PRIVACY POLICY

Blue North Medical

Effective Date: 10/23/2026

Website: https://bluenorthmedical.com/

IMPORTANT PRIVACY NOTICE

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW BLUE NORTH MEDICAL COLLECTS, USES, SHARES, MAINTAINS, AND PROTECTS PERSONAL INFORMATION IN CONNECTION WITH OUR WEBSITE AND SERVICES.

BLUE NORTH MEDICAL RECOGNIZES THE SENSITIVE NATURE OF PERSONAL AND HEALTH-RELATED INFORMATION AND THE IMPORTANCE OF MAINTAINING PATIENT PRIVACY AND CONFIDENTIALITY.

THIS PRIVACY POLICY DESCRIBES OUR GENERAL INFORMATION PRACTICES. PROTECTED HEALTH INFORMATION SUBJECT TO THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996 (“HIPAA”) IS ALSO GOVERNED BY APPLICABLE FEDERAL AND STATE LAWS AND THE NOTICE OF PRIVACY PRACTICES OF THE RESPONSIBLE COVERED ENTITY, WHERE APPLICABLE.

THIS PRIVACY POLICY DOES NOT REPLACE A LEGALLY REQUIRED HIPAA NOTICE OF PRIVACY PRACTICES OR ANY SEPARATE AUTHORIZATION REQUIRED FOR THE USE OR DISCLOSURE OF PROTECTED HEALTH INFORMATION.

IF YOU ARE EXPERIENCING A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY.

1. Introduction

Welcome to Blue North Medical (“Blue North Medical,” “we,” “us,” or “our”).

This Privacy Policy explains the practices associated with personal information collected through our website located at https://bluenorthmedical.com/ (the “Website”) and through related digital interactions, patient intake procedures, telehealth coordination, customer support, and other services offered under the Blue North Medical brand (collectively, the “Services”).

The Website and Services are operated by [Insert Full Registered Legal Entity Name] under the Blue North Medical brand.

Our Services are intended to facilitate access to personalized healthcare, telehealth consultations, clinical assessments, and medically supervised treatment options through authorized healthcare professionals.

We understand that individuals may provide sensitive information when seeking healthcare services. Our objective is to handle such information responsibly and transparently, consistent with applicable legal requirements.

This Privacy Policy applies to Website visitors, prospective patients, patients, and other individuals who interact with our Services, subject to the distinctions described below.

Some healthcare professionals, pharmacies, laboratories, and technology providers involved in delivering Services may operate under separate privacy notices or policies.

By using the Website, you acknowledge that this Privacy Policy describes the information practices associated with the Services.

Where consent or authorization is required by law, it will be obtained separately through an appropriate process.

2. Scope of This Privacy Policy

This Privacy Policy addresses personal information that Blue North Medical collects or processes through the Website and Services, including:

Information submitted through online contact and registration forms.
Information provided during patient onboarding and medical intake.
Information associated with telehealth consultations and clinical coordination.
Information submitted when requesting treatment or prescription services.
Information collected through customer support interactions.
Technical information generated through Website access and use.
Transaction and billing information associated with available services.
Communications exchanged through authorized digital channels.

The extent to which we collect and process information depends on the features and services an individual uses.

Certain medical information may be subject to additional protections under HIPAA, the Florida medical records confidentiality laws, or other applicable requirements.

Where a separate healthcare provider or covered entity maintains a patient’s protected health information (“PHI”), that entity’s applicable Notice of Privacy Practices governs its permitted uses and disclosures.

In the event of a conflict between this general Privacy Policy and applicable mandatory privacy requirements, the requirements of governing law will control.

3. Geographic Scope and Service Availability

Blue North Medical currently facilitates telehealth services for eligible patients physically located in the State of Florida.

Individuals visiting our Website from other geographic locations may access publicly available information, but Website access does not establish eligibility for medical consultations, treatment, or prescription services.

During patient onboarding, we may request information necessary to verify eligibility and determine whether Services may be provided in accordance with applicable laws.

Information used for verification may include:

State of residence.
Physical location at the time of consultation.
Billing or mailing address.
Information provided during patient registration.
Other eligibility information reasonably necessary to comply with legal and clinical requirements.

The collection and use of location information will be limited to appropriate purposes and subject to applicable privacy requirements.

4. Information We Collect

Blue North Medical may collect personal, medical, administrative, and technical information depending on your interactions with the Services.

4.1 Personal Identification Information

When you communicate with us, create an account, submit a request, or begin a patient intake process, information collected may include:

Full name.
Date of birth.
Email address.
Telephone number.
Residential or mailing address.
State of residence and service location.
Account identification information.
Preferred communication methods.
Other information necessary to identify or communicate with you.

Government-issued identification or additional identity verification information may be requested when required by applicable law or a specific service.

4.2 Medical and Health-Related Information

When you request healthcare services, you may be asked to provide health-related information necessary for clinical assessment and treatment eligibility.

This information may include:

Current and previous medical conditions.
Personal and family medical histories.
Current symptoms and health concerns.
Current or previously prescribed medications.
Medication allergies and adverse reactions.
Relevant medical diagnoses.
Laboratory test results.
Medical records or referrals.
Height, weight, and other clinically relevant measurements.
Lifestyle information relevant to the requested healthcare service.
Health goals and treatment preferences.
Prescription and treatment history.
Information related to follow-up care.
Other information requested by an authorized healthcare professional.

Certain information, including data concerning sexual health and other sensitive health conditions, may receive additional protection under applicable laws.

Medical information is collected and processed for appropriate clinical, administrative, and legal purposes.

Submission of medical information does not guarantee treatment eligibility or the issuance of a prescription.

4.3 Patient Registration and Intake Information

When you complete a clinical intake form or patient registration process, we may collect information concerning:

The healthcare service being requested.
Patient identity and eligibility.
Medical history and contraindications.
Consent to telehealth services.
Applicable privacy acknowledgments.
Required medical disclosures.
Communication preferences.
Emergency contact information, when appropriate.
Supporting documents relevant to a clinical evaluation.

Patient intake information may be transmitted to authorized healthcare professionals or appropriate clinical systems for evaluation and treatment coordination.

4.4 Payment and Transaction Information

When paid services are available, payment-related information may be collected or processed to facilitate consultations, treatment programs, pharmacy services, or other authorized transactions.

Such information may include:

Billing name and address.
Transaction dates.
Payment amounts.
Services purchased or requested.
Payment confirmation and transaction identifiers.
Refund or cancellation information.
Payment method details processed by authorized providers.

Payment card information may be collected and processed directly by third-party payment processors rather than stored by Blue North Medical.

The actual handling of payment information depends on the payment systems used for the relevant transaction.

4.5 Communications and Customer Support Information

When you contact Blue North Medical by telephone, email, contact form, or another authorized communication channel, we may collect:

Your name and contact information.
The date and nature of your inquiry.
Messages and correspondence.
Information necessary to respond to your request.
Records of service-related interactions.
Communication preferences and applicable consent records.

Communications involving protected health information will be handled according to applicable privacy and security requirements.

Where calls or other communications are recorded, any legally required notices and consents must be provided.

5. Information Collected Automatically

When you visit our Website, certain technical information may be collected automatically through Website infrastructure and, where implemented, cookies or similar technologies.

This information may include:

Internet Protocol (IP) address.
Browser type and version.
Operating system.
Device characteristics.
General geographic location inferred from network information.
Referring website or source.
Pages visited and navigation patterns.
Session duration and approximate visit times.
Website performance and error information.
Security-related logs and events.
Information regarding interactions with Website features.

We may use this information to understand Website functionality, maintain security, troubleshoot technical issues, and improve the user experience.

Technical information that can identify an individual or is associated with health-related interactions may be subject to additional privacy protections depending on the circumstances.

We do not treat information as nonpersonal merely because it was collected through a browser or other automated technology.

6. Cookies and Similar Technologies

Cookies are small data files that websites may place on a user’s device to support functionality, remember preferences, and understand Website usage.

Blue North Medical may use cookies and similar technologies for purposes that include:

Essential Cookies

Technologies necessary for basic Website operation, security, session management, and functionality.

Functional Cookies

Technologies that remember selected preferences and support a more consistent browsing experience.

Analytics Technologies

Tools used to understand Website traffic, identify technical problems, and evaluate the performance of Website features.

Advertising and Measurement Technologies

Where legally permitted and appropriately configured, technologies that measure the performance of general advertising or help us understand how users discover our publicly available Website content.

The particular technologies used may change over time.

Users may be able to control certain cookies through browser settings, device preferences, or Website consent controls where available.

Disabling essential cookies may affect Website functionality.

Some third-party technologies operate under their providers’ own privacy policies.

The use of cookies or tracking technologies must comply with applicable privacy laws, including any restrictions on sharing health-related information.

7. Online Analytics and Advertising

Blue North Medical may use Website measurement tools to evaluate general traffic, page performance, user experience, and the effectiveness of promotional activities.

Depending on the technologies implemented, these activities may involve analytics providers, search advertising services, or social media advertising platforms.

Examples of general information used for these purposes may include:

Aggregate Website traffic.
General Website navigation patterns.
Advertising referral sources.
Device and browser information.
Interaction with publicly available Website content.
Nonidentifying performance and engagement metrics.

We recognize that information collected through healthcare-related Websites may be sensitive, even when collected outside a formal patient portal.

Information obtained through medical questionnaires, secure patient systems, clinical consultations, or other protected healthcare interactions must not be disclosed to advertising technology providers unless the disclosure is legally permitted and all applicable requirements, including authorization requirements where necessary, have been satisfied.

General acceptance of this Privacy Policy or an ordinary cookie banner does not constitute authorization to disclose protected health information for advertising purposes.

Blue North Medical’s use of analytics and advertising technologies must remain consistent with the legal status of the information involved and the responsibilities of the participating healthcare organizations.

8. How We Use Personal Information

We use personal information for legitimate healthcare, operational, administrative, security, and other lawful purposes, subject to applicable privacy requirements.

8.1 Healthcare Services and Clinical Coordination

Information may be used to:

Facilitate patient registration and onboarding.
Coordinate clinical evaluations and consultations.
Provide relevant patient information to authorized healthcare professionals.
Evaluate preliminary service eligibility.
Support medical history review and clinical decision-making.
Coordinate laboratory testing when requested by a provider.
Facilitate authorized prescription services.
Coordinate pharmacy fulfillment.
Support medically appropriate follow-up and ongoing care.

Actual clinical decisions are made by authorized healthcare professionals acting within their professional responsibilities.

8.2 Administrative and Business Operations

Information may be used to:

Respond to requests for information.
Provide customer service.
Schedule or coordinate appointments.
Process authorized payments.
Maintain appropriate administrative records.
Address billing inquiries.
Manage patient service communications.
Improve Website functionality and organizational processes.
Support lawful quality assurance and operational review.

8.3 Legal, Security, and Compliance Purposes

Information may be used when necessary to:

Comply with applicable legal obligations.
Verify identity or service eligibility.
Detect and prevent fraudulent activity.
Investigate security incidents.
Protect against unauthorized system access.
Respond to lawful requests from regulatory or governmental authorities.
Maintain records required by healthcare or business regulations.
Protect the rights and safety of patients, personnel, and other individuals.

8.4 Communications and Marketing

We may use appropriate contact information to provide service-related communications.

Promotional communications may be sent where permitted by law and subject to any required consent or authorization.

Protected health information will not be used or disclosed for marketing in violation of HIPAA or other applicable privacy requirements.

Patients may be provided with choices regarding optional promotional communications.

9. How We Share and Disclose Information

Blue North Medical may disclose personal information to authorized individuals and organizations when reasonably necessary to provide Services or when otherwise legally permitted.

The categories of recipients may include the following.

9.1 Healthcare Professionals

Patient information may be shared with appropriately authorized healthcare providers for purposes such as:

Clinical evaluation.
Diagnosis and treatment.
Prescription decisions.
Medical consultation.
Follow-up care.
Care coordination.

Healthcare professionals are responsible for handling medical information in accordance with applicable professional, confidentiality, and privacy obligations.

9.2 Licensed Pharmacies

When a prescription is authorized, appropriate information may be transmitted to a licensed pharmacy for dispensing, prescription verification, patient counseling, fulfillment, and related lawful activities.

Information shared may include necessary patient identifiers, prescription details, contact information, and other information required for the pharmacy to perform its responsibilities.

9.3 Laboratories and Clinical Service Providers

Where relevant to a patient’s care, information may be shared with authorized laboratories, diagnostic providers, or other healthcare service organizations.

Only information appropriate for the permitted purpose should be disclosed.

9.4 Technology and Administrative Service Providers

We may engage service providers to support Website hosting, secure communications, electronic medical systems, appointment coordination, data storage, payment processing, information security, and other administrative operations.

Service providers must comply with applicable contractual and legal obligations concerning information they handle.

When a service provider acts as a HIPAA business associate, a compliant Business Associate Agreement will be required where applicable.

9.5 Legal and Regulatory Authorities

Information may be disclosed where authorized or required by law, including in connection with:

Valid legal proceedings.
Applicable court orders.
Regulatory inquiries.
Public health reporting.
Healthcare oversight activities.
Legally required reporting obligations.
Other circumstances expressly permitted under applicable law.

Such disclosures remain subject to applicable limitations, procedural protections, and confidentiality requirements.

9.6 Business Reorganizations

Information may be processed or transferred as part of a lawful merger, acquisition, restructuring, or transfer of business operations.

Any such transfer must comply with applicable confidentiality obligations, healthcare record requirements, and restrictions on the use or disclosure of protected health information.

10. Protected Health Information and HIPAA

Certain information collected or processed in connection with healthcare services may constitute protected health information under HIPAA.

HIPAA applies to covered entities and their business associates as defined by federal law. The applicability of HIPAA to a particular organization or activity depends on its legal role and circumstances.

When Blue North Medical, a participating healthcare provider, or an authorized service provider is subject to HIPAA, protected health information must be handled in accordance with the applicable HIPAA Privacy, Security, and Breach Notification Rules.

Permitted uses and disclosures of PHI may include treatment, payment, healthcare operations, and other purposes expressly authorized by law.

Certain uses and disclosures require additional patient authorization.

A separate Notice of Privacy Practices, where required, describes the covered entity’s specific uses and disclosures of PHI, legal duties, patient rights, and complaint procedures.

Patients should review the applicable Notice of Privacy Practices provided by the healthcare organization responsible for their medical records.

This general Privacy Policy does not independently authorize uses or disclosures that require a HIPAA-compliant authorization.

11. Patient Rights Regarding Health Information

Individuals whose information is protected by HIPAA or applicable medical privacy laws may have specific rights concerning that information.

Depending on the applicable law and the entity responsible for the records, these rights may include:

Right to Access Medical Records

You may have the right to inspect or obtain copies of medical records and other protected health information maintained about you, subject to applicable exceptions.

Right to Request Corrections

You may request amendments to protected health information that you believe is inaccurate or incomplete.

Right to Request Restrictions

You may request limitations on certain uses or disclosures of protected health information. Whether a requested restriction must be accepted depends on applicable law.

Right to Confidential Communications

You may request that communications involving health information be directed to an appropriate alternative address or through an alternative communication method, subject to applicable requirements.

Right to an Accounting of Disclosures

You may request information regarding certain disclosures of protected health information, as permitted by law.

Right to Receive a Privacy Notice

You may request a copy of an applicable Notice of Privacy Practices when legally available to you.

Right to File a Privacy Complaint

You may raise concerns regarding the handling of protected health information with the responsible healthcare organization or the appropriate regulatory authority.

Individuals will not be retaliated against for filing a privacy complaint in the exercise of legally protected rights.

Requests involving medical records may need to be directed to the healthcare provider or covered entity responsible for maintaining those records.

12. Florida Medical Privacy Requirements

Blue North Medical currently facilitates healthcare services for eligible patients located within Florida.

Healthcare providers delivering telehealth services to Florida patients are subject to applicable Florida laws governing professional practice, medical records, patient confidentiality, and healthcare information.

These requirements may include provisions under Florida Statutes Sections 456.047, 456.057, and other applicable laws.

Medical records generated in connection with telehealth services must be documented, maintained, and protected according to applicable legal and professional requirements.

Certain categories of medical information may be subject to additional confidentiality restrictions or disclosure requirements.

The availability of a telehealth platform does not reduce the legal responsibilities of healthcare professionals concerning medical record confidentiality or patient privacy.

Blue North Medical and participating providers must apply the requirements relevant to their respective functions.

13. Sensitive Personal Information

Some personal information collected in connection with healthcare services is particularly sensitive.

Examples may include information relating to:

Medical diagnoses and symptoms.
Sexual health.
Prescription medications.
Laboratory and diagnostic results.
Reproductive and hormonal health.
Mental health.
Substance use disorders.
Other confidential health conditions.

Sensitive information will be handled according to the legal requirements that apply to its particular category and context.

Where additional restrictions or patient authorizations are required, such restrictions and authorizations must be observed.

Information subject to special federal confidentiality protections, including applicable requirements under 42 CFR Part 2, will be handled according to those requirements where relevant.

We do not consider ordinary Website acceptance or general registration to replace special medical privacy authorizations required by law.

14. Data Security

Blue North Medical recognizes the importance of maintaining the confidentiality, integrity, and availability of information processed through its Website and related systems.

Appropriate data security safeguards may include administrative, technical, and organizational measures designed to address reasonably foreseeable risks.

Depending on the system, its purpose, and applicable legal requirements, security measures may involve:

Access controls and user authentication.
Role-based restrictions on information access.
Secure transmission of sensitive information.
Appropriate protection of stored information.
Monitoring for unauthorized access.
Security updates and system maintenance.
Vendor security evaluations.
Administrative procedures for incident management.
Appropriate workforce privacy and security practices.
Secure methods for exchanging patient information.

Specific safeguards depend on the technology and systems actually used.

No method of internet transmission or electronic storage is guaranteed to eliminate every possible security risk.

Blue North Medical and other entities handling information remain responsible for implementing the safeguards required by applicable law.

Users should avoid sending sensitive medical information through unsecured or unapproved communication channels.

15. Data Breaches and Security Incidents

Despite reasonable security precautions, electronic information systems may be affected by unauthorized access, security vulnerabilities, or other incidents.

If a security incident occurs, the responsible organization will evaluate the circumstances and determine the appropriate response under applicable law.

Where notification is required, affected individuals and applicable regulatory authorities will be informed in accordance with governing requirements.

Depending on the circumstances, applicable laws may include HIPAA breach notification provisions, state breach notification laws, or other requirements governing particular categories of health information.

The investigation, documentation, and reporting of security incidents will be subject to the legal responsibilities of the entities involved.

16. Data Retention

Blue North Medical and participating service providers may retain information for periods reasonably necessary to fulfill the purposes described in this Privacy Policy and comply with applicable legal obligations.

Retention requirements may vary according to the information involved.

Relevant considerations may include:

Healthcare record retention requirements.
Clinical documentation obligations.
Pharmacy and prescription regulations.
Applicable billing and financial record requirements.
Legal proceedings or regulatory investigations.
Security and fraud prevention needs.
Other lawful administrative purposes.

Medical records may be subject to mandatory retention periods that prevent their immediate deletion upon request.

When information is no longer required and no applicable obligation requires continued retention, it should be securely deleted, destroyed, or otherwise appropriately handled according to the responsible organization’s retention procedures.

17. Your Privacy Choices

Depending on applicable law and the nature of the information, you may have choices concerning certain collection, use, and communication practices.

These may include:

Marketing Preferences

You may request to stop receiving optional marketing communications by following available unsubscribe instructions or contacting us.

Text Message Preferences

Where supported, you may opt out of a particular text messaging program by replying STOP, subject to the rules governing that program.

Cookie Controls

You may manage certain cookies through your browser or applicable Website privacy controls.

Access and Correction

You may request access to or correction of eligible personal information, subject to applicable legal requirements.

Deletion Requests

You may request deletion of certain personal information. We may be legally required or permitted to retain some information, including medical records or transaction documentation.

Confidential Communications

Patients may request appropriate confidential methods of communication where such rights are recognized by law.

To submit a privacy-related request, please use the contact information provided at the end of this Policy.

We may need to verify your identity or direct your request to the organization legally responsible for the relevant records.

18. Marketing Communications and SMS Privacy

Blue North Medical may offer optional email or mobile messaging programs for informational, administrative, or promotional purposes.

Information collected in connection with these programs may include:

Telephone number.
Email address.
Communication preferences.
Consent and enrollment records.
Message delivery information.
Opt-out requests.
Relevant communication history.

Where required by applicable law, we will obtain appropriate consent before sending promotional text messages.

Consent to receive marketing text messages is not a condition of purchasing or receiving healthcare services.

Mobile messaging information may be processed by authorized messaging service providers for message delivery and related operational purposes, subject to applicable legal and contractual restrictions.

Mobile opt-in consent information must not be sold or shared with third parties for their independent marketing purposes.

Protected health information may not be used or disclosed through marketing or messaging activities except as permitted by applicable law.

For additional information concerning mobile messaging, please review our separate SMS / Mobile Communications Terms.

19. Third-Party Websites and Services

Our Website may contain links to external websites, clinical portals, pharmacy services, payment platforms, or other third-party resources.

These external services may maintain their own privacy policies, security practices, and terms of use.

Blue North Medical does not control all information practices of independent third-party websites.

We encourage users to review the privacy notices associated with external services before providing personal information.

Where third parties process information on behalf of Blue North Medical or a participating healthcare organization, applicable service provider obligations and contractual protections remain relevant.

Nothing in this section reduces legal obligations that apply to information shared with our authorized service providers.

20. Social Media and Public Interactions

Blue North Medical may maintain a presence on third-party social media platforms.

When you interact with our social media accounts, the platform may collect or process information under its own privacy terms.

Public comments, reactions, messages, and other interactions may be visible to other users depending on the platform’s settings.

We recommend that individuals avoid posting personal medical histories, treatment details, prescription information, or other sensitive health information in public comments.

Social media platforms should not be used as substitutes for secure patient communication systems or emergency medical services.

Privacy protections available within a secure clinical environment may differ from those applicable to public social media interactions.

21. Children’s Privacy

The Website and Services are primarily intended for adults.

Blue North Medical currently requires patients requesting its telehealth services to be at least eighteen (18) years of age.

We do not intend to solicit medical treatment requests directly from individuals under eighteen through the adult patient intake process.

If we learn that personal information concerning a minor has been collected through the Website in circumstances requiring deletion or other corrective action, we will take appropriate steps consistent with applicable law.

Requests concerning a minor’s personal information may be submitted using the contact information below.

This section does not override applicable laws concerning minors’ medical records, confidentiality, or consent to healthcare services.

22. Additional State Privacy Rights

Although Blue North Medical’s current clinical service area is Florida, individuals from other jurisdictions may visit its publicly available Website.

Certain U.S. states provide qualifying residents with additional rights concerning personal information collected outside the context of HIPAA-protected health information.

Depending on the law and circumstances, such rights may include:

Requesting access to personal information.
Requesting correction of inaccurate information.
Requesting deletion of eligible information.
Obtaining a portable copy of certain information.
Opting out of certain forms of targeted advertising or data sharing.
Restricting certain uses of sensitive personal information.
Appealing a denial of a privacy request where applicable.

Some medical information or regulated entities may be exempt from particular state consumer privacy requirements.

Blue North Medical will evaluate applicable requests based on the relevant legal requirements, the categories of information involved, and the role of the organization processing the information.

Where legally recognized browser-based opt-out preference signals or other mandatory mechanisms apply, they must be addressed according to the relevant law.

Requests may be submitted using the privacy contact information below.

Nothing in this section is intended to limit rights provided by applicable state or federal law.

23. International Website Visitors

Blue North Medical is directed primarily toward individuals seeking information about healthcare services offered within the United States.

Its current telehealth services are limited to eligible patients located in Florida.

Visitors outside the United States should understand that the Website is operated for a U.S.-focused healthcare service and may involve processing information in the United States.

The availability of public Website content does not constitute an offer of medical services in another country.

Where foreign privacy laws apply to particular information processing activities, additional obligations may arise.

24. Automated Processing and Clinical Decisions

Certain administrative or technical systems may assist with intake organization, appointment coordination, eligibility screening, or workflow management.

Such systems do not replace the independent professional judgment required for medical diagnosis, prescription authorization, or treatment decisions.

Healthcare professionals remain responsible for clinical decisions within their scope of practice.

If automated processing is used in a manner that creates specific legal notification, consent, or review requirements, the responsible organization must comply with those requirements.

Any use of patient information within automated systems must remain subject to applicable confidentiality, security, and healthcare privacy obligations.

25. Privacy Complaints and Requests

We encourage individuals to contact Blue North Medical regarding questions or concerns involving personal information collected through our Website or administrative Services.

Privacy-related requests may concern:

Access to eligible personal information.
Correction of inaccurate information.
Communication preferences.
Requests concerning certain disclosures.
Security concerns.
Questions regarding data handling practices.
Other privacy rights available under applicable law.

Requests involving protected health information may need to be addressed by the responsible healthcare provider or covered entity.

If you believe your rights under HIPAA have been violated, and HIPAA applies to the relevant organization and information, you may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.

Information about submitting complaints is available at:

https://www.hhs.gov/hipaa/filing-a-complaint/

Individuals exercising legally protected privacy rights will not be retaliated against for doing so.

26. Changes to This Privacy Policy

Blue North Medical may update this Privacy Policy from time to time to reflect changes in its services, information practices, technology, or applicable legal requirements.

The revised version will display an updated effective date.

Where required by law, we will provide additional notice or obtain appropriate consent before implementing material changes affecting the use or disclosure of personal information.

Changes to this general Privacy Policy do not override rights or obligations under HIPAA, applicable medical record confidentiality laws, or another controlling privacy notice.

We encourage users to review this page periodically.

27. Relationship to Other Policies

This Privacy Policy should be read together with other documents governing Blue North Medical’s Website and Services, including:

Terms of Service.
Medical Disclaimer.
Telehealth Consent.
SMS / Mobile Communications Terms.
Any applicable HIPAA Notice of Privacy Practices.
Additional service-specific or clinical consent documents.

Each document addresses particular legal, operational, or healthcare-related matters.

This Privacy Policy concerns general information practices and does not replace the clinical disclosures or legal authorizations that may be required to receive healthcare services.

28. Contact Information

If you have questions about this Privacy Policy, the handling of personal information, or the exercise of applicable privacy rights, please contact: