Privacy Policy

We collect information you voluntarily provide when you visit this website, complete a contact or intake form, schedule an appointment, exchange secure messages, or otherwise interact with the practice. This may include your name, email address, phone number, date of birth, location, health history, payment information, and any other information you choose to share.

We also collect limited technical information automatically — such as device type, browser, referring page, and general usage data — to help operate and improve the website.

[Placeholder: Final policy should reflect applicable federal privacy law (including HIPAA where applicable) and Colorado privacy requirements, including the Colorado Privacy Act.]

Information you provide is used to respond to inquiries, schedule and provide care, coordinate prescriptions and labs, process payment, communicate about your care, maintain medical records, comply with legal obligations, and improve the practice and website.

We do not sell personal information.

This website uses cookies and similar technologies to support core functionality and to understand how visitors use the site. We may use privacy-respecting analytics tools to measure aggregate site traffic and performance.

[Placeholder: Final policy should list specific analytics or tag providers in use and describe any opt-out mechanisms.]

Appointment scheduling is provided through Healthie, a third-party HIPAA-compliant practice management platform. Information you submit through the scheduling tool is handled in accordance with Healthie's privacy and security practices in addition to this Privacy Policy.

Secure messaging between patients and the practice takes place through Healthie's encrypted patient portal. Messages exchanged through the portal become part of your medical record.

Please do not send protected health information through standard email, text message, or social media — those channels are not designed for confidential medical communication.

Payments are processed by Stripe, a PCI-compliant payment processor. The practice does not store full payment card numbers. Stripe processes your payment information in accordance with its own privacy and security practices.

We rely on carefully selected business partners to operate the practice. These may include Healthie (scheduling, charting, secure messaging), Stripe (payment processing), pharmacy and compounding partners, laboratory providers, and standard business services such as email and analytics.

Each third party is responsible for the information it processes under its own terms and privacy policy.

We use administrative, technical, and physical safeguards designed to protect personal and health information. No method of transmission or storage is 100% secure, but we work to maintain appropriate protections consistent with applicable law.

Patients have rights regarding their protected health information, including the right to access, request amendment, request restrictions, and receive an accounting of certain disclosures.

Colorado residents may also have additional rights under state privacy law, including the right to access, correct, delete, and request a portable copy of certain personal information, and to opt out of certain uses.

See the Notice of Privacy Practices for the full description of HIPAA-related rights.

Questions about this Privacy Policy or our handling of your information can be directed to jordan@healthpajordan.com or (720) 257-9470.