Privacy Policy

1. Who We Are

Hill Care Health is a family practice and psychiatric care provider located at 2575 S Cimarron Rd, Suite 104, Las Vegas, NV 89117. We are committed to protecting the privacy of every patient, website visitor, and individual who interacts with our practice.

2. Information We Collect

2.1 Information You Provide

We may collect the following when you contact us, book an appointment, or use our services:

• Personal identifiers — name, email address, phone number, mailing address, date of birth
• Health information — medical history, diagnoses, treatment plans, medications, insurance details, and clinical notes (collectively, “Protected Health Information” or “PHI” under HIPAA)
• Financial information — payment methods and billing records
• Communication records — messages submitted through our website contact form, emails, and phone communications

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from Third Parties

We may receive information from referring physicians, insurance providers, laboratories, and other healthcare entities involved in your care, as permitted or required by law.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Treatment — to provide, coordinate, and manage your healthcare
• Payment — to process billing, verify insurance coverage, and collect payments
• Healthcare operations — to improve our services, train staff, conduct quality assessments, and meet accreditation requirements
• Communication — to respond to your inquiries, send appointment reminders, and provide health-related updates
• Legal compliance — to comply with applicable laws and regulations, including HIPAA, Nevada state law, and federal requirements
• Website improvement — to analyze site usage and enhance your browsing experience

4. HIPAA & Protected Health Information

As a covered healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.

4.1 Your HIPAA Rights

Under HIPAA, you have the right to:

• Access your Protected Health Information and request copies of your medical records
• Amend your PHI if you believe it is incorrect or incomplete
• Request restrictions on certain uses and disclosures of your PHI
• Receive confidential communications through alternative means or at alternative locations
• Obtain an accounting of certain disclosures of your PHI made in the prior six years
• Receive a paper copy of this privacy policy upon request
• Transfer your PHI to another provider or third party you designate

4.2 Psychotherapy Notes

If you receive counseling or therapy services, psychotherapy notes — defined as notes recorded during private, group, joint, or family counseling sessions that are maintained separately from your medical record — receive additional protections under HIPAA. We will not use or disclose psychotherapy notes without your written authorization, except as required by law.

4.3 Substance Use Disorder Records

In accordance with HIPAA regulations effective February 2026, information related to substance use disorder (SUD) treatment receives heightened protections. We include information about our handling of SUD records in our Notice of Privacy Practices, which is provided to patients at their first encounter.

5. When We May Disclose Your Information

We do not sell, rent, or trade your personal information or PHI. We may disclose your information in the following circumstances:

• With your consent — when you provide written authorization
• For treatment, payment, and operations — as described in Section 3
• As required by law — in response to court orders, subpoenas, or government investigations
• Public health activities — to prevent or control disease, report injuries, or track products
• Health and safety — to prevent or lessen a serious and imminent threat to a person or the public
• Abuse and neglect reporting — when required by law to report suspected abuse, neglect, or domestic violence
• Workers’ compensation — as authorized by applicable workers’ compensation laws

6. Nevada Consumer Health Data (SB 370)

Under Nevada Senate Bill 370, which governs consumer health data collected outside of HIPAA-regulated activities (such as website browsing behavior related to health topics), you have additional rights:

• We clearly disclose the categories of consumer health data we collect
• We obtain your voluntary consent before collecting consumer health data not otherwise required for the services you requested or authorized by law
• We do not sell consumer health data without your written authorization
• We do not use geofencing technology within 1,750 feet of our facility or any healthcare provider to identify, track, or collect data about individuals seeking health services

7. California Consumer Privacy (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to know — what personal information we collect, use, disclose, and sell
• Right to delete — request deletion of your personal information, subject to legal exceptions
• Right to opt out — of the sale or sharing of your personal information (we do not sell personal information)
• Right to non-discrimination — for exercising your privacy rights
• Right to correct — inaccurate personal information we hold about you

We honor Global Privacy Control (GPC) signals as a valid opt-out preference. To exercise your rights, contact us using the information in Section 13.

Note: PHI governed by HIPAA is exempt from CCPA/CPRA. Your HIPAA rights (Section 4) apply to health information collected during the course of care.

8. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Improve site performance and functionality

We do not use cookies for advertising or marketing purposes. You can manage cookie preferences through your browser settings. Disabling cookies may affect certain website features.

9. SMS & Email Communications

If you provide your phone number, you consent to receiving appointment reminders, health-related updates, and practice notifications via SMS or email. We commit to the following:

• We do not share, sell, or disclose your phone numbers for SMS or any other marketing purposes
• We will not share or sell your SMS opt-in information or phone numbers to any third party
• You may opt out of SMS communications at any time by texting STOP
• You may unsubscribe from email communications using the unsubscribe link in any email
• Certain transactional messages related to your care or account may still be sent after opting out

10. Wellness Partners & Independent Providers

Hill Care Health hosts independent wellness practitioners who lease space within our facility. These providers operate independently and maintain their own privacy policies. Information you share directly with an independent wellness provider is governed by that provider’s privacy practices, not this policy. We do not oversee, manage, or assume responsibility for the data practices of independent wellness providers.

11. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including:

• Encryption of data in transit and at rest
• Role-based access controls limiting PHI access to authorized personnel
• Regular security assessments and staff training
• Secure electronic health record (EHR) systems compliant with HIPAA standards
• Incident response procedures for potential data breaches

While we take reasonable measures to protect your information, no method of transmission or storage is completely secure. If we discover a breach of unsecured PHI, we will notify affected individuals and the U.S. Department of Health and Human Services as required by law.

12. Data Retention

We retain your personal and health information for as long as necessary to fulfill the purposes described in this policy and as required by applicable law. Medical records are retained in accordance with Nevada state law, which requires a minimum retention period of five years from the date of last treatment. After the retention period, records are securely destroyed.

13. Contact Us

If you have questions about this privacy policy, wish to exercise your rights, or need to file a complaint, contact us at:

• Phone: (725) 712-4625
• Email: admin@hillcarehealth.com
• Mail: Hill Care Health, 2575 S Cimarron Rd, Suite 104, Las Vegas, NV 89117

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

14. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.