Privacy Policy

Effective Date: 04/14/2025

A. Introduction

Healthy Balance Direct Care (“we,” “our,” “us”) is committed to protecting your privacy. This policy explains the personal information we collect, how we use it, and the limited circumstances under which we share it. It covers our website, patient portal, phone calls, text messages, emails, and in‑office interactions at our Caldwell, Idaho practice.

B. Information We Collect

Identification Information – name, date of birth, mailing address, email address, and phone number you provide on forms or when you present identification in person.

Health‑Related Information – medical history, lab results, prescriptions, and insurance details gathered from intake forms, outside laboratories, or prior medical records you authorize us to obtain.

Payment Information – tokenized credit or debit‑card numbers, billing address, and transaction history processed through a secure, HIPAA‑compliant payment gateway.

Technical Information – IP address, browser type, device ID, pages visited, and time spent on our site, collected through cookies and similar technologies.

C. How We Use Your Information

Provide Care: schedule appointments, diagnose, treat, and follow up.

Operate the Practice: verify eligibility, process payments, manage staffing, and improve services.

Communicate: send appointment reminders, lab updates, or health notices you request.

Meet Legal Obligations: comply with HIPAA, state pharmacy rules, tax laws, and public‑health reporting.

D. Legal Bases for Processing

We process data based on (1) your HIPAA authorization or other consent, (2) performance of a contract such as a membership agreement, (3) our legitimate interests in running a secure, efficient practice, and (4) legal obligations imposed by federal or Idaho law.

E. Sharing and Disclosure

Laboratories, pharmacies, imaging centers, or specialists directly involved in your care.HIPAA‑compliant vendors who host our electronic health‑record system, process payments, or provide secure messaging—each bound by a Business Associate Agreement.Courts, regulators, or public‑health authorities when disclosure is required by law.Any other third party only with your explicit written authorization.

We never sell or rent your personal information.

F. Cookies and Tracking

Our site uses first‑party cookies for basic functionality (such as staying logged in) and aggregated analytics (to understand which pages are most helpful). You can disable cookies in your browser; doing so will not block essential content, though some convenience features may be unavailable.

G. Data Retention

Medical records are kept for at least seven years from your last visit, or longer if Idaho or federal rules require. Non‑medical data (for example, newsletter opt‑ins) is retained until you unsubscribe or ask us to delete it.

H. Your Rights

You may request copies of your records, ask us to correct inaccuracies, receive an accounting of certain disclosures, revoke consent where permitted, and file a privacy complaint with us or the U.S. Department of Health & Human Services.

I. Children’s Privacy

Our services are directed to people age 13 and older. We do not knowingly collect information from anyone under 13 without verifiable parental consent.

J. Security

Administrative, physical, and technical safeguards include encryption in transit and at rest, role‑based access control, regular staff training, and scheduled security audits.

K. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Effective Date” and post the updated version online. Material changes will also be announced by email or patient‑portal notice.