PRIVACY POLICY

Who we are

Our website address is: http://www.soaringcraneacupuncture.com

Soaring Crane Acupuncture, LLC
Amarkaur Northrup LAc., MAOM
630 B Ave. Suite 3
Lake Oswego, OR 97034
(503) 303-7595

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Our contact form, powered by WPForms Lite, collects your name, email address, subject and message. Contact form submissions are retained indefinitely for customer service purposes, but we do not use the information submitted through them for marketing purposes.

WPForms Lite contact form does not collect any “hidden” personal details about users who submit a form (IP address, user agent details, etc), and it does not use any cookies. WPForms Lite does not track, monitor, or collect your form entries in any way. 

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

Who we share your data with

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Security logs are retained for 60 days.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.

Your contact information

For privacy-specific concerns please contact:

Soaring Crane Acupuncture, LLC
Amarkaur Northrup LAc., MAOM
630 B Ave. Suite 3
Lake Oswego, OR 97034
(503) 303-7595

Additional information

How we protect your data

What data breach procedures we have in place

What third parties we receive data from

What automated decision making and/or profiling we do with user data

Industry regulatory disclosure requirements

HIPPA Policy Practice

NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO YOUR IDENTIFIABLE HEALTH INFORMATION. PLEASE REVIEW THIS NOTICE CAREFULLY.

OUR COMMITMENT TO YOUR PRIVACY:

Our organization is dedicated to maintaining the privacy of your identifiable health information. In conducting our business, we will create records regarding you and the treatment and services we provide to you. We are required by law to maintain the confidentiality of health information that identifies you. We are also required by law to provide you with this notice of our legal duties and privacy practices concerning your identifiable health information. By law, we must follow the terms of the Notice of Privacy Practices that we have in effect at the time.

To summarize, this notice provides you with the following information:
• How we may use and disclose your identifiable health information
• Your privacy rights in your identifiable health information
• Our obligations concerning the use and disclosure of your identifiable health information

The terms of this notice apply to all records containing your identifiable health information that are created or retained by our practice. We reserve the right to revise or amend our notice of privacy practices. Any revision or amendment to this notice will be effective for all of your records our practice has created or maintained in the past, and for any of your records we may create or maintain in the future. Our organization will post a copy of our current notice in our offices in a prominent location, and you may request a copy of our most current notice during any office visit.

IF YOU HAVE QUESTIONS ABOUT THIS NOTICE, PLEASE CONTACT:

Amarkaur Northrup L.Ac., 503- 303-7595 or aksoaringcrane@gmail.com

WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION IN THE FOLLOWING WAYS:

The following categories describe the different ways in which we may use and disclose your identifiable health information.

1. Treatment. Our organization may use your identifiable health information to treat you. Many of the people who work for our organization may use or disclose your identifiable health information in order to treat you or to assist others in your treatment. Additionally, we may disclose your identifiable health information to others who may assist in your care, such as your physician, therapists, spouse, children or parents.

2. Payment. Our organization may use and disclose your identifiable health information in order to bill and collect for the services and items you may receive from us. For example, we may contact your health insurer to certify that you are eligible for benefits (and for what range of benefits), and we may provide your insurer with details regarding your treatment to determine if your insurer will cover, or pay for, your treatment. We also

may use and disclose your identifiable health information to obtain payment from third parties that may be responsible for such costs, such as family members. Also, we may use your identifiable health information to bill you directly for services and items.

3. Health Care Operations. Our organization may use and disclose your identifiable health information to operate our business. As examples of the ways in which we may use and disclose your information for our operations, our organization may use your identifiable health information to evaluate the quality of care you received from us, or to conduct cost- management and business planning activities for our practice.

OPTIONAL:

4. Appointment Reminders. Our organization may use and disclose your identifiable health information to contact you and remind you of visits/deliveries.

5. Health-Related Benefits and Services. Our organization may use and disclose your identifiable health information to inform you of health-related benefits or services that may be of interest to you.

6. Release of Information to Family/Friends. Our organization may release your identifiable health information to a friend or family member that is helping you pay for your health care, or who assists in taking care of you.

7. Disclosures Required By Law. Our organization will use and disclose your identifiable health information when we are required to do so by federal, state or local law.

USE AND DISCLOSURE OF YOUR IDENTIFIABLE HEALTH INFORMATION IN CERTAIN SPECIAL CIRCUMSTANCES:

The following categories describe unique scenarios in which we may use or disclose your identifiable health information:

1. Public Health Risks. Our organization may use or disclose your identifiable health information to public health authorities that are authorized by law to collect information for the purpose of:

• Maintaining vital records, such as births and deaths
• Reporting child abuse or neglect
• Preventing or controlling disease, injury or disability
• Notifying a person regarding potential exposure to a communicable disease
• Notifying a person regarding a potential risk for spreading or contracting a disease or condition
• Reporting reactions to drugs or problems with products or devices
• Notifying individuals if a product or device they may be using has been recalled
• Notifying appropriate government agencies and authorities regarding the potential abuse or neglect of an

adult patient (including domestic violence), however, we will only disclose this information if the patient agrees or we are required or authorized by law to disclose this information

• Notifying your employer under limited circumstances related primarily to workplace injury or illness or medical surveillance

2. Health Oversight Activities. Our organization may disclose your identifiable health information to a health oversight agency for activities authorized by law. Oversight activities can include, for example, investigations, inspections, audits, surveys, licensure and disciplinary actions; civil, administrative, and criminal procedures or actions; or other activities necessary for the government to monitor government programs, compliance withcivil rights laws and the health care system in general.

3. Lawsuits and Similar Proceedings. Our organization may use and disclose your identifiable health information in response to a court or administrative order, if you or this organization is involved in a lawsuit or similar proceeding. We may also disclose your identifiable health information in response to a discovery request, subpoena, or other lawful process by another party involved in the dispute.

4. Workers’ Compensation. Our organization may release your identifiable health information for Workers’ Compensation and similar programs.

5. Law Enforcement. We may release identifiable health information if asked to do so by a law enforcement official:

• Regarding a crime victim in certain situations, if we are unable to obtain the person’s agreement • Concerning a death we believe might have resulted from criminal conduct
• In response to a warrant, summons, court order, subpoena or similar legal process
• To identify/locate a suspect, material witness, fugitive or missing person

• In an emergency, to report a crime (including the location or victim(s) of the crime, or the description, identity or location of the perpetrator)

6. Serious Threats to Health or Safety. Our organization may use and disclose your identifiable health information when necessary to reduce or prevent a serious threat to your health and safety or the health and safety of another individual or the public. Under these circumstances, we will only make disclosures to a person or organization able to help prevent the threat.

7. Military. Our organization may disclose your identifiable health information if you are a member of U.S. or foreign military forces (including veterans) if required by the appropriate military command authorities.

8. National Security. Our organization may disclose your identifiable health information to federal officials for intelligence and national security activities authorized by law. We also may disclose your identifiable health information to federal officials in order to protect the President, other officials or foreign heads of state, or to conduct investigations.

9. Inmates. Our organization may disclose your identifiable health information to correctional institutions or law enforcement officials if you are an inmate or under the custody of a law enforcement official. Disclosure for these purposes would be necessary: (a) for the institution to provide health care services to you, (b) for the safety and security of the institution, and/or (c) to protect your health and safety or the health and safety of other individuals.

YOUR RIGHTS REGARDING YOUR IDENTIFIABLE HEALTH INFORMATION:

You have the following rights regarding the identifiable health information that we maintain about you:

1. Confidential Communications. You have the right to request that our organization communicate with you about your health and related issues in a particular manner or at a certain location. For instance, you may ask that we contact you at home, rather than work. In order to request a type of confidential communication, you must make a written request to Amarkaur Northrup L.Ac., 630 B Ave. Suite 3 Lake Oswego, OR 957034 specifying the requested method of contact, or the location where you wish to be contacted. Our organization will accommodate reasonable requests. You do not need to give a reason for your request.

2. Requesting Restrictions. You have the right to request a restriction in our use or disclosure of your identifiable health information for treatment, payment or health care operations. Additionally, you have the right to request that we limit our disclosure of your identifiable health information to individuals involved in your care or the payment for you care, such as family members and friends. We are not required to agree to your request; however, if we do agree, we are bound by our agreement except when otherwise required by law, in emergencies, or when information is necessary to treat you. In order to request a restriction in our use or disclosure of your identifiable health information, you must make your request in writing to Amarkaur Northrup L.Ac., 630 B Ave. Suite 3 Lake Oswego 97034. Your request must describe in a clear and concise fashion: (a) the information you wish restricted; (b) whether you are requesting to limit our practice’s use, disclosure or both; and (c) to whom you want the limits to apply.

3. Inspection and Copies. You have the right to inspect and obtain a copy of the identifiable health information that may be used to make decisions about you, including patient medical records and billing records. You must submit your request in writing to Amarkaur Northrup L.Ac., 630 B Ave. Suite 3 Lake Oswego, OR 97034 in order to inspect and/or obtain a copy of your identifiable health information. Our organization may charge a fee for the costs of copying, mailing, labor and supplies associated with your request. Our practice may deny your request to inspect and/or copy in certain limited circumstances; however you may request a review of our denial. Another licensed health care professional of our choosing will conduct reviews.

4. Amendment. You may ask us to amend your health information if you believe it is incorrect or incomplete, and you may request an amendment for as long as the information is kept by or for our organization. To

request an amendment, your request must be made in writing and submitted to Amarkaur Northrup L.Ac. 630 B Ave. Suite 3 Lake Oswego, OR 97034. You must provide us with a reason that supports your request for amendment. Our organization will deny your request if you fail to submit your request (and the reason supporting your request) in writing. Also, we may deny your request if you ask us to amend information that is: (a) accurate and complete; (b) not part of the identifiable health information kept by or for the organization; (c) not part of the identifiable health information which you would be permitted to inspect and copy; or (d) not created by our organization, unless the individual or entity that created the information is not available to amend the information.

5. Accounting of Disclosures. All of our patients have the right to request an “accounting of disclosures.” An “accounting of disclosures” is a list of certain disclosures our organization has made of your identifiable health information. In order to obtain an accounting of disclosures, you must submit your request in writing to Amarkaur Northrup L.Ac., 630 B Ave. Suite 3 Lake Oswego, OR 97034. All requests for an accounting of disclosures must state a time period, which may not be longer than six years and may not include dates before April 14, 2003. The first list you request within a 12-month period is free of charge, but our practice may charge you for additional lists within the same 12-month period. Our organization will notify you of the costs involved with additional requests, and you may withdraw your request before you incur any costs.

6. Right to a Paper Copy of this Notice. You are entitled to receive a paper copy of our notice of privacy practices. You may ask us to give you a copy of this notice at any time, or you may copy it directly from our website. To obtain a paper copy of this notice, go to www.SoaringCraneAcupuncture.com

7. Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with our organization or with the Secretary of Health and Human Services. To file a complaint with our organization, contact Amarkaur Northrup L.Ac., 630 B Ave. Suite 3 Lake Oswego, OR 97034. All complaints must be submitted in writing. You will not be penalized for filing a complaint.

8. Right to Provide an Authorization for Other Uses and Disclosures. Our organization will obtain your written authorization for uses and disclosures that are not identified by this notice or permitted by applicable law. Any authorization you provide to us regarding the use and disclosure of your identifiable health information may be revoked at any time in writing. After you revoke your authorization, we will no longer use or disclose your identifiable health information for the reasons described in the authorization. Please note we are required to retain records of your care