Privacy Policy

1. Information We Collect

Depending on how you interact with Aure Health, we may collect different categories of information.

Information You Provide Through Our Website: full name, email address, telephone number, mailing address, billing information, information submitted through discovery, contact, inquiry, or membership forms, appointment-request information, membership information, payment and transaction information, communications regarding non-clinical matters, and information you voluntarily provide when interacting with our website.

Protected Health Information: Aure Health collects and maintains protected health information ("PHI") as part of providing medical care. PHI and other clinical health information are collected, stored, transmitted, and managed through Aure Health's secure, HIPAA-compliant patient portal, clinical systems, and patient app. The public Aure Health website is not intended to be used to submit medical records, clinical histories, laboratory results, diagnoses, treatment information, prescription information, or other sensitive health information. Please use the secure Aure Health patient portal or patient app for clinical communications and the transmission of health information. PHI is handled in accordance with the Health Insurance Portability and Accountability Act ("HIPAA"), applicable federal and state healthcare privacy laws, and Aure Health's separate Notice of Privacy Practices.

Information Collected Automatically: When you visit our website, we may automatically collect certain technical and usage information, including IP address, browser type, device type, operating system, pages viewed, referring website, date and time of website visits, and general website interaction and usage information. We may use cookies, pixels, analytics tools, and similar technologies to operate, secure, analyze, and improve our website.

2. How We Use Information

We may use information collected through our public website and related services to respond to inquiries and requests; communicate with prospective and current members; facilitate membership enrollment; schedule requested services or appointments; process payments and transactions; provide customer and administrative support; improve our website, services, and member experience; analyze website performance and usage; maintain website security; detect and prevent fraud, abuse, or unauthorized activity; maintain business and operational records; and comply with applicable legal and regulatory requirements.

Clinical information and PHI are handled through Aure Health's HIPAA-compliant clinical systems and used and disclosed in accordance with HIPAA, applicable law, and our Notice of Privacy Practices.

3. Secure Clinical Communications

Aure Health provides a secure patient portal and patient app for clinical communications and management of health information. Members and patients should use these secure systems when communicating information related to their medical care, including medical history, symptoms, diagnoses, medications, laboratory results, imaging, treatment plans, prescription-related information, wearable or connected-device health data, and other information related to an individual's medical care.

Aure Health's clinical systems are designed to provide a secure environment for the transmission, storage, and management of this information. Please do not submit sensitive medical information through public website forms, general website messaging, or other non-clinical website features.

4. Cookies and Analytics

Our website may use cookies and similar technologies to keep the website functioning properly, remember preferences, understand website traffic and usage, improve website performance, measure the effectiveness of communications and marketing, and maintain website security.

Third-party analytics providers may collect information about your interaction with our website in accordance with their own privacy policies. You may be able to control or disable cookies through your browser settings; disabling certain cookies may affect website functionality. Where required by applicable law, Aure Health will provide additional choices regarding cookies or similar technologies.

5. Communications

If you provide your telephone number or email address, Aure Health may use that information to communicate with you regarding membership inquiries, appointments, membership administration, billing, services you have requested, administrative matters, and important service or policy updates. Where permitted by law, Aure Health may also send marketing or informational communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism included in the communication or by contacting us. Administrative and clinical communications may continue where necessary to provide services or manage your membership or care. Marketing communications do not replace clinical communication or emergency medical care.

6. Payment Information

Payments for Aure Health services may be processed through third-party payment processors. When payment processing is handled by a third-party provider, Aure Health generally does not retain complete credit card numbers or full payment credentials on its own systems. Payment information may be collected, processed, and stored by the applicable payment processor in accordance with its own privacy and security practices. Aure Health may retain transaction information necessary for accounting, billing, legal, tax, and business purposes.

7. How We Share Information

Aure Health does not sell your personal information. We may share information when reasonably necessary to operate our business, provide requested services, or comply with legal obligations. Depending on the circumstances, this may include sharing information with healthcare professionals involved in your care, laboratories, pharmacies, imaging providers, specialists, healthcare organizations, technology and software vendors, payment processors, scheduling platforms, communication platforms, professional advisors (including legal, accounting, and compliance professionals), government authorities when required or permitted by law, and other parties when you provide appropriate authorization.

When protected health information is involved, disclosures are made in accordance with HIPAA and applicable law. Where required, Aure Health uses appropriate contractual safeguards, including Business Associate Agreements, with vendors that create, receive, maintain, or transmit protected health information on Aure Health's behalf.

8. Third-Party Services

Aure Health may use third-party companies and services to support website functionality, payment processing, scheduling, communications, analytics, security, and other business operations. These providers may process information on Aure Health's behalf. Third-party providers may have their own privacy policies and terms governing their handling of information. Aure Health seeks to use appropriate contractual and technical safeguards when working with service providers, particularly where protected health information is involved.

9. Healthcare Information and HIPAA

Information collected or created in connection with your medical care may constitute protected health information under HIPAA. Our use and disclosure of PHI is governed by our Notice of Privacy Practices, which explains how Aure Health may use and disclose PHI, your rights regarding your PHI, how to request access to or amendment of your health information, how to request restrictions or confidential communications, and how to submit a privacy complaint.

The Notice of Privacy Practices is separate from this website Privacy Policy and is available upon request.

10. Information Security

Aure Health uses reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, or disclosure. Our secure clinical systems are designed to protect PHI in accordance with applicable HIPAA requirements. No method of transmission over the internet or electronic storage is completely secure; accordingly, Aure Health cannot guarantee absolute security of information transmitted electronically. If we become aware of a security incident affecting personal information or PHI, we will respond in accordance with applicable federal and state law, including applicable breach-notification requirements.

11. Data Retention

We retain information for as long as reasonably necessary to provide requested services, maintain appropriate business records, maintain medical records where applicable, comply with legal and regulatory requirements, resolve disputes, enforce agreements, protect our legal and business interests, and meet applicable tax, accounting, and healthcare recordkeeping requirements. Medical records are retained in accordance with applicable federal and state requirements.

12. Your Privacy Rights

Depending on the information involved and the laws applicable to you, you may have certain rights regarding your personal information. These may include the right to request access to certain personal information, request correction of inaccurate information, request deletion of certain personal information, request information about how your information is used, request restrictions on certain uses or disclosures, opt out of certain marketing communications, request confidential communications, and submit a privacy complaint. Certain rights may be limited by applicable law. Rights relating specifically to protected health information are addressed in our Notice of Privacy Practices.

13. State Privacy Rights

Aure Health provides services to individuals in multiple states. Certain states provide additional privacy rights to their residents. Where applicable, Aure Health will comply with state privacy laws governing the collection and use of personal information. Because healthcare information may be subject to specialized federal and state healthcare privacy requirements, certain health information may be governed by HIPAA or other healthcare-specific laws rather than general consumer privacy laws. If you believe a specific state privacy law gives you additional rights, you may contact Aure Health using the information provided below.

14. Children's Privacy

Aure Health's public website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our public website without appropriate authorization. If you believe a child has provided personal information to Aure Health through the website without appropriate authorization, please contact us so that we can take appropriate action. Healthcare services involving minors, when offered, are handled through Aure Health's secure clinical systems and applicable healthcare privacy requirements.

15. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, healthcare providers, laboratories, pharmacies, or other services. Aure Health is not responsible for the privacy practices, security, or content of third-party websites or services. We encourage you to review the privacy policies and terms of any third-party service before providing information to that service.

16. Do Not Use the Website for Emergencies

The Aure Health website and online contact forms are not intended for emergency medical communications. If you are experiencing a medical emergency, call 911 or seek immediate emergency medical attention. Do not submit emergency or urgent medical information through the public website. Clinical communications should occur through the secure Aure Health patient portal or patient app.

17. Changes to This Privacy Policy

Aure Health may update this Privacy Policy periodically to reflect changes in our services, technology, legal requirements, or privacy practices. When we make material changes, we will update the "Last Updated" date and, where required by law, provide additional notice. Your continued use of the website after an updated Privacy Policy becomes effective constitutes acceptance of the updated policy to the extent permitted by law.

18. Contact Us

If you have questions about this Privacy Policy or Aure Health's privacy practices, please contact us at Aure Health, LLC — aure@aurehealth.org.

For questions or complaints regarding protected health information, please refer to our Notice of Privacy Practices. You may also have the right to submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights. Aure Health will not retaliate against an individual for filing a privacy complaint.