Privacy Policy

Privacy Policy for Asthma & Allergy of Idaho

Effective Date: January 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

At Asthma & Allergy of Idaho, we are committed to protecting the privacy and security of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information ("PHI") to carry out treatment, payment, or healthcare operations, and for other purposes permitted or required by law. It also describes your rights to access and control your PHI. PHI is information about you, including demographic information, that may identify you and relates to your past, present, or future physical or mental health or condition and related healthcare services.

We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable Idaho state laws to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and abide by the terms of this Notice currently in effect. We reserve the right to change the terms of this Notice and make the new provisions effective for all PHI we maintain. If we make material changes, we will post the revised Notice on our website and provide a copy upon request.

1. Uses and Disclosures of Your PHI Without Your Authorization

We may use or disclose your PHI for the following purposes without your written authorization:

  • Treatment: We may use or disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with physicians, nurses, or other healthcare providers involved in your care, including pharmacies or laboratories.
  • Payment: We may use or disclose your PHI to obtain payment for services, such as billing your insurance company or verifying eligibility.
  • Healthcare Operations: We may use or disclose your PHI for our internal operations, such as quality assessment, staff training, or auditing.

Other permitted uses and disclosures include:

  • To public health authorities for reporting diseases, vital events, or injury prevention.
  • To comply with workers' compensation laws or similar programs.
  • For health oversight activities, such as audits or investigations by government agencies.
  • In response to court orders, subpoenas, or other legal processes.
  • To law enforcement for limited purposes, such as identifying suspects or reporting crimes.
  • To coroners, medical examiners, or funeral directors as needed.
  • For organ donation purposes.
  • For research under certain conditions.
  • To avert a serious threat to health or safety.
  • For specialized government functions, such as military or national security activities.
  • To family members or friends involved in your care, unless you object.
  • For disaster relief efforts.

In accordance with Idaho state law, we may disclose PHI to parents or guardians of unemancipated minors, except in limited cases where minors can consent to specific services (e.g., certain reproductive health or mental health services under Idaho Code). We comply with all applicable federal and Idaho laws regarding reproductive health information and other sensitive data.

2. Uses and Disclosures Requiring Your Authorization

For any uses or disclosures not described above, we must obtain your written authorization. This includes most uses for marketing, sales of PHI, or psychotherapy notes. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

3. SMS and Text Messaging Communications

If you provide us with your mobile phone number and opt in to receive text messages (SMS), we may use it to send appointment reminders, health tips, billing notifications, or other service-related communications. By providing your mobile number and opting in, you consent to receive these messages.

  • Opt-In Process: You can opt in via our website forms, patient intake paperwork, or by verbal confirmation over the phone. By consenting, you agree to be contacted by SMS text message. Message & data rates may apply. Message frequency may vary.
  • Opt-Out Process: You can opt out at any time by replying "STOP" to any message, or by contacting us directly. After opting out, you may receive one final confirmation message.
  • Data Collection and Use for SMS: We collect your mobile number, opt-in consent data, and message history solely for providing these communications. Message frequency varies. We do not share your mobile information with third parties or affiliates for marketing or promotional purposes. All categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
  • Security: SMS messages are not encrypted, so we recommend not sending sensitive PHI via text. Standard message and data rates may apply from your carrier.

This complies with 10DLC (10-Digit Long Code) regulations for application-to-person messaging, ensuring your consent is respected and your data is protected.

4. Your Rights Regarding Your PHI

You have the following rights:

  • Right to Inspect and Copy: You may request access to your PHI in our designated record sets. We may charge a reasonable fee for copies.
  • Right to Amend: If you believe your PHI is incorrect or incomplete, you may request an amendment.
  • Right to an Accounting of Disclosures: You may request a list of certain disclosures we made of your PHI.
  • Right to Request Restrictions: You may request restrictions on uses or disclosures, though we are not required to agree except for certain restrictions on disclosures to health plans for paid services.
  • Right to Confidential Communications: You may request alternative communication methods (e.g., a different address).
  • Right to a Paper Copy: You may obtain a paper copy of this Notice at any time.
  • Right to Breach Notification: We will notify you of any breach of your unsecured PHI.

To exercise these rights, contact our Privacy Officer (details below). We may deny certain requests, but you can appeal.

5. Our Duties

We are required by law to:

  • Maintain the privacy and security of your PHI.
  • Notify you of any breach affecting your PHI.
  • Abide by this Notice.
  • Accommodate reasonable requests for confidential communications.

We follow Idaho Department of Health and Welfare guidelines and all local, state, and federal laws, including special protections for substance abuse, mental health, and other sensitive information.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or the U.S. Department of Health and Human Services Office for Civil Rights. Contact our Privacy Officer for more information. We will not retaliate against you for filing a complaint.

7. Contact Information

For questions about this Notice or to exercise your rights:

  • Privacy Officer: Matthew Wickern
  • Address: 1502 Locust St. North, STE 600, Twin Falls, ID 83301
  • Phone: 208-734-6091
  • Email: privacy@allergyid.com

This Notice is available on our website and in our office. We may update it periodically; the current version is always posted online.