Privacy Policy

Our Commitment to Your Privacy

Second Mountain Internal Medicine, P.C. ("we," "our," or "the Practice") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with our medical practice and this website.

We comply with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), its implementing regulations, and the laws of the State of Maine. Where Maine law provides greater privacy protection than HIPAA, we follow the stricter standard.

Protected Health Information (PHI)

What Is PHI?

Protected Health Information includes any individually identifiable information that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for health care services. This includes your name, address, date of birth, medical records, diagnoses, treatment plans, and insurance information.

How We Use Your PHI

We may use and disclose your PHI without your written authorization for the following purposes:

• Treatment: To provide, coordinate, and manage your medical care, including consultations with other health care providers, referrals, and care coordination with specialists, home health agencies, and hospitals.
• Payment: To bill and collect payment for the services we provide, including submitting claims to Medicare or other insurers.
• Health Care Operations: To support the business activities of our practice, including quality improvement, staff training, and compliance audits.

Uses Requiring Your Authorization

Other uses and disclosures of your PHI will be made only with your written authorization, unless otherwise permitted or required by law. You may revoke any authorization you have given at any time by contacting us in writing.

Your Rights Under HIPAA

As a patient, you have the following rights regarding your health information:

• Right to Access: You may request to inspect and obtain a copy of your medical records. We will respond within 30 days of your request.
• Right to Amend: You may request that we amend your health information if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information.
• Right to Request Restrictions: You may request restrictions on certain uses and disclosures of your health information.
• Right to Confidential Communications: You may request that we communicate with you in a specific way or at a specific location.
• Right to a Copy of This Policy: You may request a paper copy of this Privacy Policy at any time.

Maine State Privacy Protections

In addition to federal HIPAA requirements, your health information is protected under Maine law, specifically Title 22, Section 1711-C of the Maine Revised Statutes (Confidentiality of Health Care Information). Key protections under Maine law include:

• Individual health care information is confidential and may not be disclosed except as permitted by law or with your consent.
• Health care information includes any information that directly identifies you and relates to your physical, mental, or behavioral health condition, personal or family medical history, or the health care provided to you.
• Any agreement to waive these confidentiality protections is against public policy and void under Maine law.
• When Maine law provides stricter privacy protections than HIPAA, this Practice follows the more protective standard.

For more information about your rights under Maine law, you may contact the Maine State Legislature Law Library or the Maine Department of Health and Human Services.

Website Information Collection

Information You Provide

When you use the contact or referral forms on this website, you may voluntarily provide personal information such as your name, phone number, email address, and details about a patient's medical situation. This information is used solely to respond to your inquiry or process a referral.

Automatically Collected Information

This website may automatically collect limited, non-identifying technical information such as your browser type, device type, and pages visited. This information is used only to maintain and improve the website and is not linked to any personal or health information.

Cookies

This website may use essential cookies necessary for basic site functionality. We do not use tracking cookies, advertising cookies, or third-party analytics that track individual users across websites.

No Sale of Information

We do not sell, rent, trade, or otherwise share your personal information or health information with third parties for marketing purposes. We will never monetize your data.

Communications

All patient communication is handled by phone or text at 207-492-4642 through our HIPAA-compliant messaging service. This ensures that your personal and health information is transmitted securely and in accordance with federal and state privacy requirements.

Information Security

We implement appropriate administrative, technical, and physical safeguards to protect your personal and health information against unauthorized access, use, disclosure, alteration, or destruction. These safeguards are consistent with the HIPAA Security Rule and Maine law requirements.

Breach Notification

In the event of a breach of unsecured protected health information, we will notify affected individuals, the U.S. Department of Health and Human Services, and, where required, the Maine Attorney General, in accordance with the HIPAA Breach Notification Rule and Maine's breach notification requirements under Title 10, Section 1348 of the Maine Revised Statutes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your information has been handled, please contact us:

Second Mountain Internal Medicine, P.C.
Phone: 207-492-4642 (call or text)
Oxford Hills Region, Maine

You also have the right to file a complaint with:

• U.S. Department of Health and Human Services, Office for Civil Rights — for HIPAA-related complaints
• Maine Attorney General, Consumer Protection Division — for state privacy concerns

We will not retaliate against you for filing a complaint.