Privacy Policy

Introduction

Injury Care Center ("we," "our," or "us"), accessible from https://injury-care.com, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our online appointment request form, or receive treatment at any of our clinic locations in Kentucky.

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and applicable Kentucky state privacy laws. By using our website or services, you consent to the practices described in this policy.

Information We Collect

Information You Provide Through Our Website

When you use our online appointment request form, we collect:

• First and last name
• Email address
• Phone number
• Preferred clinic location
• Type of injury (e.g., auto accident, work injury, slip and fall)
• Preferred appointment date
• Any additional details you provide in the message field

Important: Submitting an appointment request through our website does not establish a doctor-patient relationship. A doctor-patient relationship is only established once you are seen at one of our clinics by a licensed healthcare provider.

Information Collected During Treatment

When you visit our clinics, we may collect:

• Full name, date of birth, and contact information
• Social Security number (for insurance and billing purposes only)
• Health insurance and auto insurance information
• Medical history, current symptoms, and treatment records
• Diagnostic imaging results (X-ray, MRI)
• Workers' compensation claim details
• Attorney or legal representative information (if applicable)
• Emergency contact information

Protected Health Information (PHI)

As a healthcare provider subject to HIPAA, we collect and maintain Protected Health Information (PHI). PHI includes any individually identifiable health information relating to your past, present, or future physical or mental health condition, the provision of healthcare, or payment for healthcare. Our handling of PHI is governed by our HIPAA Notice of Privacy Practices, described in detail below.

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Device type and operating system
• Pages visited, time spent, and referring URLs
• General geographic location (city/state level only)

This information is used solely for website analytics and performance improvement and does not include any medical or health information.

HIPAA Notice of Privacy Practices

This section describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully.

Uses and Disclosures of Your Health Information

We may use or disclose your PHI for the following purposes without your written authorization:

• Treatment: To provide, coordinate, or manage your healthcare and related services, including consultations between healthcare providers regarding your care, referrals to specialists, and coordination with chiropractors, physical therapists, and other providers involved in your treatment.
• Payment: To obtain payment for healthcare services, including billing your insurance company, auto insurance carrier, or workers' compensation insurer. This may include providing your diagnosis and treatment information to your health plan.
• Healthcare Operations: For our internal operations, including quality improvement, staff training, compliance activities, and business management.
• Legal Proceedings: When required by law, such as in response to a court order, subpoena, or as part of a personal injury or workers' compensation case with your authorization.
• Attorney Communication: If you have a personal injury attorney, we may share medical records and treatment documentation with your attorney as authorized by you.
• Workers' Compensation: As necessary to comply with workers' compensation laws in Kentucky, Ohio, or Indiana.

Your HIPAA Rights

Under HIPAA, you have the following rights regarding your health information:

• Right to Access: You may request to inspect and obtain a copy of your medical records. We may charge a reasonable fee for copies as permitted under Kentucky law.
• Right to Amend: You may request that we amend your health information if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information.
• Right to Request Restrictions: You may request restrictions on certain uses and disclosures of your health information.
• Right to Confidential Communications: You may request that we communicate with you by specific means or at specific locations (e.g., only by mail to a certain address).
• Right to a Paper Copy: You may request a paper copy of this Notice of Privacy Practices at any time.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our healthcare services
• Process and respond to appointment requests submitted through our website
• Communicate with you about your care, appointments, and follow-up treatment
• Process insurance claims, auto insurance claims, and billing
• Coordinate care with attorneys handling your personal injury or workers' compensation case
• Comply with legal obligations, including HIPAA, Kentucky healthcare regulations, and court orders
• Generate medical documentation and reports (e.g., Independent Medical Examinations)
• Improve our website functionality and user experience

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• Healthcare Providers: With other healthcare providers involved in your care, including referring physicians, specialists, and diagnostic facilities
• Insurance Companies: With your health, auto, or workers' compensation insurance carriers for payment and coverage verification
• Legal Representatives: With your attorney or legal representative when you have provided written authorization
• Legal Requirements: When required by law, such as to comply with a subpoena, court order, or mandatory reporting requirements
• Business Associates: With HIPAA-compliant third-party service providers who assist us in operating our practice (e.g., electronic health records systems, billing services). All business associates are required to sign Business Associate Agreements (BAAs) protecting your information.

Data Security

We implement appropriate technical, administrative, and physical security measures to protect your personal and health information, including:

• Encrypted data transmission (SSL/TLS) on our website
• Secure, access-controlled electronic health records systems
• Staff training on HIPAA compliance and data privacy
• Physical security measures at all clinic locations
• Regular security assessments and updates

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. If you have reason to believe your information has been compromised, please contact us immediately.

Kentucky State Privacy Rights

As a Kentucky-based healthcare provider, we comply with Kentucky Revised Statutes regarding:

• Medical Records: Under KRS 422.317, patients have the right to access their medical records. We will provide copies within a reasonable time and may charge a reasonable fee.
• Data Breach Notification: Under KRS 365.732, we will notify affected individuals and the Kentucky Attorney General in the event of a data breach involving personal information, as required by law.
• Confidentiality of Medical Records: Kentucky law protects the confidentiality of medical records and restricts unauthorized disclosure.

Online Appointment Requests

When you submit an appointment request through our website:

• Your information is transmitted over an encrypted connection (HTTPS/SSL)
• Your request is stored securely in our database and is accessible only to authorized staff
• We will contact you within 24 hours to confirm your appointment
• The information you provide is used solely for scheduling and patient care purposes
• We do not use appointment request data for marketing or share it with third parties

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Remember your preferences and improve your browsing experience
• Analyze website traffic and usage patterns
• Ensure the website functions properly

We do not use cookies to collect medical or health information. You can control cookies through your browser settings. Disabling cookies may affect some website functionality but will not impact your ability to contact us or request an appointment.

Third-Party Links

Our website may contain links to third-party websites (e.g., Google Maps for directions to our clinics, insurance provider websites). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect personal information online from children under 13 without parental or guardian consent. If we become aware that we have inadvertently collected such information, we will take steps to delete it. Note: We do provide medical treatment to minors with appropriate parental or guardian consent at our clinic locations.

Data Retention

We retain your information as follows:

• Medical Records: Retained for a minimum of 5 years after the last date of treatment, or longer as required by Kentucky law or your insurance provider
• Appointment Requests: Retained for as long as necessary to fulfill the purpose for which they were collected
• Website Analytics: Anonymized data may be retained indefinitely for statistical analysis

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

• Phone: (502) 447-2222
• Email: info@injury-care.com
• Mail: Injury Care Center, Privacy Officer, 3955 Dixie Hwy, Louisville, KY 40216