This Privacy Policy explains how [Baltimore Healthcare and Wellness LLC, d/b/a BHW Medical Group] (“BHW,” “we,” “us”) collects, uses, and protects information when you visit our website, request care, or interact with our services.
About your health information. This website Privacy Policy is separate from our Notice of Privacy Practices (NPP), which describes how we use and disclose your protected health information (PHI) under HIPAA. If anything here conflicts with our NPP regarding PHI, the NPP governs. You can request our NPP at [link or contact].
1. Information we collect
Depending on how you interact with us, we may collect:
Information you provide — name, contact details, appointment requests, insurance/member information, and messages you send us.
Protected Health Information (PHI) — health and treatment information you or your providers share with us, handled under HIPAA and our NPP.
Payment information — processed by our payment processor; we do not store full card or bank credentials on our systems.
Automatically collected information — device and browser type, IP address, pages viewed, and similar usage data via cookies and analytics.
2. How we use information
To provide, coordinate, and bill for care (treatment, payment, and healthcare operations).
To verify insurance eligibility and process claims and payments.
To respond to your requests and communicate with you.
To operate, secure, and improve our website and services.
To comply with legal, regulatory, and accreditation obligations.
3. How we share information
We do not sell your personal information. We share information only as needed and as permitted by law, including with:
Service providers (subprocessors) that support our operations — for example a claims clearinghouse, electronic health record system, payment processor, secure cloud hosting, and a health information exchange. Where these providers handle PHI, they do so under a Business Associate Agreement (BAA). A current list of categories is available on request.
For treatment, payment, and healthcare operations, consistent with HIPAA and our NPP.
When required by law — e.g., to comply with a subpoena, regulator, or public-health obligation.
4. Your health information rights (HIPAA)
Under HIPAA and applicable state law, you generally have the right to access, request corrections to, and receive an accounting of certain disclosures of your PHI, and to request restrictions on its use. These rights and how to exercise them are detailed in our Notice of Privacy Practices.
5. Your privacy choices
You can opt out of non-essential cookies through your browser settings.
You may request access to, correction of, or deletion of personal information we hold about you, subject to legal and medical record-keeping requirements.
Residents of [Maryland / your state] may have additional rights under state law; contact us to exercise them.
6. Data security
We use administrative, technical, and physical safeguards — including encryption in transit, access controls, and BAAs with vendors — designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Data retention
We retain information for as long as needed to provide services and to meet legal, medical record-retention, tax, and regulatory requirements, after which it is securely deleted or de-identified.
8. Cookies & analytics
Our website uses cookies and similar technologies for functionality and to understand usage. We do not place sensitive health information in cookies or URLs. You can control cookies through your browser.
9. Children’s privacy
Our website is not directed to children under 13, and we do not knowingly collect their information through the site. Care provided to minor patients is governed by our NPP and applicable law.
10. Third-party links
Our site may link to third-party sites we don’t control. Their privacy practices are their own; please review their policies.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted here with a revised “Last updated” date.
12. Contact us
BHW Medical Group
Attn: Privacy Officer [2300 Garrison Blvd, Ste 100A, Baltimore, MD 21216] [privacy@bhwmedical.org] · [(443) 762-5343]