Privacy Policy

UsalisVeris ("we," "us," or "our") respects your privacy and is committed to protecting personal information collected through usalisveris.com, patient portals, mobile experiences, telephone interactions, and in-person registration (collectively, the "Services"). This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the choices available to you.

When you receive clinical care, additional notices may apply to protected health information ("PHI") under healthcare privacy regulations. Where this Policy describes website and marketing data, it complements—not replaces—clinical privacy practices provided at registration.

1. Information We Collect

1.1 Information You Provide

• Contact and identity data: name, email address, date of birth, gender identity (optional), language preference, and account credentials.
• Scheduling and inquiries: appointment preferences, department selections, messages submitted through contact forms, and attachments you choose to upload.
• Membership and billing: plan selections, payment method tokens processed by PCI-compliant vendors (we do not store full card numbers on our servers), and billing correspondence.
• Clinical information: symptoms, medical history, medications, allergies, vitals, test results, imaging, provider notes, and treatment plans documented during care.
• Communications: email, portal messages, surveys, and recorded quality calls where permitted by law and disclosed to you.

1.2 Information Collected Automatically

• Device and log data: IP address, browser type, operating system, referring URLs, pages viewed, timestamps, and crash diagnostics.
• Cookies and similar technologies: session cookies for authentication, preference cookies for language, and analytics cookies to understand aggregate usage. You may adjust browser settings to limit cookies; some features may not function without essential cookies.
• Approximate location: derived from IP address for fraud prevention and content localization—not precise GPS unless you grant permission in a mobile app.

1.3 Information from Third Parties

We may receive information from insurance eligibility services, laboratory and imaging partners, referring physicians, public health registries where legally authorized, and identity verification providers for portal security.

2. How We Use Information

We use personal information for legitimate purposes including:

• Delivering, coordinating, and improving medical care and wellness programs
• Scheduling visits, sending reminders, and facilitating telehealth sessions
• Processing payments, verifying coverage, and providing cost estimates
• Operating and securing websites, portals, and internal systems
• Conducting quality improvement, patient safety reviews, and accredited reporting
• Complying with legal obligations, court orders, and public health directives
• Sending educational content and newsletters where you have opted in
• De-identifying data for research and analytics that advance population health

We do not sell personal information to data brokers for their independent marketing purposes.

3. Legal Bases for Processing

Depending on context, we rely on: (a) performance of a contract (membership or care agreement); (b) legitimate interests such as security and service improvement balanced against your rights; (c) compliance with legal duties; (d) vital interests in emergencies; and (e) your consent for optional marketing or certain research participation, which you may withdraw without affecting necessary care.

4. How We Share Information

We share information only as needed for the purposes above:

• Care team and affiliates: physicians, nurses, pharmacists, and care navigators involved in your treatment.
• Business associates: vendors under contractual safeguards for hosting, billing, transcription, telehealth platforms, and email delivery.
• Payors and administrators: insurance plans for claims, prior authorization, and fraud detection.
• Laboratory and imaging partners: to perform ordered tests and return results to your chart.
• Regulators and legal process: when required by law or to protect rights, safety, and property.
• Corporate transactions: in merger, acquisition, or asset sale scenarios with notice where mandated.

De-identified or aggregated data may be shared for research and benchmarking without identifying individuals.

5. International Transfers

If data is processed in countries other than where you reside, we implement appropriate safeguards such as standard contractual clauses and vendor security assessments to protect information consistent with this Policy.

6. Data Retention

We retain information as long as necessary to provide Services, meet legal and medical record retention requirements, resolve disputes, and enforce agreements. Clinical records are typically retained for the period required by applicable healthcare laws, after which they are securely destroyed or archived according to policy.

7. Security Measures

We employ administrative, technical, and physical safeguards including encryption in transit, role-based access controls, workforce training, vulnerability management, and incident response procedures. No method of transmission or storage is completely secure; please use strong passwords and protect your devices.

In the event of a breach affecting your information, we will notify you and regulators as required by law.

8. Your Choices and Rights

Subject to applicable law, you may:

• Access and obtain copies of certain personal information
• Request correction of inaccurate data
• Request deletion of non-clinical marketing data
• Restrict or object to certain processing
• Withdraw marketing consent via Unsubscribe or portal settings
• Receive portable exports of data you provided where technically feasible

Clinical record amendments follow healthcare regulations and may require provider review. To exercise rights, contact care@usalisveris.com with sufficient detail for verification. We respond within timelines prescribed by law.

9. Children's Privacy

Our public website is not directed to children under thirteen for independent account creation. Pediatric care is managed through parent or guardian accounts with appropriate consent. If you believe we collected information from a child improperly, contact us for prompt review and deletion where applicable.

10. Marketing and Newsletter Communications

When you subscribe to emails, we store your address, subscription timestamp, and consent source. Each message includes an unsubscribe mechanism. Transactional messages about appointments, billing, or clinical results may still be sent as part of your care relationship even if you opt out of marketing.

11. Automated Decision-Making

We do not use solely automated decisions with legal or similarly significant effects without human review, except where permitted for low-risk fraud screening or appointment routing suggestions that clinicians may override.

12. Third-Party Analytics and Social Features

Analytics providers help us understand aggregated traffic patterns. Social sharing buttons may transmit limited data to platforms when clicked. Review third-party policies before interacting with embedded widgets.

13. Changes to This Policy

We update this Policy when practices or laws change. Revisions appear on this page with an updated date. Material changes may be highlighted on the website or communicated through the portal.

14. Contact Us

Privacy questions or requests: care@usalisveris.com or the Contact Us form. For newsletter preferences, use Subscribe or Unsubscribe pages.