Privacy Policy

Last updated: April 04, 2025

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service and explains your privacy rights and protections under applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined under the following conditions. The definitions below have the same meaning regardless of whether they appear in singular or plural form.

Definitions

For this Privacy Policy:

Account: A unique account created for you to access our Service or parts of our Service.
Affiliate: Any entity that controls, is controlled by, or is under common control with the Company.
Company (referred to as “the Company,” “We,” “Us,” or “Our”): Coury Spine, LLC, located at 226 South Woods Mill Road, Suite 35, West Chesterfield, MO 63017.
Cookies: Small files placed on your device that track and store browsing data.
Country: United States
Device: Any device that can access the Service, such as a computer, mobile device, or tablet.
HIPAA: The Health Insurance Portability and Accountability Act of 1996, a federal law that protects sensitive patient health information.
Personal Data: Information relating to an identified or identifiable individual.
Protected Health Information (PHI): Any health-related information, including medical history, treatment details, and payment information, as defined under HIPAA.
Service: The Website and related services provided by the Company.
Service Provider: A third party that processes data on behalf of the Company.
Website: stlspinecare, accessible at https://stlspinecare.com/.

You: The individual using the Service, or the entity on whose behalf such an individual is using the Service.

HIPAA Compliance Statement

As a U.S.-based healthcare provider, Coury Spine, LLC complies with HIPAA regulations and safeguards Protected Health Information (PHI). This Privacy Policy explains how we collect, use, disclose, and protect your PHI in accordance with HIPAA.

Collecting and Using Your Data

Types of Data Collected

Personal Data

While using Our Service, we may collect personally identifiable information such as:

Email address
First and last name
Phone number
Mailing address
Medical history and treatment details (if applicable)
Insurance and payment details

Usage Data

Usage Data is collected automatically when using the Service and may include:

IP address
Browser type and version
Pages visited on our Service
Time spent on pages
Device information

Tracking Technologies and Cookies

We use Cookies and tracking technologies to analyze traffic and improve services. You can configure your browser to refuse all Cookies, but this may affect the functionality of our Service.

Use of Your Data

The Company may use Your Data for:

Providing and maintaining our Service
Managing Your Account and access to medical records
Contacting you for appointment reminders, updates, and administrative communications
Processing payments for services
Complying with legal obligations

Ensuring the security of PHI

Patient Rights Under HIPAA

Under HIPAA, you have the following rights regarding your Protected Health Information (PHI):

Access and Copies: You may request access to and copies of your PHI.
Amendments: You may request corrections to inaccurate or incomplete health information.
Restrictions: You may request limitations on how your PHI is used or disclosed.
Confidential Communications: You may request communication through alternative means (e.g., mail instead of phone).
Accounting of Disclosures: You have the right to request a record of how your PHI has been disclosed.
Complaints: If you believe your privacy rights have been violated, you may file a complaint with us or the U.S. Department of Health and Human Services (HHS).

Disclosure of Your Data

We may share your PHI in the following cases:

With Your Consent: PHI will not be shared without explicit authorization, except as permitted by law.
For Treatment Purposes: PHI may be shared with healthcare providers involved in your care.
For Payment Processing: PHI may be used for billing, insurance claims, and related transactions.
For Healthcare Operations: We may use PHI for quality assurance, training, and business improvement.
As Required by Law: We may disclose PHI in response to subpoenas, court orders, or regulatory requirements.
In the Event of a Business Transfer: If the Company is acquired or merged, your data may be transferred to the new entity.

Data Security and Breach Notification

We implement security measures to protect PHI, including:

Encryption: Data encryption during transmission and storage.
Access Controls: Restricted access to PHI to authorized personnel only.
Regular Audits: Monitoring systems for unauthorized access or breaches.

In the event of a data breach, we will notify affected individuals as required by HIPAA’s Breach Notification Rule.

Business Associate Agreements (BAAs)

If we work with third-party vendors (e.g., billing services, cloud storage providers), we enter into Business Associate Agreements (BAAs) to ensure HIPAA compliance.

Retention and Disposal of Medical Records

We retain your medical records for the legally required period and dispose of them securely when no longer needed.

Children’s Privacy

Our Service does not address anyone under the age of 13. If we become aware that we have collected PHI from a child under 13 without parental consent, we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us:
Email: jcoury35w@gmail.com
Mailing Address: Coury Spine, LLC, 226 South Woods Mill Road, Suite 35, West Chesterfield, MO 63017