Privacy Policy

“`html

New Cadence Healthcare Privacy Policy

Effective Date: October 1, 2024

This Privacy Policy explains how New Cadence Healthcare, a California professional corporation (“New Cadence,” “we,” “us,” or “our”), collects, uses, and discloses information when you visit newcadencehealthcare.com (the “Site”), use our services, or otherwise interact with us. It also describes the rights that may apply to you under applicable law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

Important: HIPAA and Protected Health Information

New Cadence Healthcare is a healthcare provider and a Covered Entity under the Health Insurance Portability and Accountability Act (“HIPAA”). When you receive clinical services from our physicians — whether in person or through the Norava Health digital platform (noravahealth.com) — we collect and maintain protected health information (“PHI”) about you. The use and disclosure of your PHI for treatment, payment, and healthcare operations is governed by our HIPAA Notice of Privacy Practices, not by this Privacy Policy. You will receive our Notice of Privacy Practices when you establish a patient relationship with us.

This Privacy Policy covers personal information we collect through the Site and in non-clinical interactions that is not PHI governed by HIPAA.

1. Information We Collect

Information You Provide to Us

We collect information you submit through the Site or provide to us directly, such as when you:

  1. Fill out a contact, appointment request, or inquiry form;
  2. Subscribe to email updates or newsletters;
  3. Communicate with us by email, phone, or other means; or
  4. Provide information in connection with becoming a patient, to the extent it is not PHI
    governed by our HIPAA Notice of Privacy Practices.

This information may include your name, email address, phone number, mailing address, and the
contents of any message you send.

Please do not submit medical, diagnostic, or other sensitive health information through
general forms on this Site. Health information related to your care should be shared
through the secure Norava Health platform or directly with your treating clinician.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

  1. Device and browser information, including your IP address, browser type, operating system,
    and device identifiers;
  2. Usage information, including pages visited, links clicked, referring URLs, and session duration; and
  3. Approximate geolocation derived from your IP address.

We use cookies, pixels, and similar tracking technologies to collect this information.
See Section 4 for details.

Information From Other Sources

We may receive limited information from third parties, including analytics providers, the
Norava Health platform for non-PHI operational data, and publicly available sources.

2. How We Use Information

We use the information we collect to:

  1. Operate, maintain, and improve the Site;
  2. Respond to your inquiries and provide requested information;
  3. Facilitate appointment scheduling and patient onboarding;
  4. Send you updates, announcements, and marketing communications you have opted into;
  5. Conduct analytics to understand how the Site is used;
  6. Detect, prevent, and address fraud, abuse, and security issues; and
  7. Comply with applicable laws, regulations, and legal process.

3. How We Disclose Information

We may disclose personal information in the following circumstances:

3.1 Norava Health and QuantEM (MSO)

We share information with Norava Corporation and QuantEM as necessary to operate the digital health platform and provide management, technology, and administrative services on our behalf. Norava and QuantEM’s handling of PHI is governed by our Business Associate Agreement and HIPAA. Norava and QuantEM handling of non-PHI data is described in its own Privacy Policy at noravahealth.com.

3.2 Service Providers

We share information with vendors who perform services on our behalf, including hosting, payment processing, email delivery, analytics, and IT support. These providers are contractually obligated to use information only as needed to perform services for us.

3.3 Other Healthcare Providers

We may share information with other healthcare providers involved in your care, as permitted or required by HIPAA and applicable law. Such disclosures are governed by our HIPAA Notice of Privacy Practices.

3.4 Legal and Safety

We may disclose information when we believe in good faith it is necessary to:

  1. Comply with applicable law, regulation, or legal process;
  2. Respond to a lawful request from a government authority;
  3. Enforce our agreements;
  4. Protect our rights, property, or safety; or
  5. Protect the safety of any person.

3.5 Business Transfers

If New Cadence is involved in a merger, acquisition, reorganization, or sale of assets,
personal information may be transferred as part of that transaction.

3.6 With Your Consent

We may disclose information for other purposes with your explicit consent.

No Sale of Personal Information

We do not sell your personal information in exchange for monetary consideration. We do not knowingly share personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide an opt-out mechanism as required by law.

4. Cookies and Analytics

We use cookies and similar technologies to operate the Site, remember preferences, and understand usage patterns.

4.1 Essential Cookies

Essential cookies are required for the Site to function, including for security and session
management. These cookies cannot be disabled without affecting core functionality.

4.2 Analytics Cookies

Analytics cookies help us understand how visitors use the Site. We may use third-party analytics services such as Google Analytics. You can learn more about Google Analytics at
policies.google.com/technologies/partner-sites.

4.3 Your Choices

You can adjust cookie preferences through your browser settings. Blocking certain cookies may affect Site functionality.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. Retention of PHI is governed by our HIPAA practices and applicable California and federal law.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. These include encryption of data in transit and at rest, access controls, and regular security assessments. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us using the information in Section 12 and we will take appropriate steps to delete it.

8. Third-Party Links

The Site may contain links to websites operated by third parties, including the Norava Health platform. When you navigate to a third-party site, that site’s own privacy practices apply. We are not responsible for the privacy practices or content of third-party sites.

9. Your Choices

9.1 Marketing Emails

You may opt out of marketing emails at any time by following the unsubscribe instructions in those messages. Transactional and administrative communications, including appointment reminders and account notices, will continue regardless of your marketing preferences.

9.2 Cookies

See Section 4.3.

9.3 Do Not Track

Some browsers offer a “Do Not Track” signal. The Site does not currently respond to these signals.

10. Notice to California Residents

This section provides additional information required under the CCPA, as amended by the CPRA.

Categories of Personal Information Collected

In the preceding 12 months, we may have collected the following categories of personal information:

  1. Identifiers: Name, email address, phone number, mailing address, and IP address;
  2. Internet or network activity information: Browsing and usage data on the Site;
  3. Geolocation data: Approximate location derived from your IP address;
  4. Commercial information: Inquiry records and appointment requests; and
  5. Inferences: Inferences drawn from the information described above.

Sources

We collect this information from you directly, from your device automatically, from service providers, and from the Norava Health platform for non-PHI operational data.

Business Purposes

We use this information for the purposes described in Section 2.

Sensitive Personal Information

We do not intentionally collect sensitive personal information through the Site outside of
clinical contexts governed by HIPAA.

Your California Rights

Subject to applicable exceptions, California residents have the right to:

  1. Know what personal information we have collected, used, and disclosed;
  2. Request deletion of personal information;
  3. Request correction of inaccurate personal information;
  4. Opt out of any “sale” or “sharing” of personal information. We do not currently sell or
    share personal information as defined under the CCPA; and
  5. Not receive discriminatory treatment for exercising these rights.

How to Exercise Your Rights

Contact us at the address or email in Section 12. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf, subject to identity verification.

HIPAA Exemption

To the extent any information constitutes PHI governed by HIPAA, it is exempt from the CCPA. Rights regarding your PHI are set forth in our HIPAA Notice of Privacy Practices.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the effective date at the top of the page. If changes are material, we will provide additional notice on the Site or by email. Your continued use of the Site or our services after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

New Cadence Healthcare
1777 N Bellflower Blvd
Suite 210
Long Beach, CA 90815
Email:
info@newcadencehealthcare.com
Phone: 562-248-2999