skip to main content

    Privacy Policy & HIPAA Compliance

    Effective Date: December 2025 | Last Updated: December 2025

    Overview

    Elevated Health Augusta ("we," "our," or "the Clinic") is committed to protecting your privacy and the confidentiality of your health information. This Privacy Policy describes how we collect, use, and safeguard information obtained through our website and services.

    HIPAA Compliance

    As a healthcare provider, Elevated Health Augusta is required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and protect your Protected Health Information (PHI).

    We are committed to protecting your medical information in accordance with HIPAA standards. Your health data is stored in encrypted, HIPAA-compliant databases and is only shared with your care team and necessary partners to facilitate your treatment.

    For our complete Notice of Privacy Practices, please visit our HIPAA Notice page.

    Protected Health Information (PHI)

    • PHI includes any individually identifiable health information relating to your past, present, or future physical or mental health condition, treatment, or payment for healthcare services.
    • We use PHI only for treatment, payment, and healthcare operations as permitted by law, or with your explicit written authorization.
    • We maintain physical, electronic, and procedural safeguards to protect your PHI in accordance with federal and state regulations.
    • You have the right to request access to, amendment of, or restrictions on the use of your PHI. Contact our Privacy Officer to exercise these rights.

    Information We Collect

    We collect information you voluntarily provide—such as your name, phone number, email, date of birth, and health history—when you complete forms, request appointments, or enroll in our services.

    We also automatically receive limited non-identifiable technical data (browser type, pages visited, approximate location) for analytics and site improvement.

    How We Use Information

    • Provide medical care and coordinate your treatment
    • Respond to your inquiries or schedule consultations
    • Process payments and manage your account
    • Send appointment reminders and treatment-related communications
    • Improve website performance and user experience
    • Comply with legal and regulatory requirements

    We do not sell or share your personal or health information with third parties for marketing purposes.

    Payment Processing & Security

    We use Stripe, a PCI-DSS Level 1 certified payment processor, to handle all payment transactions securely.

    • We do not store credit card numbers or sensitive payment details on our servers. All payment data is encrypted and processed directly by Stripe.
    • We use bank-level encryption for all payment processing. Elevated Health Augusta does not store your full credit card number on our servers.
    • We only retain transaction IDs and billing addresses necessary for record-keeping and customer service.

    Stripe may collect additional information as described in their Privacy Policy.

    Third-Party Partners

    We partner with trusted third-party services to provide your care:

    • LabCorp – CLIA-certified laboratory testing (client-billed panels)
    • Formulation Compounding Center – Pharmacy services for compounded medications
    • Resend – Transactional email delivery

    These partners are bound by Business Associate Agreements (BAAs) requiring them to protect your PHI in accordance with HIPAA regulations.

    Communications Consent

    By providing your phone number, you consent to receive SMS appointment reminders and secure link notifications regarding your care.

    You may opt-out of SMS communications at any time by replying STOP, though this may delay your treatment notifications. Essential communications regarding your care, billing, or legal matters may still be sent via email.

    Data Security

    We implement robust security measures including:

    • HTTPS encryption for all data transmission
    • Role-based access controls for staff
    • Secure, encrypted database storage
    • Regular security audits and monitoring
    • Multi-factor authentication for administrative access

    No online transmission is 100% secure. Please avoid including sensitive medical details in unsecured website forms or emails.

    Your Rights

    You have the right to:

    • Access your personal and health information
    • Request corrections to inaccurate information
    • Request deletion of your data (subject to legal retention requirements)
    • Receive a copy of your health records
    • Opt out of non-essential communications
    • File a complaint if you believe your privacy rights have been violated

    To exercise these rights, contact our Privacy Officer at care@elevatedhealthaugusta.com.

    Contact Us

    Elevated Health Augusta
    Privacy Officer
    7013 Evans Town Center Blvd, Suite 203
    Evans, GA 30809
    (706) 760-3470
    care@elevatedhealthaugusta.com