Privacy Policy | New York Headache Center

This Privacy Policy explains how NYHC collects, uses, discloses, and safeguards information when you visit nyheadache.com (the "Site"), contact us, subscribe to communications, or receive care in our clinics. Patient health information used in the course of treatment or billing is protected by HIPAA and described in our separate Notice of Privacy Practices below.

Information We Collect

Contact & Inquiry Data: name, email, phone, and message content.

Appointment & Patient Intake Data: insurance, medical history and symptoms, preferred provider; may include Protected Health Information (PHI).

Payment Data: limited billing details processed by our payment vendors; we do not store full card numbers.

Technical Data: IP address, device/browser, pages viewed, referral URLs; cookies and similar technologies.

Communications Preferences: newsletter opt‑in, unsubscribe data.

How We Use Your Data

Provide and improve the Site, services, scheduling, and patient communications.

Respond to inquiries, send administrative messages, and deliver newsletters (with your consent where required).

Secure our systems, prevent fraud/abuse, and comply with law.

Sharing Your Information

Vendors/Service Providers: website hosting, analytics, email/SMS, payment processors, EHR/scheduling, telehealth platforms. They may access information only to perform services for us.

Legal/Compliance: to satisfy applicable law or lawful requests; to protect rights, safety, or property.

Business Changes: in a merger, acquisition, or other transfer, consistent with legal requirements.

‍Disclosure of Information

We may share your information with:

Healthcare providers involved in your treatment.
Insurance companies or billing processors.
Technology vendors (e.g., website hosting, secure email).
Government agencies, when required by law.

Data Retention & Security

PHI is maintained in compliance with HIPAA and state laws.

Technical safeguards (encryption, secure servers) protect your data.

Data is retained only as long as necessary for medical and legal purposes.

Your Rights

Request access to your records.

Ask for corrections or updates.

Request restrictions on disclosures.

Opt-out of non-essential communications.

File a complaint with us or the U.S. Department of Health & Human Services.

Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes to our practices, legal obligations, or service offerings. When we do, we will update the effective date at the top of this page and, where appropriate, provide you with notice by email or through our platform. We encourage you to review this page periodically to stay informed about how we are protecting your data and respecting your privacy preferences.