Your Privacy Matters

We collect only the data necessary to deliver medical care, run our practice, and improve services in compliance with HIPAA, HITECH, and applicable New York State privacy laws.

Your information is used only as permitted by HIPAA, HITECH, and New York law to:

• Provide, coordinate, and manage your medical care
• Schedule appointments and send reminders
• Process insurance claims and payments
• Communicate about your health and services
• Operate, maintain, and improve our website and internal systems
• Conduct secure analytics and quality improvement
• Run digital advertising campaigns (Google Ads and Meta Ads) based on anonymized site activity—never using Protected Health Information (PHI) for ad targeting
• Comply with legal, regulatory, and public health requirements

We never sell your personal or medical information. We may share data only as allowed by HIPAA and New York State law:

• Treatment - With other healthcare providers involved in your care
• Payment - With insurance plans and billing processors
• Operations - For quality review, staff training, audits, or secure technology services
• Business Associates - HIPAA-compliant vendors (EHR platforms, scheduling tools, analytics services) bound by Business Associate Agreements
• Legal & Safety - When required by law, court order, or to prevent an imminent threat to health or safety

• Our website uses cookies, analytics, and pixels to measure performance and improve services.
• We may run Google Ads and Meta Ads to promote our practice. These tools may track anonymized site activity (e.g., pages viewed) to deliver ads to visitors after they leave our site (retargeting).
• We do not link Protected Health Information (PHI) to advertising data.
• You can opt out of cookie-based advertising through Google Ads Settings, Meta Ad Preferences, or your browser's "Do Not Track" settings.

• Access and obtain a copy of your medical records
• Request corrections to your records
• Request restrictions on certain uses or disclosures
• Receive an accounting of disclosures
• Request confidential communications (alternative phone or email)
• Opt out of non-essential marketing communications
• File a privacy complaint with Alam Medical or the U.S. Department of Health & Human Services (HHS)

We use administrative, technical, and physical safeguards to protect your information, including:

• Encrypted electronic medical records and secure HTTPS/SSL transmission
• Role-based access controls and mandatory HIPAA training
• Continuous system monitoring, vulnerability testing, and regular security audits
• Off-site backups and breach-notification procedures

While we follow industry best practices, no system is 100% secure. We will notify affected individuals promptly if a breach occurs.

For questions, privacy requests, or complaints, please contact our Privacy Officer: