Fore2Feet Orthotic Clinic – Privacy & Consent Policy
Effective Date: November 2025
Fore2Feet Orthotic Clinic (“Fore2Feet”, “we”, “us”, “our”) is committed to protecting your privacy and ensuring the confidentiality of your personal and health information.
This policy describes how we collect, use, store, and protect your data in accordance with the Health Insurance Portability and Accountability Act (HIPAA), applicable state privacy laws, and US best-practice standards.
1. Information We Collect
Personal Details: Name, mailing address, phone number, and email for appointment scheduling and contact.
Protected Health Information (PHI): Medical history, orthotic assessment data, consultation notes, insurance information, and device preferences.
Payment Information: Billing details, credit card numbers, and insurance co-pay information processed securely through our approved payment gateway (WooCommerce / Stripe).
Technical Data: IP address, browser type, and device information collected for security and website performance analytics.
2. How We Use Your Information
We use your information for “Treatment, Payment, and Health Care Operations” (TPO) and other necessary purposes:
To schedule and manage appointments, including telemedicine consultations.
To provide clinical assessments, orthotic recommendations, and facilitate ongoing medical care.
To process billing to you or your insurance provider.
To send transactional emails such as appointment confirmations and receipts.
To deliver follow-up reminders and educational content (only with your consent).
To comply with federal and state laws, regulations, and professional healthcare standards.
3. Consent for Telemedicine & Communication
By checking the consent box during booking or by otherwise engaging our services, you authorize Fore2Feet Orthotic Clinic to collect and use your information for medical evaluation and treatment purposes.
Telemedicine: You acknowledge that electronic communication (video/audio) involves specific privacy risks, though we utilize HIPAA-compliant platforms to minimize these risks.
Marketing: You may provide separate consent to receive educational or promotional communications. You can withdraw this consent at any time by clicking “Unsubscribe” in our emails or contacting us directly, in compliance with the CAN-SPAM Act.
4. Data Storage & Security
Location: All digital data are stored on encrypted servers located in the United States and backed up securely.
Access Control: Access is restricted to authorized practitioners and administrative staff who have signed confidentiality agreements and received HIPAA training.
Encryption: Electronic communications and data at rest are protected using SSL/TLS encryption and other industry-standard security measures.
Paper Records: Paper records (if any) are stored in locked, secure facilities and destroyed according to strict retention schedules.
5. Data Sharing
We do not sell or rent your personal information. Your Protected Health Information (PHI) may be shared only:
With Clinicians: Other healthcare providers directly involved in your care (e.g., your referring physician or physical therapist).
With Business Associates: Service providers who assist in delivering our clinical, billing, or IT services. These providers are bound by Business Associate Agreements (BAAs) to protect your data under HIPAA.
Legal Requirements: When required by law, court order, or to prevent serious threats to health or safety.
6. Your Rights (HIPAA & Privacy)
Under US law, you have specific rights regarding your health information:
Right to Access: You may inspect and request a copy of your medical records.
Right to Amend: You may request corrections to your data if you believe it is incorrect.
Right to Request Restrictions: You may ask us to limit how we use or share your information (though we are not always required to agree).
Right to Confidential Communications: You may ask us to contact you in a specific way (e.g., only at work or via mail).
Right to a Paper Copy: You may request a paper copy of our Notice of Privacy Practices.
7. Marketing & Communication Preferences
We send newsletters or promotional messages only to patients who have opted in. Each message includes an easy opt-out link. Opting out of marketing will not affect your ability to receive appointment-related, billing, or clinical information.
8. Cookies & Analytics
Our website may use cookies for performance monitoring and to improve your experience. You may disable cookies in your browser settings, although some features may not function correctly. We respect “Do Not Track” signals where applicable by state law.
9. Data Retention
Clinical Records: Health-related records are retained in accordance with applicable state and federal retention laws (typically a minimum of 6 to 10 years depending on the state, or longer for minors).
Non-Clinical Data: Retained only as long as necessary for the business purpose for which it was collected.
10. Contact & Complaints
For questions, access requests, or complaints regarding your privacy, please contact:
Privacy Officer Fore2Feet Orthotic Clinic Email: info@fore2feet.com Website: https://fore2feet.com
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). There will be no retaliation for filing a complaint.
11. Policy Updates
We may update this policy from time to time to reflect changes in legal or regulatory obligations. Continued use of our services constitutes acceptance of the revised policy.
Fore2Feet Orthotic Clinic — Supporting mobility with care, confidentiality, and clinical excellence.
