Notice of Privacy Practices & Website Privacy Policy for ProVision Eye Associates.
Last updated: March 1, 2025
HIPAA Notice of Privacy Practices
This document serves as our Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act (HIPAA). You have the right to receive a paper copy of this notice upon request.
ProVision Eye Associates is a licensed optometry practice located at 653 W. Skippack Pike, Suite 132, Blue Bell, PA 19422. We are committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, and safeguard your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable Pennsylvania state law.
We collect information necessary to provide you with eye care services, including:
• Personal Identifiers: Full name, date of birth, address, phone number, and email address. • Health Information (PHI): Medical history, diagnoses, prescriptions, treatment records, vision test results, and insurance information. • Payment Information: Insurance plan details, billing address, and payment method (processed securely; we do not store full card numbers). • Website Usage Data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and analytics tools for the purpose of improving our website.
Your protected health information (PHI) is used for the following purposes:
• Treatment: To provide, coordinate, and manage your eye care and related services, including sharing information with other healthcare providers involved in your care. • Payment: To bill and collect payment from you, your insurance company, or other third-party payers. • Healthcare Operations: For quality assessment, staff training, accreditation, and business management activities. • Appointment Reminders: We may contact you by phone, text, or email to remind you of upcoming appointments or follow-up care. • Legal Obligations: As required by law, including reporting to public health authorities, responding to court orders, or cooperating with law enforcement.
We will not sell, rent, or share your personal information with third parties for marketing purposes without your explicit written consent.
As our patient, you have the following rights regarding your protected health information:
• Right to Access: You may request a copy of your medical records. We will provide access within 30 days of your request. • Right to Amend: You may request corrections to inaccurate or incomplete information in your records. • Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI. • Right to Restrict: You may request that we limit how we use or share your PHI for treatment, payment, or operations. • Right to Confidential Communications: You may request that we contact you in a specific way (e.g., only by email or at a specific address). • Right to a Paper Copy: You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically. • Right to Opt Out of Marketing: You may opt out of receiving marketing communications at any time.
To exercise any of these rights, please contact our Privacy Officer at the information listed below.
We may use or disclose your PHI without your written authorization in the following circumstances:
• To public health authorities for disease prevention and control • To report suspected abuse, neglect, or domestic violence as required by law • For health oversight activities such as audits and inspections • In response to a court order, subpoena, or other lawful process • To coroners, medical examiners, or funeral directors as permitted by law • For organ donation purposes • For research, subject to strict privacy protections • To avert a serious threat to health or safety • For workers' compensation purposes as authorized by law • To the U.S. Department of Health and Human Services if required for compliance investigations
We implement administrative, physical, and technical safeguards to protect your information from unauthorized access, use, or disclosure. These include:
• Encrypted electronic health records systems • Secure, password-protected staff workstations • Staff training on HIPAA privacy and security • Physical security measures at our office • Secure, encrypted transmission of electronic PHI
In the event of a breach of unsecured PHI, we will notify you as required by the HIPAA Breach Notification Rule.
For patients under the age of 18, a parent or legal guardian must authorize the collection and use of their health information. Parents or guardians have the right to access their minor child's records, subject to applicable Pennsylvania law regarding the minor's right to confidential care in certain circumstances.
We reserve the right to update this Privacy Policy at any time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.
If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact:
Privacy Officer ProVision Eye Associates 653 W. Skippack Pike, Suite 132, Blue Bell, PA 19422 Phone: (215) 628-2020 Fax: (215) 628-3131 Email: [email protected]
If you believe your privacy rights have been violated, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy or by calling 1-800-368-1019. We will not retaliate against you for filing a complaint.
This Privacy Policy was last updated on March 1, 2025. For questions, contact us at [email protected] or call (215) 628-2020.