Data Privacy Policy

Effective Date: 03/01/2020
Last Updated: 03/01/2026

1. Introduction

LPAAC (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal and health information. This Data Privacy Policy describes how we collect, use, protect, and disclose personal information in compliance with applicable federal and Colorado privacy laws, including healthcare privacy regulations.

This policy applies to information collected through our website, electronic communications, patient forms, and services.

2. Protected Health Information (PHI)

As a healthcare provider, we may collect and maintain Protected Health Information (PHI). PHI includes information that identifies you and relates to:

• Your physical or mental health condition
• Healthcare services provided to you
• Payment for healthcare services

We maintain, protect, and disclose PHI in accordance with federal healthcare privacy regulations and applicable Colorado law.

3. Information We Collect

We may collect the following categories of information:

Personal Information

• Name
• Address
• Email address
• Phone number
• Date of birth

Health Information

• Medical history
• Treatment information
• Appointment information
• Health records necessary for providing care

Website Usage Information

• IP address
• Browser type
• Website usage data collected through cookies or analytics tools

4. How We Use Your Information

We use personal and health information for the following purposes:

• Providing healthcare services
• Scheduling appointments
• Billing and payment processing
• Communicating with patients regarding care
• Maintaining medical records
• Improving services and website functionality
• Complying with legal and regulatory obligations

We only use or disclose health information when permitted or required by law.

5. SMS and Electronic Communications

If you provide your phone number, you may receive SMS messages related to:

• Appointment reminders
• Scheduling updates
• Responses to patient inquiries
• Care-related communications

We do not send unsolicited mass marketing messages.

Your phone number and consent information will not be sold, rented, or shared with third parties for marketing purposes.

You may opt out of SMS messages at any time by replying STOP.

6. Sharing of Information

We may share information only in the following circumstances:

Healthcare Operations

Information may be shared with healthcare professionals involved in your treatment.

Payment Processing

Information may be shared with billing services, insurance providers, or payment processors.

Business Associates

We may share information with trusted vendors that help us operate our business (such as electronic medical record providers or secure messaging platforms). These parties are required to maintain strict confidentiality and security protections.

Legal Requirements

We may disclose information when required by law, court order, or regulatory authorities.

We do not sell personal information or patient data.

7. Data Security

We implement administrative, physical, and technical safeguards designed to protect personal and health information from unauthorized access, disclosure, alteration, or destruction.

Security measures may include:

• Secure electronic medical record systems
• Encrypted communications where appropriate
• Access controls and authentication
• Staff privacy training
• Secure data storage and backup procedures

8. Data Retention

We retain patient records and personal information only for as long as necessary to:

• Provide healthcare services
• Maintain required medical records
• Comply with legal, regulatory, and professional requirements

Retention periods follow applicable healthcare regulations and Colorado law.

9. Your Privacy Rights

Patients have certain rights regarding their personal and health information, which may include:

• Requesting access to medical records
• Requesting corrections to inaccurate information
• Requesting restrictions on certain disclosures
• Receiving a record of certain disclosures
• Requesting confidential communications

Requests may be submitted using the contact information below.

10. Website Cookies and Analytics

Our website may use cookies or similar technologies to improve functionality and analyze usage. These technologies collect non-medical website data such as pages visited or browser information.

You may control cookie settings through your browser preferences.

11. Children’s Privacy

Our services are not directed to children under 13 without parental or guardian involvement. We do not knowingly collect personal information from children without appropriate consent.

12. Updates to This Policy

We may update this Data Privacy Policy from time to time to reflect changes in laws, technology, or our practices. Updated versions will be posted on this page with a revised effective date.

13. Contact Information

If you have questions about this Data Privacy Policy or your privacy rights, please contact:

LPAAC
2860 S. Circle Dr, Ste 250
Colorado Springs, CO 80906
719-900-3009
info@lpaac.org