Effective Date: Jan 6, 2025
Every day, you trust us with your health – Academic Allergy Asthma & Immunology Assoc. takes this responsibility seriously. If you are a patient of Academic Allergy Asthma & Immunology Assoc., please review our HIPAA Privacy Notice, which describes how we use and disclose protected health information (PHI), our legal duties with respect to PHI, and your rights with respect to PHI and how you may exercise those rights.
We may collect the following types of personal information:
Contact Information such as name, birth date, email address, mailing address, insurance information and phone number.
We collects personally identifiable information (PII) solely through direct user input. This includes data such as names, email addresses, mailing address and telephone numbers, which are explicitly provided by individuals during scheduling, registration, form submission, or other interactive processes. We do not employ passive data collection methods, such as cookies, web beacons, pixel tags, or device fingerprinting. Consequently, we do not gather information related to browsing behavior, IP addresses, geolocation, or other automatically generated data. All data collection is limited to the information actively submitted by the user, ensuring transparency and user control over their provided data.
Our purpose to use your information depends on how you interact with us and what services you use. We use patient information in accordance with our HIPAA Privacy Notice. Other data is used in accordance with this General Privacy Policy.
Under this policy, we use personal information to:
Manage our relationship with you.
Perform tasks or services with your direction or consent.
Communicate with you. We use your information to respond to your inquiries from you or send you reminders about upcoming events or appointments.
Keep information secure and prevent fraud. We may use personal information to monitor, detect and prevent fraud and improper or illegal activity and protect you, Academic Allergy Asthma & Immunology Assoc., other individuals, and the public.
Comply with law. To comply with applicable law, comply with our legal and regulatory obligations, and defend ourselves in litigation and investigations and to prosecute litigations.
We do not sell or share your personal information or transfer personal information to third parties to use for their own benefit. We may share your information within our affiliated entities: Health Care Providers and Healthcare Organizations: We may share your information with your health care providers and your health care organizations or professionals.
We reserve the right to disclose your information to respond to authorized information requests from government authorities, to respond to valid judicial requests, to address national security situations, to provide security and investigate potential fraud, or when otherwise required by applicable law. We may also disclose your personal information as required by law to any competent law enforcement body, regulatory or government agency, court or other third party where we believe the disclosure is necessary or appropriate to comply with a regulatory requirement, judicial proceeding, court order, government request or legal process served on us, or to protect the safety, rights, or property of our customers, the public, our personnel, or others, and to exercise, establish or defend our legal rights.
It is our practice to take steps to secure our services; Your information is stored on secure, dedicated servers located in data centers in USA. These servers are protected by multiple layers of security, including firewalls, intrusion detection systems, and physical access controls. However, the confidentiality of information transmitted over the Internet cannot be guaranteed. We urge you to exercise caution when transmitting personal information over the Internet, especially personal information related to your health. We cannot guarantee that unauthorized third parties will not gain access to your information; therefore, when submitting personal information to our websites or apps, you must weigh both the benefits and the risks.
We work with industry-standard security measures to protect the confidentiality and integrity of your personal information. These measures include, but are not limited to, data encryption both in transit and at rest, secure server infrastructure with restricted access controls, and regular security assessments to identify and mitigate potential vulnerabilities. We adhere to best practices for data handling and storage, employing firewalls, intrusion detection systems, and other technical safeguards to prevent unauthorized access, disclosure, alteration, or destruction of your data. Our personnel are trained on data security protocols and are bound by confidentiality agreements. We continuously review and update our security practices to adapt to evolving threats and ensure the ongoing protection of your information.
Depending on where you reside, you may have certain rights and choices regarding our processing of your personal information. These rights may be in addition or in place of the rights you have under HIPAA and include the following:
Know the categories and/or specific pieces of personal information collected about you, including whether your personal information is sold or disclosed, and with whom your personal information was shared
Access a copy of the personal information we retain about you
Request deletion of your personal information
Direct us to correct your personal information
To help protect the security of your personal information, we will verify your identity in connection with any requests. Also, we take steps to ensure that only you or your authorized representative can exercise rights with respect to your information. If you are an authorized agent making a request, we may require and request additional information to protect the personal information entrusted to us, including information to verify that you are authorized to make that request.
There may be situations where we cannot grant your request. For example, if you make a request and we cannot verify your identity, we will not be able to comply with the request. We may also be unable to comply with your request if we have a legal or regulatory obligation to keep your personal information. Other reasons your request may be denied are if it jeopardizes the privacy of others or would be impractical or infeasible to honor.
Where we deny your request in whole or in part, we will take steps to inform you of the denial and provide an explanation of our actions and the reasons for the denial.
You may exercise any of your rights in relation to your personal information by contacting us using the details provided in the “How Can I Contact You” section below.
Outside of the patient context, we do not directly collect data from children (we define "children" as minors younger than 13). If you are a parent or guardian and become aware that your child has provided us with information, please contact us using one of the methods specified below and we will work with you to address this issue.
If you have questions about your information, please contact us by calling 832-626-2300. Alternatively, you may send a letter to the following address: Academic Allergy Asthma & Immunology Assoc. 5373 W Alabama St Suite 204 Houston, TX 77056 , drozkar@academicallergy.com
Users have the right to opt out of the collection and use of their personal information. To exercise this right, please contact us. Upon receiving your request, we will cease the collection and use of your data
This Policy may be revised from time to time as we add new features and services, as laws change, and as industry privacy and security practices evolve. However, we will take reasonable steps to notify you of material changes we make to this Policy. We display an effective date and a latest revision date on the Policy above so that it will be easier for you to know when there has been a change. You are responsible for regularly reviewing this Policy. Your continued use of our services constitutes your acceptance of the revised terms. Small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice.