Website Privacy Policy
Thank you for visiting our website. Jeppson Dental is committed to respecting your online privacy and protecting the confidentiality of your health information. The following privacy policy sets forth how we use personal information collected at this site. Please read the entire privacy policy before using the site or submitting any of your personal information. When you use the site, you are accepting the practices described in this policy. The privacy practices may be changed in the future. Any changes will be posted and changes will only apply to activities and information in the future, not retroactively. Please review the privacy policy every time you visit our site to understand how personal information you provide will be used.
Collected Information
We collect personal information such as names, phone numbers, email addresses, appointment requests, and other information voluntarily submitted by our visitors. The information you provide is only used to fulfill your particular request unless you give us permission to use it in another manner.
If you submit health-related information through our website, that information may be considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and will be treated in accordance with applicable federal and state privacy laws.
HIPAA & 42 CFR Part 2 Compliance
Jeppson Dental complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), including the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.
We implement appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of Protected Health Information (PHI).
42 CFR Part 2
To the extent we create, receive, maintain, or transmit records relating to Substance Use Disorder (SUD) diagnosis, treatment, or referral, such records may be protected under 42 CFR Part 2, as amended by the 2024 federal updates aligning certain provisions with HIPAA.
Under 42 CFR Part 2:
- Substance Use Disorder patient records are afforded heightened confidentiality protections.
- Such records generally may not be disclosed without the patient’s written consent, except as permitted or required by law.
- Patients have the right to a single consent for treatment, payment, and healthcare operations consistent with updated federal regulations.
- Redisclosure of Part 2-protected records is prohibited unless expressly permitted by law.
We will not use or disclose Part 2-protected information for civil, criminal, administrative, or legislative proceedings against a patient without appropriate legal authorization as required by federal law.
Patient Rights
Under HIPAA and applicable federal regulations, patients have the right to:
- Access and obtain a copy of their protected health information
- Request amendments to their health information
- Receive an accounting of certain disclosures
- Request restrictions on certain uses and disclosures
- Request confidential communications
- Receive notice of a breach of unsecured PHI when required by law
Requests regarding health information should be submitted in writing using the contact information listed below.
Shared Information
We may share information with government agencies or other entities when permitted or required by law, including public health reporting obligations.
We may also use third-party service providers (Business Associates) to perform certain services for us, such as:
- Maintaining our website
- Email and communication services
- Practice management systems
- Processing inquiries
When these services involve access to Protected Health Information, we enter into Business Associate Agreements as required by HIPAA to ensure appropriate safeguards are in place.
We will not sell or share your personal information or protected health information with unaffiliated third parties for marketing purposes without your explicit authorization.
Breach Notification
In the event of a breach of unsecured Protected Health Information, we will provide notification as required by HIPAA and applicable federal and state law.
If the breach involves information protected under 42 CFR Part 2, we will comply with all additional confidentiality and notification requirements applicable under federal law.
Collective Data
Occasionally, we may collect statistical and non-personal information about the use of the site. This information may include how many visitors visit a specific page on the site, how long they stay there, and which hyperlinks they visit.
This information is used to improve our website and services. This collective data does not personally identify you.
Links to Other Sites
While visiting our site, it is possible that you could be directed (via hyperlink or other means) to other sites that are outside of our control. These other websites may send their own cookies to visitors, collect data, or solicit your personal information.
It is important that you read the privacy policies of these other sites before using them. We are not responsible for the privacy practices of other websites and cannot guarantee the security of any personal information collected on those sites.
Security
We use reasonable and appropriate safeguards consistent with HIPAA Security Rule requirements to protect information transmitted through our website. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Contact Us
We reserve the right to make changes to this Privacy Policy. Any changes will be posted here.
If you have any questions or concerns about our Privacy Policy, wish to exercise your privacy rights, or need to submit a request related to your health information, please contact us at:
86 N. University Ave.
Suite 280
Provo, UT 84601
801-356-7701