Privacy Policy
Summit Spine and Wellness PLLC, doing business as Summit Spine & Wellness ("Summit," "we," "us," or "our"), respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how we may collect, use, disclose, and protect information when you visit our website, contact our office, use online scheduling or patient communication tools, submit information through website forms, or otherwise interact with our online services.
This Privacy Policy applies primarily to information collected through the Summit Spine & Wellness website and related online services.
Medical information and other protected health information created, received, maintained, or transmitted in connection with your healthcare may be subject to additional protections under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and other applicable laws.
Our Notice of Privacy Practices, when applicable, explains how protected health information may be used and disclosed in connection with healthcare services. If this Privacy Policy and our Notice of Privacy Practices address the same protected health information differently, the requirements applicable to protected health information will control.
Information We May Collect
The information we collect depends on how you interact with Summit Spine & Wellness.
Information You Provide to Us
You may voluntarily provide information such as:
- Name
- Email address
- Telephone number
- Mailing address
- Appointment information
- Questions or messages submitted through the website
- Insurance-related information
- Information provided when requesting or scheduling an appointment
- Patient intake information
- Payment-related information
- Communication preferences
- SMS or text-message consent choices
- Other information you choose to provide
Please avoid sending detailed medical information, insurance identification numbers, patient records, or other sensitive health information through ordinary email or general website contact forms unless specifically instructed to do so through an appropriate secure process.
Appointment, Patient Intake & Health Information
Summit uses ChiroTouch as its electronic health record, appointment scheduling, patient intake, and patient communication platform.
Information submitted through ChiroTouch or other designated patient systems may include:
- Contact information
- Appointment requests
- Insurance information
- Health history
- Patient intake information
- Clinical or treatment-related information
- Communication preferences
- Other information needed to coordinate care
Information collected in connection with healthcare may qualify as protected health information and may be subject to HIPAA and other healthcare privacy requirements.
How We Use Information
We may use information collected through our website and related services for purposes including:
- Responding to questions or inquiries
- Scheduling and managing appointments
- Sending appointment reminders and scheduling updates
- Supporting patient intake
- Communicating about requested services
- Verifying insurance benefits when requested and appropriate
- Providing customer service
- Processing payments
- Operating and improving our website
- Understanding general website usage
- Maintaining website security
- Preventing fraud or misuse
- Maintaining appropriate business and clinical records
- Complying with legal and regulatory obligations
- Communicating administrative or operational information
- Providing information about Summit services when permitted by law
When information is collected in connection with patient care, its use and disclosure may also be governed by Summit's Notice of Privacy Practices and applicable healthcare privacy laws.
SMS & Text Messaging
Summit Spine & Wellness uses ChiroTouch to communicate with patients via text message regarding appointment reminders, scheduling updates, and other patient-related communications.
Patients may opt out of nonessential text messages by contacting our office or replying STOP where supported. Message and data rates may apply.
We do not sell or share mobile phone numbers or SMS consent information with third parties for their own marketing purposes. Information may be shared with service providers as necessary to deliver authorized communications.
Standard text messaging may not be fully secure, and we take reasonable precautions to protect patient information.
Text-message frequency may vary depending on the type of communication and your interaction with Summit.
Where HELP functionality is supported, patients may reply HELP for assistance or contact Summit Spine & Wellness directly at (682) 223-1308.
Opting out of promotional or other nonessential text messages does not prevent you from contacting our office directly or receiving care from Summit Spine & Wellness.
Promotional Text Messages
Summit may offer patients or website visitors the opportunity to separately consent to promotional text messages regarding special offers, wellness services, events, or practice updates.
Promotional text-message consent is voluntary and is not required as a condition of receiving treatment or purchasing services.
Where promotional SMS consent is requested through the website, it should be presented as a separate, unchecked opt-in choice rather than being combined automatically with ordinary contact or appointment communications.
Recipients may withdraw consent to promotional text messages using the opt-out method provided in the message, including replying STOP where supported.
FCC rules generally require appropriate consent for advertising or telemarketing robotexts and recognize a recipient's right to revoke consent.
ChiroTouch & Other Service Providers
Summit Spine & Wellness uses ChiroTouch as its electronic health record, appointment scheduling, and patient communication platform.
We work with third-party service providers to support our operations, including:
- Electronic health record services
- Appointment scheduling
- Patient intake
- Patient communications
- Billing
- Payment processing
- Insurance verification
- Website hosting
- Information technology
- Data storage
- Security
- Website analytics
- Professional services
Where required by HIPAA, we enter into Business Associate Agreements with vendors that handle protected health information on our behalf.
HHS requires covered entities to have appropriate business-associate arrangements when vendors create, receive, maintain, or transmit PHI on their behalf.
Service providers may receive information only as necessary to perform authorized services for Summit and subject to applicable contractual, privacy, security, and legal requirements.
Healthcare & Insurance Activities
Information related to healthcare may be used or disclosed when permitted or required for purposes including:
- Treatment
- Payment
- Healthcare operations
- Insurance claims
- Benefit verification
- Care coordination
- Referrals
- Other purposes permitted by applicable healthcare privacy laws
Additional information about uses and disclosures of protected health information is provided in Summit's Notice of Privacy Practices.
Legal Requirements
We may disclose information when reasonably necessary to:
- Comply with applicable law
- Respond to valid legal process
- Comply with court orders
- Respond to governmental or regulatory requests
- Protect our legal rights
- Protect the safety of patients, staff, or others
- Investigate fraud, security incidents, or misuse of our services
We Do Not Sell Patient Information
Summit Spine & Wellness does not sell protected health information.
We also do not sell mobile telephone numbers or SMS consent information to third parties for their own marketing purposes.
Information collected through patient intake, scheduling, medical records, or clinical care should not be treated as ordinary advertising data.
We do not intend to disclose protected health information to advertising platforms for unrelated targeted advertising unless the disclosure is permitted by applicable law and any legally required authorization has been obtained.
Analytics & Tracking Technologies
Summit may use website analytics tools to understand general website usage and performance.
Depending on the tools actually installed, analytics information may include:
- Number of website visitors
- Pages visited
- Traffic sources
- General device information
- Approximate location information
- Website interactions
- Conversion events such as phone-button or scheduling-button clicks
Summit does not intend for patient health information, insurance information, appointment details, patient intake information, or other protected health information to be transmitted to ordinary advertising or analytics platforms.
Tracking technologies should not be placed on authenticated patient portals, ChiroTouch patient-intake systems, or other areas containing protected health information unless their use complies with applicable HIPAA requirements.
HHS advises covered entities that tracking technology vendors can become business associates when they receive PHI on behalf of the provider and that regulated entities must not use tracking technologies in ways that impermissibly disclose PHI.
Analytics Tools Currently Used
Any analytics or advertising technology used by Summit should be configured to avoid collecting information entered into:
- Patient-intake forms
- Appointment details
- Insurance forms
- Health-history forms
- Patient portals
- Clinical systems
- Fields that may contain symptoms, diagnoses, treatment information, or other sensitive health information
Online Scheduling & ChiroTouch
Our website links to or integrates with ChiroTouch for appointment scheduling, patient intake, electronic health records, and patient communications.
When you use ChiroTouch, information may be transmitted directly to or processed by ChiroTouch on Summit's behalf.
Information processed through ChiroTouch may be subject to:
- Summit's Notice of Privacy Practices
- HIPAA
- ChiroTouch's contractual obligations
- Applicable privacy and security laws
We use designated patient systems rather than ordinary website forms whenever possible for information that may contain protected health information.
Payment Information
When you make a payment, payment information may be processed by Summit or an authorized third-party payment processor.
Depending on the payment method, information may include:
- Cardholder name
- Billing information
- Payment-card information
- HSA or FSA payment information
- Transaction details
Summit does not necessarily store complete payment-card information through its public website.
Payment processors may collect and process information subject to their own security, privacy, and compliance requirements.
Email, Phone & Electronic Communications
If you contact Summit by email, telephone, website form, text message, or another electronic method, we may use the contact information you provide to respond and communicate with you.
Ordinary email and standard text messaging may not always provide the same level of privacy or security as systems specifically designed for protected healthcare information.
Please avoid sending detailed medical information, insurance documents, medical records, diagnoses, or other sensitive health information through regular email or general website forms.
Insurance verification and patient intake information should generally be submitted through Summit's designated ChiroTouch process.
Data Security
Summit uses reasonable administrative, technical, and physical safeguards intended to protect personal information.
These safeguards are designed to reduce the risk of:
- Unauthorized access
- Improper disclosure
- Loss
- Misuse
- Alteration
- Destruction
No website, computer system, internet transmission, email system, text-message system, or electronic storage system can be guaranteed to be completely secure.
If we become aware of a security incident involving information for which notification is legally required, we will provide notification as required by applicable law.
How Long We Keep Information
We may retain personal information for as long as reasonably necessary to:
- Provide requested services
- Maintain appropriate business records
- Complete transactions
- Respond to inquiries
- Comply with legal obligations
- Resolve disputes
- Maintain security
- Enforce agreements
- Satisfy healthcare record-retention requirements when applicable
Medical records and protected health information may be subject to retention requirements that differ from ordinary website information.
Your Privacy Choices & Rights
Depending on the information involved and applicable law, you may have rights relating to your personal information.
These may include the ability to request:
- Information about personal data we maintain
- Access to certain information
- Correction of inaccurate information
- Deletion of certain information where permitted
- Restrictions on certain uses or disclosures
- A copy of certain information
- Changes to communication preferences
- Changes to SMS or marketing preferences
Some requests may be limited by healthcare record-retention requirements, insurance requirements, legal obligations, security requirements, existing claims or transactions, or other exceptions permitted by law.
Requests involving protected health information may be governed by HIPAA and Summit's Notice of Privacy Practices.
For general website privacy questions, contact:
Please do not include unnecessary medical details in an ordinary email.
Protected Health Information & HIPAA
Information related to your healthcare may qualify as Protected Health Information ("PHI").
When HIPAA applies, you may have rights related to:
- Accessing your records
- Requesting corrections
- Requesting confidential communications
- Requesting certain restrictions
- Receiving information about certain disclosures
- Obtaining a copy of the applicable Notice of Privacy Practices
- Filing a privacy complaint
These rights are addressed more fully in Summit Spine & Wellness's Notice of Privacy Practices.
This website Privacy Policy is not a substitute for that Notice.
Children's Privacy
Summit provides healthcare services for children, but this website is intended primarily for use by adults, including parents and legal guardians seeking information or care for minors.
We do not knowingly seek to collect personal information directly from children under 13 through general website marketing features without appropriate parental or guardian involvement.
Parents or legal guardians should complete appointment requests, intake forms, and other healthcare documentation for minors as appropriate.
Health information concerning pediatric patients is handled according to applicable healthcare privacy requirements.
Third-Party Websites
The Summit website may contain links to services operated by third parties, including:
- ChiroTouch
- Maps and directions
- Payment processors
- Insurance resources
- Social-media platforms
- External healthcare resources
Summit does not control every third-party website or service.
When you leave our website or use an externally operated service, that provider's privacy practices and terms may apply in addition to any obligations it has to Summit.
Changes to This Privacy Policy
Summit Spine & Wellness may update this Privacy Policy periodically.
Changes may be made to reflect:
- Changes to our website
- New services or technologies
- Changes in business practices
- Changes in privacy or healthcare laws
- Changes in third-party providers
- New communication methods
- Security or compliance updates
When this Privacy Policy is materially updated, the revised version will be posted on this page with an updated Last Updated date.
Contact Summit Spine & Wellness
If you have questions about this Privacy Policy or Summit's general website privacy practices, contact:
Summit Spine & Wellness
Summit Spine and Wellness PLLC
6416 Colleyville Blvd., Unit 108
Colleyville, TX 76034
Phone: (682) 223-1308
Email: info@summitspinewellness.com
Please do not send detailed medical information through ordinary email.
For questions involving medical records, protected health information, or HIPAA privacy rights, contact Summit directly so the team can direct you to the appropriate privacy process.