This page explains how Zentrum Care LLC ("Zentrum Care," "we," or "us") handles health information that is protected by the Health Insurance Portability and Accountability Act ("HIPAA"). It summarizes the HIPAA-related provisions of our Privacy Policy, which governs in the event of any inconsistency.
When HIPAA applies to information we handle
Certain demographic, health, and health-related information that Zentrum Care collects about Users on behalf of our Healthcare Providers as part of providing the Services may be "protected health information" ("PHI") governed by HIPAA. Specifically, this may be true when (i) Zentrum Care is providing administrative, operational, or other services to a Healthcare Provider that is a "Covered Entity" (as defined by HIPAA); (ii) in order to provide those services, Zentrum Care receives identifiable information about a User or their minor patient on behalf of the Healthcare Provider, where Zentrum Care is acting as a "Business Associate" (as defined by HIPAA); and (iii) this identifiable information is regulated as PHI.
Our Privacy Policy does not apply to PHI, which is instead regulated by HIPAA. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed.
Your Healthcare Provider's Notice of Privacy Practices
Where your information is PHI, the document that describes how it can be used and disclosed is the Notice of Privacy Practices of your Healthcare Provider — the practice or professional you book with — not this page or our Privacy Policy. Please read your Healthcare Provider's Notice of Privacy Practices to understand how PHI can be used and disclosed, and direct requests regarding PHI (such as access or correction requests) to your Healthcare Provider.
Personal Data that a User provides to Zentrum Care when Zentrum Care is not acting as a Business Associate is not PHI, and Zentrum Care's use of that information is covered by our Privacy Policy. For example, we are collecting Personal Data governed by the Privacy Policy when you: (i) create an account; (ii) search for Healthcare Providers or available appointments; (iii) post reviews; or (iv) provide device/IP information or web analytics information by browsing our websites.
How we safeguard health information
Where we handle protected health information on behalf of providers, we do so within the framework HIPAA requires, including Business Associate Agreements with the providers and vendors involved. We work to ensure that health information flowing through the platform is used and disclosed only as permitted.
Data is encrypted in transit using Transport Layer Security (TLS) over HTTPS whenever it moves between your device and our platform, and data is encrypted at rest in our systems. We limit access to personal and health information to the people who need it to operate and support the platform, applying the principle of least privilege. If personal or health information is ever subject to unauthorized access, we will notify affected users and the appropriate regulators as required by HIPAA and applicable Florida law.
Text messages are an exception that you opt into and control. Text messages (SMS) travel over mobile carrier networks that we do not operate and cannot encrypt: a text is readable in transit, is stored on the handset, and can be read by anyone holding the phone. We therefore treat SMS as opt-in and keep its contents to the least that makes a message useful — your child's first name, the Healthcare Provider you booked with, the date and time of the visit, and, where it applies, that your insurer reported a problem with the coverage on file. We do not send diagnoses, clinical notes, treatment details, or insurance member IDs by text. Appointment text messages are optional: you are asked for that consent separately when you book, declining does not prevent or delay the booking, and the same information reaches you by email and in your Zentrum Care account. You can stop them at any time by replying STOP to any message, or by writing to support@zentrumcare.com. Sign-in passcodes are also sent by text and contain no health information. Our SMS Terms describe both programs in full.
You can read more about our safeguards on our Security & Data Privacy page.
Questions
If you have questions about how we handle health information, contact us at privacy@zentrumcare.com.
Zentrum Care LLC 7901 Hispanola Ave, Apt 1605 North Bay Village, FL 33141