Who we are
Our website address is: https://drjonathanterry.com. This page represents the private practice and creative work of Dr. Jonathan Terry.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture may be visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Information you provide to us on contact forms should not include Protected Health Information (PHI). It may be stored on our server and shared with our business associates and affiliates.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Our site employs regular analytics from companies like Google and Cloudflare, which help us run the site better. This information does not directly identify you.
Who we share your data with
Data may be shared for business operations, promotions, sales, site audits, law enforcement, and other purposes.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
We may store contact information provided by you.
Additional information
How we protect your data
No sensitive information or Protected Health Information (PHI) should be shared or stored on this site.
What data breach procedures we have in place
For patients being seen through our private practice, we maintain healthcare standard procedures in compliance with HIPAA, HITECH, and other regulatory guidance. As this website, itself, does not maintain any Protected Health Information (PHI), those rules do not apply to the public faces of the site or its subpages. If one of our business associates experiences a data breach, we will do our best to communicate this to any site users, patients, and/or those on our mailing list.
What third parties we receive data from
We only receive information that you provide on our side, through our business associates, and through front-facing sources such as Google Analytics.
Industry regulatory disclosure requirements
THIS NOTICE [provided to patients on patient information and practice privacy policy] DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. YOUR SIGNATURE BELOW INDICATES YOUR REVIEW, UNDERSTANDING, AND ACCEPTANCE AS WELL AS THE OPPORTUNITY TO ASK QUESTIONS.
This Notice of Privacy Practices describes I, Jonathan Terry, DO, ABIHM, my practice (we), and some related services may use and disclose your protected health information (PHI) to carry out consultation, treatment, payment or business operations, and for other purposes that are permitted or required by law. “Protected health information” is information about you, including demographic information, that may identify you and that relates to your past, present or future physical health or condition, treatment, or payment for health care services. This Notice describes your ability to access and control your protected health information. This Notice also describes other information we may collect from you.
USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION:
You can provide PHI electronically, by mail, and/or during appointments or clinic communications. Your PHI may be used and disclosed to provide health care services to you, to support business operations, to obtain payment for your care, and any other use authorized or required by law. TREATMENT & PAYMENT: I will use and disclose your PHI to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party. For example, your PHI may be provided to a physician to whom you have been referred to ensure the necessary information is accessible to diagnose or treat you. Your PHI will be used, if requested by you, to bill or obtain payment for your health care services. In this agreement, I do not coordinate any third-party coverage of insurance through private insurance or government insurance such as Medicaid or Medicare in this practice. You may at your own discretion disclose information to third party payers to seek reimbursement.
HEALTH CARE OPERATIONS:
I may use or disclose, as needed, your PHI to support the business activities of this office. These activities include, but are not limited to, maintenance of an electronic health record, appointment reminders, quality assessment, employee review, training, licensing/credentialing, to/from Business Associates, and conducting or arranging for other business activities. I may use or disclose your PHI, as necessary, to contact you to remind you of your appointment. Appointment reminders are sent by email, but you may opt out or request another method. I may inform you about treatment alternatives or other health-related benefits and services that may be of interest to you. I may use or disclose your protected health information in the following situations without your authorization. These situations include: as required by law; emergency situations; Tarasoff or other reporting laws; public health; health oversight; abuse or neglect; government requirements; legal proceedings; law enforcement; coroners, funeral directors and organ donation; research; criminal activity; military activity and national security; workers’ compensation; inmates; and other required uses and disclosures. For minors, your parent or guardian will have open access to your PHI disclosed as permitted under local laws.
USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION:
Other Permitted and Required Uses and Disclosures will be made only with your consent, authorization, and/or opportunity to object unless permitted or required by law. Without your authorization, this practice is expressly prohibited to use or disclose your PHI for marketing purposes. We may not sell your PHI without your authorization. Your PHI will not be used for fundraising. You may revoke this authorization, at any time, in writing, except to the extent that we have taken an action in reliance on the use or disclosure indicated in the authorization.
ACCESS TO AND RESTRICTIONS FOR YOUR PROTECTED HEALTH INFORMATION:
You may inspect and copy your PHI. You may not, however, inspect or copy the following records: information compiled in reasonable anticipation of, or use in, a civil, criminal, or administrative action or proceeding, and PHI that is subject to law that prohibits access to PHI. You may request access to an amendment of your PHI, confidential communications, a restriction on the use or disclosure, or an accounting of disclosures of your protected health information by submitting a written request to this office. You may request a restriction of your PHI. This means you may ask us not to use or disclose any part of your PHI for the purposes of treatment or healthcare operations. You may also request that any part of your PHI not be disclosed to family members or friends who may be involved in your care or for notification purposes as described in this Notice. Your request must be in writing and state the specific restriction requested, duration, and to whom you want the restriction to apply. This practice is not required to agree to a restriction that you may request, except if the requested restriction is on a disclosure to a health plan for a payment or health care operations purpose regarding a service that has been paid in full out-of-pocket. You can request to receive confidential communications from this practice by alternative means or at an alternate location. We will comply with all reasonable requests submitted in writing, which specify how or where you wish to receive these communications. This practice may contact you through secure messaging, email, physical (postal) mail, and/or telephone. Please note that no PHI will be offered by potentially unsecure channels (third-party email, voicemail, etc.) without your consent. Your use of these means implies your consent for an appropriate response with the same method, which may include PHI. For example, if you email a question and do not specify otherwise, you agree to receive an email response, which may or may not include PHI using the Minimum Necessary Standard. You can amend your PHI. If we deny your request for amendment, you may file a statement of disagreement with us and we may prepare a rebuttal to our statement and will provide you with a copy of any such rebuttal. You may request accounting of certain disclosures of your PHI that have been made, paper or electronic, except for certain disclosures which were pursuant to an authorization, for purposes of treatment, payment, healthcare operations (unless the information is maintained in an electronic health record); or for certain other purposes. You may obtain a paper copy of this Notice, upon request.
OTHER INFORMATION COLLECTED:
In addition to protected health information, you may provide other personal information to this practice, third-party payment services (e.g., Paypal) such as your credit card information and bank account information (payment information). Except for any direct payments, this practice denies all liability for any breaches of payment or protected health information offered to a third-party site (e.g., for payment, pharmacy, labs, telemedicine or video conferencing software, third-party medical record servers). You may access, modify and correct this additional information in the same manner as set forth above with respect to protected health information.
REVISIONS TO THIS NOTICE:
This practice and Dr. Terry reserve the right to revise this Notice and to make the revised Notice effective for protected health information and other personal information this practice already has about you as well as any information received in the future. You are entitled to a copy of the Notice currently in effect. Any significant changes to this Notice will be posted or communicated to any active clients.
BREACH OF HEALTH INFORMATION:
I will notify you if a reportable breach of your unsecured protected health information is discovered. Notification will be made to you no later than 60 days from the breach discovery and will include a brief description of how the breach occurred, the PHI involved, and contact information for you to ask questions.
COMPLAINTS:
Complaints about this Notice or questions may be submitted at any time. This practice will maintain the privacy of, and provide individuals with, this Notice of our legal duties and privacy practices with respect to protected health information and to notify affected individuals following a breach of unsecured protected health information. If you have any questions about this Notice, please contact Dr. Terry, identified as the Privacy Officer using the information in the document footer.
