Part I: Website Privacy Policy (Online Data)
1. Information We Collect Online
Our website is primarily an informational and marketing platform. When you visit terminuspt.com, we may collect:
- General Contact Information: This includes your name, email address, or phone number if you voluntarily submit a general message through our online contact or inquiry forms.
- Automated Device Information: We collect IP addresses, device identifiers, browser types, and general usage patterns via secure cookies to optimize website performance, security, and layout.
2. External Patient Portal & EMR Linkage
To protect your sensitive medical and financial data, our main website does not directly store, process, or transmit clinical health information or financial payments.
Instead, our website provides secure outbound links to our external, fully standalone Electronic Medical Records (EMR) provider for administrative clinical workflows such as scheduling sessions or processing payments. When you select these options on our site, you leave terminuspt.com and enter a separate, secure, encrypted clinical portal. Any information you enter on that portal is governed by our EMR vendor's security protocols and the HIPAA Notice of Privacy Practices outlined in Part II below.
Part II: HIPAA Notice of Privacy Practices (Medical Data)
This section describes how your medical/health information may be used and disclosed and how you can get access to this information.
1. Uses and Disclosures of Your Health Information
Under federal law and state medical guidelines, we may use and disclose your Protected Health Information (PHI) within our EMR and physical clinics without your explicit written authorization for Treatment, Payment, and Healthcare Operations (TPO):
- For Treatment: We may disclose your PHI to physical therapists, physical therapist assistants, referring physicians, or other clinical personnel involved in your care plan across any of our treatment facilities.
- For Payment: We may use and disclose your PHI through our secure EMR billing systems to verify coverage, submit claims, and collect payment from you, your health insurance provider, or workers' compensation programs.
- For Healthcare Operations: We may use and disclose your PHI to manage centralized business operations. This includes internal peer reviews, compliance audits, staff training, and quality assurance assessments conducted uniformly across all current and future clinic locations.
- As Required by Law: We will disclose PHI when mandated by federal, state, or local laws (e.g., public health tracking, law enforcement warrants, or workers' compensation disputes).
2. Disclosures Requiring Your Explicit Authorization
We will never sell your PHI, use your medical history for external marketing purposes, or share highly specific treatment notes with third parties without your signed, written authorization. You maintain the right to revoke this authorization at any time in writing.
3. Your Rights Regarding Your Medical Information
You hold the following legal rights regarding the PHI maintained within our clinical EMR network:
- Right to Inspect and Copy: You have the right to inspect and obtain electronic or paper copies of your physical therapy clinical and billing records.
- Right to Amend: If you believe clinical information in your file is inaccurate or incomplete, you may submit a request through the EMR portal or in person to amend the record.
- Right to Request Restrictions: You have the right to request a restriction on how we use or disclose your PHI for treatment, payment, or healthcare operations.
- Right to Restrict Out-of-Pocket Disclosures: If you pay for your care entirely out-of-pocket, you have the right to request that we do not share this data with your health insurance provider.
- Right to an Accounting of Disclosures: You have the right to receive a listing of certain non-routine disclosures we have made of your PHI.
- Right to a Paper Copy: You have the right to obtain a physical paper copy of this notice at any time upon request at the front desk of any of our physical therapy facilities.
4. Our Legal Duties
We are required by law to:
- Maintain the strict privacy, security, and integrity of your PHI.
- Provide you with this uniform notice of our legal duties and corporate privacy practices.
- Notify you promptly via mail or secure electronic communication if a data breach occurs that compromises the security of your unsecured PHI.
- Abide by the terms of the privacy notice currently in effect across all corporate locations.
Part III: Corporate Data Security & Scalability
1. Website and Portal Security
To safeguard data, terminuspt.com utilizes standard Transport Layer Security (TLS/SSL) encryption protocols. Our external EMR partner uses advanced, bank-grade clinical encryption to protect your records during scheduling and payment workflows.
2. Centralized Vendor Agreements
Our external EMR platform provider is legally bound to Terminus Physical Therapy, LLC via a comprehensive federal Business Associate Agreement (BAA). This agreement strictly enforces federal HIPAA security and privacy benchmarks across all existing and future clinic pipelines.
3. Changes to This Privacy Policy
We reserve the right to amend our privacy practices and the terms of this notice at any time. Any changes will apply retroactively to all PHI we maintain. Revised notices will be posted immediately on terminuspt.com and will be made available at all physical clinics.
Part IV: Corporate Contact & Complaints
If you believe your privacy rights have been violated, or if you have questions regarding this policy, you may file a complaint directly with our compliance department or with the Secretary of the U.S. Department of Health and Human Services. You will never be penalized or retaliated against for filing a complaint.
Centralized Contact for Terminus Physical Therapy, LLC:
- Attn: Privacy Officer / Compliance Department
- Email: compliance
- Mailing Address: 4012 LaVista Road, Tucker, GA 30084
- Website Contact: terminuspt.com/contact-us