Privacy Policy

Effective Date: May 20, 2025

Ghattas Oncology ("we," "us," or "our") is committed to protecting the privacy and security of your Protected Health Information ("PHI"). This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable privacy laws.

1. Information We Collect

We may collect and store the following types of information:

• Protected Health Information (PHI): Includes medical records, health history, treatment information, insurance data, and other identifiers such as your name, address, phone number, and date of birth.
• Usage Data: Includes IP address, browser type, access times, and pages viewed (collected via cookies or analytics tools).
• Account Information: If you create an account, we may collect your email address, username, password, and other contact details.

2. How We Use Your Information

We may use your information to:

• Provide healthcare-related services and support
• Communicate with you regarding your health, treatment, or account
• Process payments and insurance claims
• Improve our services and website functionality
• Comply with legal obligations and regulatory requirements

3. How We Share Your Information

We do not sell or rent your PHI. We may disclose your information:

• To your healthcare providers or authorized representatives
• To business associates who assist in providing our services, under HIPAA-compliant agreements
• As required by law (e.g., court orders, subpoenas, regulatory audits)
• To prevent or mitigate a serious threat to health or safety

4. Your Rights Under HIPAA

You have the right to:

• Access and request a copy of your PHI
• Request corrections to your PHI
• Request restrictions on how we use or disclose your PHI
• Receive an accounting of disclosures
• File a complaint if you believe your rights have been violated

To exercise any of these rights, please contact us using the information provided below.

5. Data Security

We implement administrative, physical, and technical safeguards to protect your PHI, including:

• Data encryption in transit and at rest
• Access controls and role-based permissions
• Secure servers and firewalls
• Regular staff training on privacy and security

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information.

6. Cookies and Tracking Technologies

We may use cookies or similar technologies to enhance your browsing experience and analyze site traffic. These do not collect PHI unless explicitly provided by you. You can manage cookie preferences in your browser settings.

7. Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Effective Date." We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this policy or our HIPAA practices, please contact:

Privacy Officer
Ghattas Oncology
[email protected]
(318) 798-4424

You may also file a complaint with the U.S. Department of Health and Human Services (HHS) at: https://www.hhs.gov/hipaa/filing-a-complaint/index.html