Privacy Policy & Notice of Privacy Practices
Effective Date: August 8, 2013 (Updated July 2025)
Great Lakes Health and Wellness / Dr. Bob Leonard, D.C.
2865 Detroit Ave, Cleveland OH 44113
Email: [email protected]
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
We are committed to protecting your personal and medical information. This privacy policy outlines how Great Lakes Health and Wellness collects, uses, and safeguards both health and personal data, including compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Data Protection Act, and modern digital marketing standards.
1. How We May Use or Disclose Your Health Information
We collect health information and store it in your medical record. This information may be used or disclosed for the following purposes:
Treatment: We use and disclose your health information to provide medical care. This includes coordination with other providers, pharmacies, or labs. We may share information with family members or caregivers assisting with your care.
Payment: We use and disclose your information to bill and collect payment from health plans, insurance, or third-party payers.
Health Care Operations: We may use and disclose information for business functions like quality reviews, training, fraud prevention, legal services, accreditation, and care coordination.
Business Associates: Third-party partners such as billing companies or EMR systems may access your data to perform administrative tasks. These parties are bound by confidentiality agreements.
Organized Health Care Arrangements (OHCAs): We may share information with other healthcare entities we work with in joint arrangements for operational efficiency.
Appointment Reminders: We may contact you by phone, voicemail, text, or email to remind you of upcoming appointments.
Sign-In Sheets and Waiting Areas: You may be asked to sign in, and we may call your name when ready to see you.
Family Notification: We may disclose information to family or caregivers involved in your care or for purposes of notifying them in case of emergency or death, unless you object.
Marketing: We may contact you about treatment options, health-related services, or other providers, but never in exchange for payment without your written authorization.
Sale of Health Information: We will never sell your medical data without your explicit written authorization.
Required by Law: We may disclose your information as required by state or federal law.
Public Health: We may disclose information to public health authorities for disease control, FDA reporting, abuse reporting, and similar lawful purposes.
Health Oversight: Information may be shared with oversight agencies during audits, investigations, inspections, or licensing reviews.
Judicial or Administrative Proceedings: We may share information in response to court orders, subpoenas, or legal processes.
Law Enforcement: Disclosures may occur for investigations, locating individuals, or as required by legal processes.
Coroners and Medical Examiners: In cases of death, we may disclose information for identification, cause of death, or funeral preparation.
Organ Donation: Disclosures may be made to organ procurement organizations as required.
Public Safety: We may disclose information to prevent serious threats to health or safety.
Proof of Immunization: Schools may receive proof of immunization with your prior consent.
Military and Government Functions: Disclosures may be made to authorized military or national security personnel or correctional facilities.
Workers’ Compensation: Your information may be shared as required by workers’ comp laws and for reporting occupational injuries.
Change of Ownership: In the event of a sale or merger, your records may be transferred to the new owner.
Breach Notification: You will be notified by mail, email, or other lawful means if a data breach occurs that involves your unsecured protected health information.
2. When We May Not Use or Disclose Your Information
We will not use or disclose your health information for any reason not described above without your written authorization. You may revoke such authorization in writing at any time, except when we have already acted based on it.
3. Your Rights Regarding Your Health Information
Right to Request Restrictions: You may request limitations on how we use or disclose your information. While we are not required to agree to most requests, we will comply with restrictions related to services paid in full out-of-pocket.
Right to Request Confidential Communication: You can request that we communicate with you via specific channels (e.g., email, work phone). We will honor reasonable requests.
Right to Inspect and Copy: You may request access to your records. If we maintain your data electronically, you may request a digital copy. A reasonable fee may apply. Requests must be submitted in writing.
Right to Amend: You may request corrections to information you believe is incorrect. We are not required to make the change, but will explain why if we deny the request.
Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made, excluding those related to treatment, payment, operations, or those authorized by you.
Right to a Copy of This Notice: You may request a paper or electronic version of this full privacy policy at any time.
4. Website Privacy Policy
Information We Collect Online:
Name and job title
Contact details including email and phone
Demographic data such as zip code, preferences, and interests
Other info provided through forms, surveys, or promotions
How We Use This Data:
Internal record keeping
Improve our services and website experience
Send promotional emails or special offers
Conduct surveys and gather feedback
Personalize the website based on your interests
Occasionally share with trusted partners (never sold)
Security Measures:
We protect your data through secure servers, encrypted storage, access controls, and staff training. Only authorized personnel can access sensitive information.
5. Cookies and Tracking
We use cookies to understand user behavior, optimize website experience, and analyze performance. Cookies do not give us access to your device or any data beyond what you voluntarily provide. You may disable cookies via browser settings.
6. Links to Third-Party Sites
Our website may link to other websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.
7. SMS and Email Communication
By providing your contact information, you agree to receive messages related to your care, appointments, wellness updates, or promotional offers. Message and data rates may apply.
To opt out of SMS: reply STOP at any time.
To opt out of email: click “unsubscribe” at the bottom of any message or email us at [email protected].
8. Controlling Your Personal Information
You may request to restrict the use of your data or opt out of marketing communications at any time. Contact us at [email protected] for updates or to withdraw your consent.
You may also request a copy of the information we hold about you under the Data Protection Act. A small processing fee may apply.
9. Changes to This Notice
We reserve the right to change this policy at any time. Updated versions will be posted on our website and available in our office.
10. Questions or Complaints
If you have concerns about how we manage your information or wish to file a complaint, please contact us:
Privacy Officer
[email protected]
You may also file a complaint with the U.S. Department of Health & Human Services:
https://www.hhs.gov/hipaa/filing-a-complaint/
You will not be penalized for filing a complaint.
