Privacy Policy

1. Information We Collect Through the Public Website

Depending on how you use our Website, we may collect certain information that you voluntarily provide to us or that is automatically collected when you visit the Website.

Information You Voluntarily Provide

You may choose to provide information when you:

• Contact us through a website contact form;
• Send us an email;
• Request information about our services;
• Submit an inquiry or request for assistance;
• Communicate with us through other features made available on the Website; or
• Follow a link to another service or platform, such as our secure patient portal.

Information you voluntarily provide may include your:

• Name;
• Email address;
• Telephone number;
• General information contained in your inquiry; and
• Other information you choose to provide.

Please do not submit sensitive medical information, diagnoses, medication details, medical history, or other protected health information through a public website contact form or ordinary email unless Wismar Med specifically instructs you to do so through a secure method.

If you need to communicate with Wismar Med about your medical care, medical records, prescriptions, or other health-related matters, please use the secure patient communication method provided by Wismar Med, such as the Elation Passport patient portal, when available.

2. Medical Records and Protected Health Information

The public Wismar Med Website is intended primarily to provide general information about Wismar Med and its services.

Patient medical records and protected health information are not intended to be stored in the public Website.

When you become a patient of Wismar Med or submit information as part of receiving healthcare services, information relating to your medical care may be maintained in Wismar Med’s electronic health record (“EHR”) system, Elation Health, and may be made available through the secure Elation Passport patient portal, as applicable.

Elation Health describes its Clinical EHR as a system used by healthcare providers to maintain electronic medical records and explains that healthcare providers are responsible for determining the use and disclosure of patient medical information in accordance with applicable legal and professional obligations. Elation also describes Elation Passport as a patient portal that can facilitate interactions between healthcare providers and patients, including certain communications and access to portions of a patient’s medical record.

Information maintained as part of your patient record and information relating to your healthcare may be subject to HIPAA and other applicable privacy laws. Such information is governed by Wismar Med’s Notice of Privacy Practices and applicable healthcare privacy requirements, rather than solely by this Website Privacy Policy.

If you access the Elation Passport patient portal, your use of that service may also be subject to applicable Elation Health terms and privacy practices.

3. Information Collected Automatically

When you visit the Website, certain information may be collected automatically by the Website, its hosting provider, or third-party technologies used to operate, secure, maintain, and improve the Website.

Depending on the Website’s actual configuration, this information may include:

• Internet Protocol (IP) address;
• Browser type and version;
• Device type;
• Operating system;
• General geographic location derived from IP address;
• Date and time of your visit;
• Pages viewed;
• Referring website or source;
• Time spent on the Website;
• Website interactions and navigation activity; and
• Other technical or usage information.

This information may be used to:

• Operate and maintain the Website;
• Improve Website functionality and performance;
• Understand how visitors use the Website;
• Monitor Website security;
• Detect and prevent fraud, abuse, or unauthorized activity;
• Troubleshoot technical issues; and
• Analyze Website traffic and usage trends.

To the extent information collected automatically can reasonably be associated with an identifiable individual, Wismar Med will handle it in accordance with applicable law and this Privacy Policy.

4. Cookies and Similar Technologies

The Wismar Med Website may use limited cookies or similar technologies that are necessary for the basic functionality, security, and proper operation of the Website. These technologies do not collect, store, or transmit patient medical information, protected health information (“PHI”), or information submitted as part of the clinical intake process.

Wismar Med does not use cookies or tracking technologies on the public Website for analytics purposes or to collect information related to patient healthcare services.

You may be able to manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality or performance of portions of the Website.

5. Contact Forms and Email Communications

If you contact Wismar Med through a Website contact form or by email, we may collect and use the information you provide to:

• Respond to your inquiry;
• Provide requested information about Wismar Med’s services;
• Communicate with you regarding administrative or general questions;
• Address technical or Website-related issues; and
• Maintain records of communications as appropriate.

The public Wismar Med Website is not intended to collect or store patient medical information, protected health information (“PHI”), medical records, or information required for clinical care.

Please do not submit sensitive medical information through a public Website contact form or ordinary email, including diagnoses, medication information, medical history, prescription requests, or other health-related information. If you need to provide information related to your medical care, Wismar Med will direct you to use a secure patient communication method, including the secure patient intake process through Elation Health after appointment scheduling.

Information submitted through a public contact form or ordinary email may not be transmitted or stored using the same secure systems used for clinical records. Wismar Med may retain contact information and communications for legitimate business, administrative, legal, compliance, or customer service purposes, subject to applicable law.

6. Secure Patient Portal and Clinical Communications

Wismar Med may provide patients with access to a secure patient portal or other secure technology for healthcare-related communications and services. The Wismar Med public Website is separate from the secure patient portal and clinical EHR environment.

For patients who use the Elation Passport patient portal, information submitted through or made available through the patient portal may be associated with the patient’s medical record and may be subject to HIPAA and other applicable privacy laws.

Depending on the services enabled by Wismar Med, the patient portal may be used for functions such as:

• Patient communications;
• Appointment-related interactions;
• Healthcare-related messaging;
• Medication-related communications;
• Access to certain health information; and
• Other services made available by Wismar Med.

Elation Health states that patient medical information maintained through its Clinical EHR is handled in connection with its role as a technology provider to healthcare practices, while the healthcare provider remains responsible for its patient records and privacy practices.

For information about the privacy of your medical information, please refer to Wismar Med’s Notice of Privacy Practices.

7. How We Use Information Collected Through the Website

Wismar Med may use information collected through the public Website for purposes including:

• Operating and maintaining the Website;
• Responding to inquiries;
• Providing information about Wismar Med’s services;
• Communicating with individuals who contact us;
• Improving Website content and functionality;
• Monitoring Website performance;
• Maintaining Website security;
• Preventing fraud, abuse, or unauthorized activity;
• Complying with applicable legal and regulatory requirements; and
• Protecting the rights, safety, and security of Wismar Med, its patients, Website visitors, and others.

Wismar Med will use information collected through the public Website only for purposes permitted by applicable law.

8. How We Share Information

Wismar Med may share information collected through the public Website when reasonably necessary to operate the Website or provide requested services.

This may include sharing information with:

• Website hosting providers;
• Website developers and technical service providers;
• Website security providers;
• Analytics providers;
• Email or communication service providers;
• Technology vendors that support Website functionality; and
• Other service providers acting on behalf of Wismar Med.

These service providers may access information only as reasonably necessary to perform services for Wismar Med and subject to applicable contractual and legal requirements.

Wismar Med may also disclose information when required or permitted by applicable law, including when necessary to:

• Comply with a legal obligation;
• Respond to a valid legal process;
• Protect the rights, property, or safety of Wismar Med or others;
• Detect or prevent fraud or security threats; or
• Protect against misuse of the Website.

Wismar Med does not sell patient medical records or protected health information. Any use or disclosure of PHI obtained in connection with healthcare services is governed by Wismar Med’s Notice of Privacy Practices and applicable healthcare privacy laws.

9. Information Security

Wismar Med takes reasonable administrative, technical, and organizational measures designed to protect information collected through the Website from unauthorized access, use, alteration, or disclosure.

However, no website, electronic communication, or internet transmission can be guaranteed to be completely secure. For this reason, you should exercise caution when submitting information online and should not submit sensitive medical information through unsecured or publicly accessible channels. Where healthcare information is involved, Wismar Med uses designated systems and processes intended to protect patient information in accordance with applicable privacy and security requirements.

10. Third-Party Websites and Services

The Website may contain links to third-party websites, platforms, or services, including the secure patient portal or other websites that are not operated or controlled by Wismar Med.

Examples may include links to:

• Elation Passport;
• Healthcare resources;
• Pharmacy or other healthcare-related services;
• Social media platforms; or
• Other third-party websites.

When you leave the Wismar Med Website and access a third-party website or service, that third party’s privacy policy and terms may apply. Wismar Med is not responsible for the privacy practices, security, or content of third-party websites or services.

We encourage you to review the privacy policies of any third-party service before providing information.

11. Children’s Privacy

The Website is not intended to knowingly collect personal information from children under the age of 13. Wismar Med’s healthcare services may have separate age and eligibility requirements. Information regarding eligibility for healthcare services is addressed through the applicable patient intake and clinical processes rather than through this Website Privacy Policy.

If you believe that a child has provided personal information through the Website in a manner that should not have occurred, please contact us using the information provided below.

12. Your Privacy Choices

Depending on the information involved and applicable law, you may have choices regarding information collected through the public Website.

You may:

• Choose not to provide optional information through a contact form;
• Contact Wismar Med using alternative communication methods;
• Adjust your browser settings to manage certain Cookies;
• Use available privacy controls provided by third-party analytics services; and
• Request information about how Wismar Med handles information submitted through the Website.

Please note that choices regarding Cookies or other technical technologies may affect Website functionality. Requests concerning your medical records or PHI are governed by Wismar Med’s Notice of Privacy Practices and applicable law.

13. HIPAA and Protected Health Information

This Privacy Policy is primarily intended to address information collected through the public Wismar Med Website. It does not replace Wismar Med’s HIPAA Notice of Privacy Practices.

If you are a Wismar Med patient, your medical records and PHI are handled in accordance with applicable federal and state privacy laws, including HIPAA where applicable, and Wismar Med’s Notice of Privacy Practices. The HIPAA Privacy Rule establishes national standards governing the privacy of PHI held or transmitted by covered entities and gives individuals rights concerning their health information. If you have questions about your medical records, PHI, or your HIPAA privacy rights, please contact Wismar Med using the information listed below or review our Notice of Privacy Practices.

14. Changes to This Privacy Policy

Wismar Med may update this Privacy Policy from time to time to reflect changes in:

• Our Website;
• Our services;
• Information collection practices;
• Third-party technologies;
• Applicable laws or regulations; or
• Our privacy practices.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. If we make material changes, we may provide additional notice when required by applicable law. We encourage you to review this Privacy Policy periodically for the most current information about our privacy practices.

15. Contact Us

If you have questions about this Privacy Policy or how information is collected through the Wismar Med Website, please contact us:

Wismar MedMailing Address: 101 Fairview Rd, Ste 103-209Ellenwood, GA 30294-2722Phone: 678-562-1163Email: Support@Wismarmed.comWebsite: www.Wismarmed.com

Privacy Contact / Privacy Officer: Tramaine WilkinsonPrivacy Email: DrTramaine@Wismarmed.comPrivacy Phone: 678-562-1163

For questions concerning your medical records or protected health information, please refer to the Wismar Med Notice of Privacy Practices and use the secure patient communication method provided by Wismar Med whenever appropriate.