Privacy Policy

Effective Date: July 17, 2026

Highland Healthcare respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through highlandhealthcare.org and related online services.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• The Highland Healthcare website

• Website contact and appointment-request forms

• Email communications initiated through the website

• SMS enrollment and messaging services

• Other online services that link to this Privacy Policy

This policy primarily concerns information collected through our public website and related online services.

Medical information created or received by Highland Healthcare while providing healthcare services may be protected health information under the Health Insurance Portability and Accountability Act, commonly known as HIPAA, and California medical privacy laws.

Our handling of protected health information is described separately in our Notice of Privacy Practices. If this Privacy Policy conflicts with the Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices and applicable law will control.

2. Information We May Collect

Information You Provide

Depending on how you use our website, we may collect information such as:

• Your name

• Telephone number

• Email address

• Mailing address

• Date of birth

• Appointment preferences

• The reason for contacting our office

• Information included in messages or appointment requests

• Insurance or billing information

• Communication preferences

• SMS consent and opt-out records

• Other information you voluntarily provide

Please do not submit emergency requests through the website, email, or ordinary SMS messaging.

Information Collected Automatically

When you visit our website, our website platform and service providers may automatically collect technical information such as:

• Internet Protocol address

• Browser type

• Device type

• Operating system

• Approximate geographic area

• Pages viewed

• Referring website

• Date and time of access

• Interactions with website features

• Cookie and similar technology information

This technical information may be used to maintain the website, identify errors, prevent abuse, understand general website use, and improve our services.

3. How We Use Information

We may use personal information to:

• Respond to inquiries

• Schedule and manage appointments

• Provide requested healthcare and administrative services

• Communicate with patients and prospective patients

• Send appointment reminders and account notifications

• Coordinate patient care

• Process billing or payment-related matters

• Maintain records of consent and communication preferences

• Operate, secure, and improve our website

• Detect fraud, misuse, or security incidents

• Comply with legal and regulatory obligations

• Protect the safety, rights, and property of patients, Highland Healthcare, and others

• Carry out other purposes disclosed when the information is collected

4. SMS and Mobile Information

When you enroll in Highland Healthcare’s SMS program, we may collect your mobile number, consent records, messaging preferences, and information associated with messages sent to or received from you.

Highland Healthcare does not sell or rent mobile telephone numbers.

Mobile information will not be shared with third parties or affiliates for their marketing or promotional purposes.

Text-message originator opt-in information and consent will not be sold, rented, or disclosed to third parties for their independent marketing or promotional use.

We may provide limited mobile information to vendors and telecommunications providers acting on our behalf when necessary to deliver messages, maintain consent records, process opt-out requests, and operate the messaging service.

Please review our SMS Terms & Conditions for additional information.

5. When We May Disclose Information

We may disclose information in the following circumstances:

Healthcare Operations and Services

Information may be shared with clinicians, staff members, facilities, pharmacies, laboratories, consultants, and other parties involved in providing or coordinating services, as permitted by law.

Service Providers

We may use vendors that provide services such as:

• Website hosting

• Appointment scheduling

• Patient communication

• Email delivery

• SMS delivery

• Telehealth technology

• Patient portals

• Data storage

• Payment processing

• Information technology and security

• Professional consulting

These providers may receive information only as reasonably necessary to perform services for Highland Healthcare and are expected to protect the information appropriately.

Legal and Safety Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, regulation, subpoena, court order, or legal process

• Respond to government or regulatory authorities

• Protect a person from a serious threat to health or safety

• Investigate fraud, abuse, or security incidents

• Enforce our policies or agreements

• Protect the rights and property of Highland Healthcare or others

Business Changes

Information may be transferred as part of a merger, acquisition, reorganization, financing, sale, or transfer of some or all of Highland Healthcare’s operations, subject to applicable healthcare privacy requirements.

6. Sale of Personal Information

Highland Healthcare does not sell personal information for monetary compensation.

We do not sell protected health information. We will not use or disclose protected health information for purposes requiring written authorization unless a valid authorization has been obtained.

7. Cookies and Similar Technologies

Our website and its service providers may use cookies or similar technologies to support essential website functions, remember preferences, understand website activity, maintain security, and improve performance.

You may be able to limit cookies through your browser settings. Disabling cookies may cause certain portions of the website to function improperly.

8. Do Not Track and Third-Party Tracking

Some browsers transmit a “Do Not Track” signal. Because there is not a universally accepted standard for interpreting these signals, our website may not respond to every Do Not Track request.

Third-party website, hosting, security, analytics, embedded-content, or social-media providers may collect information about your interactions with their services. Their collection and use of information are governed by their own privacy policies.

You may use browser settings, device controls, or available privacy tools to limit certain forms of tracking.

9. Links and Third-Party Services

Our website may link to patient portals, scheduling systems, payment services, telehealth platforms, pharmacies, laboratories, social-media pages, or other third-party websites.

Highland Healthcare does not control the privacy or security practices of independent third parties. You should review the privacy policy of a third-party service before providing information through it.

A link from our website does not necessarily mean Highland Healthcare endorses all content, products, services, or privacy practices associated with that website.

10. Data Security

Highland Healthcare uses reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, email system, mobile network, or electronic transmission method can be guaranteed to be completely secure. You should use caution when sending personal or medical information through ordinary email or SMS.

When available, use an approved secure patient portal for detailed or sensitive medical communications.

11. Retention of Information

We retain personal information for as long as reasonably necessary to:

• Provide services

• Maintain medical and business records

• Meet professional and legal obligations

• Resolve disputes

• Maintain security

• Enforce agreements

• Document consent and communication preferences

Medical records are retained according to applicable healthcare laws and professional requirements.

12. Accessing or Correcting Information

You may contact Highland Healthcare to request access to or correction of personal information collected through the website.

Requests involving medical records or protected health information will be handled according to our Notice of Privacy Practices and applicable federal and California law.

We may need to verify your identity before responding to a request.

13. Children’s Privacy

Our public website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through the public website without appropriate permission.

A parent, guardian, or legally authorized representative may contact us regarding information involving a minor. Medical information involving minors will be handled in accordance with applicable federal and California law.

14. California Privacy Rights

California residents may have rights under California law regarding certain personal information, subject to exemptions and limitations that apply to medical providers and health information.

Depending on the circumstances, you may request information about the personal information we maintain, ask that inaccurate information be corrected, or request deletion of certain information.

These rights do not necessarily apply when information must be retained for medical, legal, billing, safety, or regulatory purposes.

To submit a request, contact us using the information below. We may request information necessary to verify your identity and authority to make the request.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, or legal obligations change.

The revised policy will be posted on our website with an updated effective date. Material changes may also be communicated through another appropriate method.

16. Contact Us

Questions, concerns, or privacy requests may be directed to:

Privacy Officer
Highland Healthcare
300 Harding Boulevard, Suite 103
Roseville, CA 95678
Phone: 916-244-5996
Email: contact@highlandhealthcare.org