Privacy & HIPAA
Our Commitment to Privacy
Kintsu Health is a physician-led precision health practice. Protecting your personal information — and your health information in particular — is fundamental to how we operate.
Privacy is integral to clinical trust. We treat your information with the same care and discretion as your health.
This Privacy & HIPAA Notice explains how we collect, use, disclose, and safeguard information in the course of providing clinical care and operating our practice.
Information We Collect
We collect information necessary to deliver thoughtful, medically appropriate care. This may include:
- Personal identifiers (such as name and contact details)
- Health history and clinical information
- Diagnostic and laboratory data
- Information shared during consultations
- Communications with our clinical team
- Limited, non-identifying technical data related to website usage
We collect only what is required to provide care responsibly and maintain continuity.
How We Use Information
Information is used solely for purposes consistent with clinical care and practice operations, including:
We do not sell personal or health information.
HIPAA Notice of Privacy Practices
As a healthcare provider, Kintsu Health complies with the Health Insurance Portability and Accountability Act (HIPAA).
Under HIPAA, your Protected Health Information (PHI) may be used or disclosed for:
- Treatment
- Payment
- Healthcare operations
PHI may also be disclosed when required by law or when necessary to protect patient safety.
Your Rights Under HIPAA
You have the right to:
- 1. Access your health records
- 2. Request corrections to your records
- 3. Receive an accounting of disclosures
- 4. Request restrictions on certain uses or disclosures
- 5. Request confidential communications
- 6. File a complaint if you believe your privacy rights have been violated
You will not be penalized for exercising these rights.
Data Security
We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, alteration, or disclosure.
Access to clinical information is limited to authorized personnel involved in care delivery and operations.
No system is infallible. We take reasonable and appropriate measures to protect information entrusted to us.
Third Parties
We may work with trusted service providers — such as diagnostic laboratories or secure technology platforms — strictly as necessary to deliver care or operate our practice.
These parties are contractually obligated to protect information in compliance with applicable privacy laws.
Website & Digital Use
Our website may collect limited technical information to ensure functionality and performance.
We do not use invasive tracking, behavioral advertising, or unrelated data profiling.
Use of this website does not establish a physician–patient relationship.
Changes to This Notice
This notice may be updated periodically to reflect changes in law or practice operations. Updates will be posted on this page with the revised effective date.
Contact
For questions about privacy practices or to exercise your rights: