Privacy Policy

Crescent Health ("we," "our," or "us") is committed to protecting the privacy and security of your personal and protected health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our telehealth services.

We comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), applicable state laws of Georgia and Alabama, and applicable federal privacy regulations.

Personal Identification Information: Full name, date of birth, address, email address, and phone number.

Protected Health Information (PHI): Medical history, current symptoms, medications, allergies, diagnoses, treatment plans, and other clinical information you share during your visit.

Payment Information: Credit/debit card details processed securely through our payment processor. We do not store full card numbers.

Technical Information: IP address, browser type, device type, and pages visited — collected automatically for website functionality and security.

We use your information to:

• Provide, coordinate, and manage your telehealth care
• Process payments and send receipts
• Send appointment confirmations, intake forms, and follow-up communications
• Comply with legal and regulatory obligations under HIPAA and state law
• Improve our website and service quality
• Respond to your questions and support requests

We do not sell, rent, or trade your personal or health information to any third party for marketing purposes.

We may share your information only in the following limited circumstances:

• Treatment: With licensed providers involved in your care
• Payment: With payment processors to complete transactions
• Legal Compliance: As required by law, court order, or government authority
• Business Associates: With HIPAA-compliant vendors (e.g., video platform, scheduling) under signed Business Associate Agreements
• With Your Consent: For any other purpose with your explicit written authorization

As a covered healthcare provider, we are required to maintain the privacy of your Protected Health Information (PHI) and to provide you with a notice of our legal duties and privacy practices. Our complete Notice of Privacy Practices is posted on this website and is also available upon request by emailing admin@crescent-telemed.com.

We implement industry-standard administrative, technical, and physical safeguards to protect your information, including encrypted data transmission (TLS/SSL), secure telehealth platforms (Doxy.me), and access controls limited to authorized personnel.

No method of electronic transmission or storage is 100% secure. In the event of a breach affecting your PHI, we will notify you as required by HIPAA's Breach Notification Rule.

Under HIPAA, you have the right to:

• Access and obtain a copy of your medical records
• Request corrections to inaccurate or incomplete information
• Request restrictions on how we use or disclose your PHI
• Receive an accounting of disclosures of your PHI
• Receive communications in a confidential manner
• File a complaint without retaliation

To exercise any of these rights, email us at admin@crescent-telemed.com.

Our services are not directed to individuals under 18 without parental or guardian consent. We do not knowingly collect information from minors without appropriate authorization.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

For questions, concerns, or to exercise your rights:

Crescent Health
Email: admin@crescent-telemed.com

To file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights: hhs.gov/ocr/complaints