Orlo

Privacy Policy

This Notice describes how your medical and personal information may be used and disclosed and how you can get access to this information. Please review it carefully.

Last updated: June 13th, 2026

Information We Collect

Personal Information

Information that can identify you, such as name, email address, postal address, telephone number, date of birth, payment information, and government-issued identification.

Protected Health Information (PHI)

Health information created or received by a healthcare provider, health plan, or healthcare clearinghouse that relates to your past, present, or future physical or mental health or condition, healthcare provision, or payment for healthcare services.

Usage Information

Information about your interaction with our Services, including browser type, IP address, pages visited, time spent on pages, links clicked, and conversion information.

How We Use Your Information

For Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services. This includes sharing information with your physicians, specialists, pharmacies, and other healthcare providers involved in your care.

For Payment

We may use and disclose your information to bill and receive payment for services provided. This may include disclosures to health insurers or other entities responsible for billing and collection.

For Healthcare Operations

We may use and disclose your information for operational activities such as quality assessment, performance evaluation, training, and business management.

Other Permitted Uses

  • Appointment reminders and follow-up communications
  • Health-related benefits and services
  • Research (with proper authorization)
  • Legal requirements and public health activities
  • To prevent a serious threat to health or safety
  • For specialized government functions
  • Workers' compensation cases
  • Business associates who perform functions on our behalf

Your Health Information Rights

Under HIPAA and applicable state laws, you have the following rights regarding your protected health information:

Right to Access and Receive a Copy of Your Records

You have the right to inspect and obtain a copy of your healthcare records maintained by us, with limited exceptions. You must submit a written request to our Privacy Officer. We may charge a reasonable, cost-based fee for copies.

Right to Request an Amendment

If you believe information in your records is incorrect or incomplete, you have the right to request that we amend the records. Your request must be in writing and include a reason supporting the amendment.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your health information during the six years prior to your request.

Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your health information. We are not required to agree to all restriction requests but must comply with requests to restrict disclosure to a health plan for payment or healthcare operations purposes when you have paid in full out-of-pocket for the item or service.

Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location (e.g., only by mail or at a specific address).

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice of Privacy Practices upon request.

Right to Notification of a Breach

You have the right to be notified if your unsecured protected health information has been accessed, acquired, used, or disclosed in a manner not permitted under HIPAA that compromises the security or privacy of your PHI.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

Exercising Your Rights

To exercise any of the rights described above, please submit your request through the contact form on our website. Our Privacy Officer will review and respond to your request.

State-Specific Privacy Rights

In addition to HIPAA rights, certain state residents may have additional privacy rights under state law:

California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights, including:

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising these rights
  • Right to correct inaccurate personal information
  • Right to limit use and disclosure of sensitive personal information

Other States

Residents of Virginia, Colorado, Connecticut, and Utah may have similar rights under their respective state privacy laws. Please contact our Privacy Officer for specific details.

Information Security

We maintain physical, technical, and administrative safeguards to protect your information, including:

  • Encryption of electronic protected health information
  • Secure user authentication protocols
  • Access control measures
  • Regular security assessments
  • Staff training on privacy and security practices
  • Business Associate Agreements with third parties who access PHI

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the revised policy on our Services with the effective date and notify you of significant changes as required by law.

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint by:

  • Submitting the contact form on our website and selecting "Privacy Complaint."
  • Filing a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at: hhs.gov/ocr.