Privacy Policy

​

1. OUR LEGAL DUTIES AND SCOPE OF THIS NOTICE

​

Lunaris Health PLLC (“we,” “us,” or “our”) is a healthcare provider required by law to protect the privacy and security of your Protected Health Information (PHI), provide you with notice of our privacy practices, and follow the terms of this Notice currently in effect.

This Notice applies to all care and services provided by Lunaris Health PLLC, including:

• Telehealth services (video, audio, and electronic communication)

• In-office visits

• Mobile care, including home visits and bedside care in hospitals or facilities

• Website interactions, appointment requests, and patient communications

We comply with:

• The Health Insurance Portability and Accountability Act of 1996 (HIPAA)

• The Health Information Technology for Economic and Clinical Health (HITECH) Act

• Applicable federal and state privacy laws

We are required to notify you in the event of a breach of unsecured PHI.

​

2. INFORMATION WE COLLECT​

​

We may collect the following types of information:

- Personal information (name, date of birth, address, phone, email)
- Health information (medical history, medications, diagnoses, treatment)
- Appointment and billing information
- Limited technical data (IP address, device/browser data when using our website)

Information is collected through:

- Patient intake forms and communications
- CharmHealth (electronic health record and patient portal)
- Telehealth platforms (e.g., Doxy.me)
- Website and booking tools (e.g., Wix)
- Payment processors
 

​

3. HOW WE USE YOUR INFORMATION
​

We use your information to:

• Provide medical care and treatment

• Communicate with you about appointments and care

• Process billing and payments

• Coordinate prescriptions, labs, and referrals

• Comply with legal and regulatory requirements

• Improve services and patient experience

We apply the minimum necessary standard to all uses and disclosures.

​

4. HOW WE SHARE YOUR INFORMATION​

​

We do not sell or rent your PHI.

We may use or disclose your PHI without your written authorization for:

• Treatment

• Payment

• Healthcare operations

We may also disclose your information when required or permitted by law, including:

• Public health reporting

• Legal processes or law enforcement

• Preventing serious threats to health or safety

Any other use or disclosure not described in this Notice requires your written authorization.

​

5. BUSINESS ASSOCIATES AND THIRD-PARTY SERVICES
​

We use third-party service providers to support our operations, including:

- CharmHealth (EHR, patient portal, scheduling)
- Doxy.me (telehealth platform)
- Wix (website and appointment requests)
- Payment processors (e.g., Stripe, Wix Payments)

Where applicable, these entities act as Business Associates and have signed agreements requiring them to safeguard PHI.

We configure systems to limit PHI exposure and ensure clinical information is handled within secure platforms.
 

​

​

6. PRIVACY PRACTICES BY CARE SETTING

​

Lunaris Health PLLC provides care in multiple settings, including telehealth, in-office visits, and mobile/in-home care. Privacy and security practices are adapted to each environment while maintaining HIPAA standards.

In-Office Care

• Care is delivered in a controlled clinical environment

• Conversations and documentation are conducted with reasonable safeguards

• Access to PHI is limited to authorized personnel

Telehealth Care

• Visits are conducted using secure, HIPAA-compliant platforms

• Patient identity and location are verified

• Patients are encouraged to participate from a private setting

• Telehealth may not be appropriate for all conditions

Mobile, Home, and Bedside Care

• Care may be provided in patient homes, residential settings, or bedside environments

• Reasonable safeguards are used to protect privacy in less-controlled environments

• Discussions of PHI are limited to what is necessary for care

• Documentation is completed in secure systems (e.g., CharmHealth) and not stored locally

• Devices used during visits are secured and access-controlled

While privacy risks may vary by setting, we apply the minimum necessary standard and use professional judgment to protect patient confidentiality in all environments.

​

7. SECURITY SAFEGUARDS​

​

We implement administrative, technical, and physical safeguards, including:

• Encrypted systems and secure platforms

• Role-based access controls

• Secure electronic records (CharmHealth)

• Device and access security

• Workforce training and confidentiality policies

We regularly review and update our safeguards.

​

8. COMMUNICATIONS

​

We primarily use secure systems (CharmHealth portal) for clinical communication.

If you choose to use email or text:

• These methods may not be fully secure

• There is a risk of unauthorized access

By using these methods, you acknowledge and accept these risks.

​

9. PAYMENTS

​

• Lunaris Health PLLC operates primarily as a self-pay practice.

• We accept Banner Aetna (Arizona) when applicable. All other services are self-pay unless otherwise specified.

• Payments are processed through secure, PCI-compliant platforms. We do not store full payment details.
   

10. WEBSITE, BOOKING, AND ANALYTICS
​

Our website and booking tools (e.g., Wix) are used for scheduling and general communication.

We collect only the minimum necessary information.

Patients should:

• Avoid submitting detailed medical information through website forms

• Use secure systems (CharmHealth) for clinical communication

We may use cookies or analytics tools to improve website performance.

​

11. YOUR RIGHTS

​​

You have the right to:

• Access and obtain a copy of your records

• Request corrections to your information

• Request restrictions on use or disclosure

• Request confidential communications

• Revoke authorizations in writing

• File a complaint with us or the U.S. Department of Health and Human Services

​

12. LIMITATIONS OF TELEHEALTH CARE

​

Telehealth has inherent limitations, including the inability to perform a full physical examination.

You may be advised to seek:

• In-person care

• Specialist evaluation

• Urgent care or emergency services

​

13. BREACH NOTIFICATION

​

If a breach of unsecured PHI occurs:

• We will investigate promptly

• Notify affected individuals as required

• Comply with all federal and state reporting obligations

​

14. MULTI-STATE PRACTICE

​

We provide care across multiple states and comply with all applicable privacy laws.
Where state law is more stringent than HIPAA, the stricter standard applies.

​

15. CHANGES TO THIS POLICY

​

We may update this Notice at any time. Updates will be posted with a revised effective date.

​

16. CONTACT INFORMATION

​

Lunaris Health PLLC
17212 N Scottsdale Rd
Scottsdale, AZ 85255

Phone: 708-427-8700
Email: Info@lunarishealthcare.com
Website: www.lunarishealthcare.com

​

​