PRIVACY POLICY
Bridge Health Clinic
Effective Date: May 1, 2026 | Last Updated: May 1, 2026
1. Introduction
Bridge Health Clinic (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal and health-related information. This Privacy Policy explains how we collect, use, disclose, and safeguard information obtained through our website, www.bridgehealthclinic.com (the “Site”), and any related services we provide.
By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms herein, please discontinue use of our Site immediately.
This Privacy Policy is intended to comply with applicable federal and state laws, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), the California Consumer Privacy Act (CCPA/CPRA) where applicable, and other relevant privacy regulations.
2. Information We Collect
2.1 Personal Information You Provide
We may collect the following categories of personal information that you voluntarily provide to us through our Site, intake forms, or direct communications:
-
Full name, date of birth, and contact information (address, phone number, email address)
-
Health history, medical conditions, dietary information, and wellness goals
-
Membership plan details and billing preferences
-
Payment information (processed securely through third-party payment processors)
-
Communications sent to us via email, contact forms, or phone
2.2 Information Collected Automatically
When you visit our Site, certain information is automatically collected by our web servers and third-party analytics tools, including:
-
IP address, browser type, and operating system
-
Pages visited, time spent on pages, and referring URLs
-
Device identifiers and geographic location (general)
-
Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Information
We use the information we collect for the following purposes:
-
To provide, schedule, and manage healthcare and nutrition services
-
To communicate with you regarding appointments, treatment plans, and follow-up care
-
To process membership payments and manage your Direct Primary Care subscription
-
To comply with legal obligations, including HIPAA requirements
-
To improve our website, services, and patient experience
-
To send administrative communications, appointment reminders, or health newsletters (with your consent)
-
To respond to inquiries, complaints, or requests
4. HIPAA – Protected Health Information
As a Direct Primary Care (DPC) practice, Bridge Health Clinic operates on a membership-based model and does not bill insurance companies. We do not submit claims to or share your health information with insurance carriers. Any Protected Health Information (PHI) we collect is governed by our Notice of Privacy Practices (NPP), which is provided to patients separately and is available upon request.
Despite not billing insurance, Bridge Health Clinic remains subject to HIPAA as a covered healthcare provider. PHI is used and disclosed only as permitted or required by HIPAA, which includes treatment and healthcare operations. We maintain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of all PHI in our possession.
You have the following rights regarding your PHI under HIPAA:
-
Right to access and receive a copy of your health records
-
Right to request corrections or amendments to your records
-
Right to an accounting of disclosures of your PHI
-
Right to request restrictions on certain uses and disclosures
-
Right to request confidential communications
-
Right to file a complaint with the U.S. Department of Health and Human Services (HHS)
5. Disclosure of Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:
-
With healthcare providers and specialists involved in your care, as permitted by HIPAA
-
With Business Associates (as defined by HIPAA) who assist us in operating our practice, under executed Business Associate Agreements
-
With payment processors who handle membership fee transactions, under confidentiality agreements
-
As required by law, court order, subpoena, or government regulation
-
In connection with a merger, acquisition, or sale of assets, with notice provided to affected individuals
-
With your explicit written consent for any other purpose
6. Data Retention
We retain personal information and health records for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory requirements, and resolve any disputes. Medical records are retained in accordance with applicable state and federal law, which generally requires retention for a minimum of seven (7) years from the date of last service, or longer for minors.
7. Cookies and Tracking Technologies
Our Site may use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze Site traffic, and understand how visitors interact with our content. Cookies are small data files stored on your device.
You may control the use of cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features on our Site. We do not use cookies to collect PHI or sensitive health information.
8. Third-Party Links
Our Site may contain links to third-party websites, resources, or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
9. Data Security
We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include secure server environments, access controls, and staff training on privacy practices.
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your PHI, we will notify you as required by HIPAA and applicable law.
10. Children’s Privacy
Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us immediately and we will take prompt steps to delete it.
11. Your Privacy Rights
Depending on your state of residence, you may have additional privacy rights beyond those provided by HIPAA, including:
-
The right to know what personal information we collect, use, or disclose
-
The right to request deletion of your personal information (subject to legal exceptions)
-
The right to opt out of the sale of personal information (we do not sell your information)
-
The right to non-discrimination for exercising your privacy rights
To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to verified requests within the timeframe required by applicable law.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective upon posting the revised policy to our Site with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically. Your continued use of our Site following any changes constitutes your acceptance of the revised policy.
For material changes affecting how we use your PHI, we will provide notice as required by HIPAA, which may include direct notification to affected patients.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Bridge Health Clinic
Website: www.bridgehealthclinic.com
Email: office@bridgehealthclinic.com
Phone: (970) 667-3154
Mailing Address: 2026 Blue Mesa Ct., Loveland CO 80538