Legal Disclosures and Compliance
Orlando City Health and Wellness

At Orlando City Health and Wellness, your privacy, rights, and trust are our top priorities. As a HIPAA-compliant clinic, we are committed to protecting your personal health information and maintaining full compliance with state and federal laws. Below are our key legal disclosures and policies for patients, visitors, and users of our website.

1. Notice of Privacy Practices (HIPAA)
We follow the Health Insurance Portability and Accountability Act (HIPAA) to safeguard your Protected Health Information (PHI). Our Notice of Privacy Practices describes how we may use or disclose your PHI for treatment, payment, and healthcare operations, and outlines your rights to:

• Access and receive copies of your records

• Request corrections

• Limit disclosures

• Receive an accounting of disclosures

• File a complaint

You may request a full copy of our Notice of Privacy Practices at any time by contacting our front desk or emailing: info@orlandocityhealth.com.

2. Email Communication & Disclaimer
We may use email to communicate with you regarding appointments, billing, or care instructions. While we use secure platforms, email may not be fully secure. By providing your email, you consent to this form of communication and understand:

• Emails may contain PHI

• Messages are intended only for the recipient

• If you receive an email in error, please delete it and notify us immediately

If you prefer not to receive communication via email, please let us know.

3. Cookie & Tracking Technology Disclosure
Our website uses cookies and standard analytics tools (e.g., Google Analytics) to improve your online experience. These may collect data such as:

• Browser type

• Pages visited

• IP address (anonymized where possible)

We do not use cookies to collect or share any PHI. By using our site, you consent to this tracking. You may disable cookies through your browser settings.

Email Tracking & Consent Notice:
Orlando City Health and Wellness occasionally uses secure email software that includes standard tracking features (such as open and delivery status). These features may include non-visible tracking pixels to help us confirm that messages have been received. These communications do not share your health data with any third-party. By signing below, you consent to receive such communications and waive any objection under Florida's Trap and Trace law.

4. Security & Breach Notification Policy
We take administrative, physical, and technical steps to secure your PHI, including encrypted data storage, password-protected systems, and staff training. In the event of a data breach involving unsecured PHI:

• We will notify you without unreasonable delay (no more than 60 days)

• We will inform the U.S. Department of Health & Human Services (HHS), and if necessary, the media

5. Patient Rights & Complaint Process
As a patient, you have rights under HIPAA and Florida law. These include the right to:

• Access your health records

• Amend incorrect or incomplete information

• Request confidential communication

• Restrict disclosures to insurers when you pay out-of-pocket

• File a complaint without fear of retaliation

To file a privacy complaint, contact our Privacy Officer at info@orlandocityhealth.com or file directly with the U.S. Department of Health and Human Services.

6. Business Associates & Data Sharing
We work with trusted vendors to help manage patient care, billing, and operations. These third parties (e.g., EHR systems, billing software providers) are known as "Business Associates" and are required to:

• Sign a Business Associate Agreement (BAA)

• Comply with HIPAA regulations

• Keep your data safe and confidential

No PHI is shared with third parties for marketing or non-clinical purposes.

For questions about any of these disclosures, please call our office at 407-250-5566 or email us at info@orlandocityhealth.com.