Privacy Policy

Epstein Medicine Management

Effective Date: August 29, 2026

Epstein Medicine Management (“Epstein Medicine Management,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and with whom it may be shared when you interact with Epstein Medicine Management, including through our website, online forms, electronic communications, and healthcare services.

This Privacy Policy applies to information collected through our website and related electronic services. It does not replace our HIPAA Notice of Privacy Practices, which provides additional information about how protected health information may be used and disclosed.

1. Personal Information We Collect

Depending on how you interact with Epstein Medicine Management, we may collect:

Name and contact information, including telephone number, email address, and mailing address
Date of birth and other information used to identify you
Information submitted through appointment requests, contact forms, and other online forms
Health, medical, and treatment information provided to us
Insurance and billing information
Information contained in communications with our office
Information provided through secure document or file uploads
Information necessary to provide, coordinate, and manage healthcare services
Technical information collected when you use our website, such as IP address, browser type, device information, and pages visited

We collect information that is reasonably necessary to provide our services, communicate with you, operate our website and business, and comply with applicable legal requirements.

2. How We Use Personal Information

We may use personal information to:

Respond to inquiries and requests
Schedule and manage appointments
Provide, coordinate, and manage healthcare services
Communicate with patients regarding appointments, treatment, medications, and other matters related to care
Send administrative notifications and reminders
Process payments, billing, and insurance claims
Maintain medical and business records
Provide customer and technical support
Operate, maintain, and improve our website and services
Protect the security of our website, systems, patients, and staff
Comply with applicable laws, regulations, and legal processes

Protected health information is used and disclosed in accordance with applicable HIPAA requirements and our Notice of Privacy Practices.

3. SMS and Text Messaging

If you provide your telephone number and separately consent to receive SMS or text messages from Epstein Medicine Management, we may use your number to send messages related to your appointments, healthcare services, administrative matters, and other communications for which you have provided consent.

SMS consent is not shared with third parties or affiliates for marketing or promotional purposes. SMS consent is not shared with third parties.

Your consent to receive SMS messages is not a condition of receiving medical care.

Message and data rates may apply. Message frequency may vary.

You may opt out of SMS communications at any time by replying STOP to a text message. You may also contact our office directly to request that SMS communications be discontinued.

4. Who We Share Personal Information With

We may share personal information when reasonably necessary to provide services, operate our business, or comply with the law.

Depending on the circumstances, information may be shared with:

Healthcare providers involved in your care
Pharmacies and other healthcare professionals involved in treatment
Insurance companies and other payers
Billing and payment-processing providers
Electronic health record and practice-management systems
Appointment scheduling and communication service providers
Information technology, website hosting, and security providers
Document-management or secure file-transfer providers
Other service providers that perform business functions on our behalf
Government agencies, courts, law enforcement, or other parties when disclosure is required or permitted by law

Where a third party handles protected health information on our behalf and HIPAA requires a business associate agreement, we will maintain appropriate contractual safeguards.

We do not sell your personal information or protected health information.

We do not share SMS consent with third parties or affiliates for their own marketing purposes.

5. Protected Health Information

Information concerning your health, treatment, or medical care may constitute protected health information (“PHI”) under HIPAA.

We use and disclose PHI as permitted or required by applicable law, including for treatment, payment, healthcare operations, and other purposes permitted by HIPAA.

For more information about your rights and how we use and disclose PHI, please review our Notice of Privacy Practices.

6. Website and Online Forms

Information submitted through our website, including contact forms, appointment requests, SMS consent forms, and document-upload forms, may be retained by Epstein Medicine Management.

Please do not use website forms, email, or SMS for medical emergencies or urgent medical concerns. If you are experiencing an emergency, call 911 or seek immediate medical attention.

Messages and submissions may not be reviewed immediately. Sending a message or submitting a form does not guarantee an immediate response.

Privacy Policy Access

A link to this Privacy Policy should be provided:

Directly adjacent to or immediately near any web-form consent language
Near any SMS/text-message consent language
In the footer of every page of the Epstein Medicine Management website

By submitting information through a web form, you acknowledge that you have had an opportunity to review this Privacy Policy.

7. Cookies and Website Technologies

Our website may use cookies, analytics, and similar technologies to operate the website, maintain security, understand website usage, and improve our services.

These technologies may collect information such as your IP address, browser type, device information, pages visited, referring website, and general website activity.

Third-party services used on our website may have their own privacy policies governing their collection and use of information.

8. Information Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information and protected health information from unauthorized access, use, alteration, or disclosure.

However, no website, electronic communication system, or Internet transmission can be guaranteed to be completely secure.

9. Your Privacy Rights

Depending on the information involved and applicable law, you may have rights to:

Request access to certain information we maintain about you
Request correction of certain information
Request restrictions on certain uses or disclosures
Request confidential communications
Request an accounting of certain disclosures
Obtain a copy of our Notice of Privacy Practices
Withdraw consent to certain communications, including SMS messages

Additional rights relating to protected health information are described in our Notice of Privacy Practices.

10. Children's Privacy

Our website is not intended to knowingly collect personal information from children for purposes unrelated to healthcare or services requested by a parent, guardian, or authorized individual.

Information relating to minors receiving healthcare services will be handled in accordance with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or legal requirements.

The most current version will be posted on our website and will include the effective date.

12. Contact Us