ABC Sleep Disorders Center – Privacy Policy

This Privacy Policy explains how ABC Sleep Disorders Center (“ABC Sleep,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website www.abcsleepcenter.com or use our services.

We are a medical practice that specializes in diagnosing and treating sleep disorders. Because we work with health information, we take privacy and security very seriously and strive to comply with applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA) where it applies.

By using our website or services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

1.1 Information You Provide to Us

Contact information:
Your name, email address, phone number, mailing address, and similar details when you:
- Request a consultation or appointment
- Use our online forms (e.g., referral, results inquiry, contact form)
- Communicate with us by email, phone, or through the website
Account information:
If you create or use an online account or portal, we may collect usernames, passwords, and related login information.
Health and medical information:
Information you provide about your health or sleep-related concerns, such as symptoms, medical history, referral details, prior testing, medications, and other data needed to evaluate and manage your care. This may include Protected Health Information (PHI) as defined by HIPAA.
Billing and insurance information:
Insurance provider, policy numbers, and other details needed for billing and claims.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

IP address, browser type, device information, and operating system
Pages you visit, time and date of visits, and referring URLs
General usage and interaction data

We may use cookies or similar technologies to remember your preferences and improve site functionality. We do not use cookies for third-party advertising.

2. How We Use Your Information

We use your information for the following purposes:

2.1 To Provide Medical Services

Evaluating sleep-related symptoms and medical history
Scheduling and managing in-lab and home sleep studies
Communicating with referring physicians and other healthcare providers
Documenting your diagnosis and treatment plan

2.2 To Operate Accounts and Portals

Creating, verifying, and managing user accounts or patient portals
Providing access to results or documents, where applicable

2.3 Transactional and Service Emails (Non-Marketing)

We use your email address to send transactional, service-related messages that you reasonably expect as part of your relationship with us, for example:

Account registration and email verification
Password reset or login assistance emails
Appointment confirmations, reminders, and updates
Notifications that test results or documents are available
Security alerts (e.g., a login from a new device or location)
Important updates affecting your care or our services

We do not use your email address for bulk marketing campaigns or promotional newsletters through our email systems. We also do not sell or rent email lists to third parties.

2.4 Business and Administrative Purposes

Billing and collecting payment for services
Communicating with your insurance company or health plan, as permitted by law
Internal record-keeping, quality assurance, and training
Auditing, compliance, and legal obligations

2.5 Website Operation and Security

Operating, maintaining, and improving our website
Monitoring for security incidents and preventing fraud or misuse
Analyzing aggregate, de-identified data to improve services

3. How We Share Your Information

We do not sell or rent your personal information or PHI to third parties. We may share information only as described below or as required or permitted by law.

3.1 Healthcare Providers and Laboratories

We may share your information with:

Referring physicians and other providers involved in your care
Sleep labs or diagnostic services used to perform testing
Durable medical equipment (DME) companies, if necessary for your treatment

3.2 Insurance and Payment Processors

We may share necessary information with:

Health plans, insurance companies, and billing intermediaries
Payment processors or financial institutions for invoicing and payment

3.3 Service Providers (Business Associates)

We use trusted third-party companies to help us operate our practice and website, such as:

Website hosting and technical support
Secure email and message delivery
Cloud storage and backup services
Practice-management or electronic medical record systems

Where these providers handle PHI or other sensitive information on our behalf, we enter into Business Associate Agreements (BAAs) with them, requiring them to protect your information and use it only for services they provide to us.

3.4 Legal Requirements and Safety

We may disclose information when we believe it is necessary to:

Comply with applicable laws, regulations, subpoenas, or court orders
Respond to lawful requests from public authorities or regulators
Protect the safety, rights, or property of our patients, staff, or the public
Investigate or prevent potential fraud or security issues

3.5 De-Identified and Aggregated Data

We may use or share information that has been de-identified (so it cannot reasonably identify you) for analytics, research, or quality improvement, as permitted by law.

4. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

Remember your preferences and settings
Keep you signed in to certain features
Understand general usage trends for improving the website

You can control cookies through your browser settings. If you disable cookies, some site features may not function properly. We do not use cookies for third-party advertising networks.

5. How We Protect Your Information

We use a combination of administrative, technical, and physical safeguards to protect your information, including:

Secure servers and networks
Encryption of data in transit where appropriate (for example, using HTTPS/TLS for website and email connections when possible)
Role-based access controls and authentication for staff and systems
Staff training on privacy and security practices
Policies and procedures to reduce risks of unauthorized access, use, or disclosure

Despite our efforts, no method of electronic storage or transmission is entirely secure. If we become aware of a breach of unsecured PHI or other sensitive information, we will notify you and any applicable authorities as required by law.

6. Your Rights (Depending on Location and Law)

Depending on where you live and applicable law, you may have some or all of the following rights with respect to your health and personal information:

6.1 Access and Copies

You may request access to, or a copy of, the information we maintain about you, subject to certain legal exceptions. We may charge a reasonable, cost-based fee as permitted by law.

6.2 Correction (Amendment)

If you believe information about you is incorrect or incomplete, you may request that we correct or amend it. If we deny your request, we will explain why and your options.

6.3 Restrictions

You may request restrictions on certain uses or disclosures of your information (for example, limiting information sent to your health plan for services you pay for in full out-of-pocket). We will consider all reasonable requests and will comply where required by law.

6.4 Confidential Communications

You may request that we communicate with you through alternative means or at a different address or phone number (for example, only at work or via a specific phone). We will accommodate reasonable requests.

6.5 Additional Rights Under Specific Laws

If you are in a jurisdiction with specific privacy laws (such as the EU/EEA, UK, or certain U.S. states), you may have additional rights, such as:

The right to object to certain processing
The right to data portability
The right to lodge a complaint with a data protection authority

We will respect these rights to the extent they apply to our practice and services.

To exercise any of these rights, please contact us using the information in the “Contact Us” section below. We may need to verify your identity before fulfilling your request.

7. Data Retention

We retain medical and related records for the time periods required by law and professional standards. Other personal information is retained only as long as reasonably necessary for the purposes described in this Policy, or as required by law (for example, to resolve disputes or enforce agreements).

When information is no longer needed, we will delete, de-identify, or otherwise securely dispose of it in accordance with our data retention and destruction policies.

8. Children’s Privacy

We provide services to patients of all ages, including minors, but we do not knowingly allow children to use our website independently without a parent or guardian.

For minor patients, a parent or legal guardian typically provides the information and receives communications on the child’s behalf. If you believe a child under 13 has provided personal information to us online without appropriate consent, please contact us so we can review and address the situation.

9. External Links

Our website may contain links to other websites that are not operated by us (for example, educational resources or device manufacturers). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update this page and, if the changes are significant, we may also provide additional notice (for example, a banner on our website).
Your continued use of our website or services after any changes indicates your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your information, please contact us:

ABC Sleep Disorders Center
Attn: Privacy Officer
433 N 4th St., Suite 215
Montebello, CA 90640

Phone (General): (323) 454-8889
Fax: (909) 903-8898
Email: contact@abcsleepcenter.com

Please do not include highly sensitive medical details in an unsecured email. We can arrange a more secure communication method if needed.

You may also have the right to file a complaint with the appropriate regulatory authority if you believe your privacy rights have been violated. We will not retaliate against you for making a complaint.