Privacy Policy
Beyond the Scope Orthopaedics & Sports Medicine (“we,” “us,” or “our”) is committed to protecting the privacy and security of all individuals who visit our website at beyondthescopeortho.com (the “Site”) or interact with our practice. This Privacy Policy explains how we collect, use, protect, and handle information in connection with our website and patient services.
Please read this policy carefully. By using our Site, you acknowledge that you have read and understood the terms described below.
1. HIPAA Compliance
We are a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all applicable state privacy laws. All patient health information collected, stored, or transmitted through our practice is handled in full compliance with HIPAA’s Privacy Rule, Security Rule, and Breach Notification Rule.
Our HIPAA compliance efforts include:
- Strict access controls limiting who may view protected health information (PHI)
- Staff training on HIPAA requirements and patient privacy obligations
- Administrative, physical, and technical safeguards to protect electronic PHI (ePHI)
- Execution of Business Associate Agreements (BAAs) with all third-party vendors who handle PHI on our behalf
- Procedures for timely breach notification in the event of an unauthorized disclosure
For a complete description of how we use and disclose your protected health information and your rights under HIPAA, please refer to our Notice of Privacy Practices, available at our office and upon request.
2. Information We Collect
Patient Information
When you register as a patient or interact with our practice, we may collect the following categories of information to establish and maintain your medical record:
- Full legal name and date of birth
- Demographic information (address, phone number, email address)
- Health insurance carrier, policy number, group number, and subscriber information
- Emergency contact information
- Medical history, current symptoms, and clinical documentation
- Referring provider and pharmacy information
Website Usage Information
When you visit our Site, we may automatically collect non-identifiable technical information, including:
- Browser type and version
- Pages visited and time spent on the Site
- Referring URLs
- General geographic location (city/region level)
This data is used solely to improve the functionality and content of our website. It is not linked to any personally identifiable or protected health information.
3. How We Use Your Information
We use the personal, demographic, and insurance information you provide for the following purposes:
- To create and maintain a HIPAA-compliant electronic medical record for each patient
- To verify insurance eligibility and process claims for services rendered
- To coordinate care with authorized referral sources, specialists, and ancillary providers involved in your treatment
- To communicate with you regarding appointments, care instructions, and follow-up
- To fulfill legal and regulatory obligations
We do not use your information for marketing, advertising, or any purpose unrelated to your direct medical care without your explicit written authorization.
Our HIPAA compliance efforts include:
- Strict access controls limiting who may view protected health information (PHI)
- Staff training on HIPAA requirements and patient privacy obligations
- Administrative, physical, and technical safeguards to protect electronic PHI (ePHI)
- Execution of Business Associate Agreements (BAAs) with all third-party vendors who handle PHI on our behalf
- Procedures for timely breach notification in the event of an unauthorized disclosure
For a complete description of how we use and disclose your protected health information and your rights under HIPAA, please refer to our Notice of Privacy Practices, available at our office and upon request.
4. Non-Disclosure of Personal Information
We do not sell, rent, trade, or otherwise share your personal information with any third party for commercial purposes. Your information will not be disclosed to any outside individual, organization, or entity except:
- As required to carry out treatment, payment, or healthcare operations as permitted under HIPAA
- To business associates who have signed a BAA and are contractually obligated to protect your information
- As required by applicable law, court order, or government regulation
- With your express written authorization
We do not disclose any personal information to affiliates, marketing companies, data brokers, or any other third parties not directly involved in your care.
5. SMS / Text Message Communications
Beyond the Scope Orthopaedics & Sports Medicine may offer appointment reminders, post-visit follow-ups, or other practice communications via SMS text message. By opting in to SMS communications, you agree to receive text messages from our practice at the phone number you provide.
Important disclosures regarding SMS communications:
- SMS consent is strictly confidential and is never shared with third parties or affiliates for any purpose
- Your mobile number and opt-in status will not be sold, transferred, or disclosed to any outside party
- You may opt out of SMS communications at any time by replying STOP to any text message from us
- Message frequency may vary. Standard message and data rates may apply
- For assistance, reply HELP or contact our office directly
Our SMS program is operated in compliance with the Telephone Consumer Protection Act (TCPA) and applicable carrier guidelines.
6. Data Security
We implement industry-standard administrative, technical, and physical security measures to protect your information against unauthorized access, disclosure, alteration, and destruction. Our electronic health records system and patient data are maintained in compliance with HIPAA’s Security Rule.
While we take all reasonable precautions to safeguard your information, no method of electronic transmission or storage is 100% secure. If you have reason to believe your information has been compromised, please contact our office immediately.
7. Cookies and Tracking Technologies
Our Site may use cookies or similar technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us understand how visitors interact with our Site. You may adjust your browser settings to refuse cookies; however, certain features of the Site may not function properly as a result.
We do not use cookies to collect or store any protected health information.
8. Children's Privacy
Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children without verified parental or guardian consent. If you believe a child has submitted personal information through our Site without appropriate authorization, please contact us immediately so we can take corrective action.
9. Third-Party Links
Our Site may contain links to third-party websites for your convenience. We do not control, endorse, or assume responsibility for the privacy practices or content of any external sites. We encourage you to review the privacy policies of any website you visit outside of beyondthescopeortho.com.
10. Your Rights
As a patient, you have specific rights with respect to your protected health information under HIPAA, including the right to:
- Access and obtain a copy of your medical records
- Request corrections to inaccurate information
- Receive an accounting of disclosures of your PHI
- Request restrictions on certain uses and disclosures
- Receive a copy of our Notice of Privacy Practices
To exercise any of these rights, please contact our office using the information provided below.
11. Updates to This Policy
We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The updated policy will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our Site following any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:
Beyond the Scope Orthopaedics & Sports Medicine
Melbourne & Rockledge, FL
Website: beyondthescopeortho.com
13. Terms and Conditions
By using this website and providing your contact information, you agree to the following terms and conditions. These terms govern your use of our SMS messaging program and other communications offered by Beyond the Scope Orthopaedics & Sports Medicine.
SMS / Text Message Terms
When you opt in to receive SMS text messages from Beyond the Scope Orthopaedics & Sports Medicine, you agree to the following terms:
- Anticipated SMS messages from our practice include appointment reminders and links for scheduling appointments. Additional communications may include pre-visit instructions, post-operative care information, and practice updates.
- Messaging frequency may vary based on your appointment schedule and care needs.
- Message and data rates may apply. Please check with your mobile carrier for details regarding your plan.
- To opt out of SMS communications at any time, text STOP to any message you receive from us. You will receive a one-time confirmation message and no further messages will be sent.
- For our full Privacy Policy, including how SMS consent is handled, please visit beyondthescopeortho.com.
This policy is intended for informational purposes and does not constitute legal advice. For questions regarding your specific rights under HIPAA or applicable state law, consult a qualified healthcare attorney.