Version 1.0
Last revised: October 11, 2024
I. Introduction
We recognize that privacy is a significant concern for visitors to our website. The internet is not always a private place, and various entities may collect information about your online activities, searches, and transactions.
At TonaLaw PC DBA TonaLaw NO-Fault (“we,” “us,” or “our”), we strive to respect your privacy when you visit tonalaw-nofault.com (“our site”). We collect certain information, including medical records and health information, to provide legal services and enhance your experience. This Privacy Policy explains how and when we collect, use, and protect your information, including compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
II. Information We Collect and How We Use It
1. Automatically Collected Information
When you visit our site, we automatically gather certain information from your browser. This may include your Internet Protocol (IP) address, cookie data, browser type, operating system, and the referring URL. If you interact with our advertisements on other websites, we may receive similar information from those platforms. Additionally, if you subscribe to our email newsletter, we may use tracking technologies to determine whether you open our emails.
We utilize this information to measure and improve the performance of our site and communications. Occasionally, we may access this data to investigate or maintain the security of our site.
2. Information You Provide Voluntarily
Certain pages on our site or advertisements on other platforms may invite you to provide personally identifiable information (PII) so we can contact you. This information may include:
- Personal Information: Name, mailing address, email address, telephone number.
- Health Information: Medical records, health conditions, treatment information, and other Protected Health Information (PHI) as defined under HIPAA.
3. Use of Collected Information
We collect and use your information for the following purposes:
- Provision of Legal Services: To evaluate your case, provide legal advice, and represent you in legal matters, we may use personal information that you voluntarily submit to us on the website or during the course of our engagement, including providing such information to third parties, such as experts or other professionals to represent your interests, as well as the use of software, platforms and other technology hosted by third-party service providers.
- Communication: To contact you regarding inquiries, respond to requests, and send important notices, educational updates, and marketing materials.
- Compliance with Laws: To comply with applicable laws, regulations, legal processes, or governmental requests (such as anti-money laundering or fraud detection purposes, as well as fulfillment of our ethical obligations).
III. HIPAA Compliance
1. Protected Health Information (PHI)
As a law firm providing legal services that may involve access to medical records and health information, we are committed to protecting the privacy and security of your PHI per HIPAA and applicable New York state laws.
2. Use and Disclosure of PHI
We may use and disclose your PHI for the following purposes:
- Treatment, Payment, and Health Care Operations: To facilitate legal representation related to health care matters.
- Legal Proceedings: To comply with court orders, subpoenas, or legal processes.
- With Your Authorization: For any other purpose with your explicit written authorization.
3. Your Rights Under HIPAA
You have the following rights regarding your PHI:
- Right to Access: You may request access to your PHI, which we maintain.
- Right to Amend: You may request corrections with healthcare providers to your PHI if you believe it needs to be revised or completed.
- Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI.
- Right to Request Restrictions: You may request restrictions on specific uses and disclosures of your PHI.
- Right to Confidential Communications: You may request that we communicate with you in a certain way or location.
- Right to a Copy of This Privacy Policy: You may request a paper copy anytime.
4. Safeguards
We implement administrative, physical, and technical safeguards to protect your PHI against unauthorized access, disclosure, alteration, or destruction.
5. Breach Notification
If there is any breach of unsecured PHI, we will notify you under HIPAA requirements and applicable state laws.
6. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or the U.S. Department of Health and Human Services Secretary. To file a complaint with us, please contact:
Privacy Officer
Address: TonaLaw PC, 152 Islip Ave., Suite 18, Islip, NY 11751
Telephone: 844-TONALAW
Email: [email protected]
We will not retaliate against you for filing a complaint.
IV. Third-Party Content and Cookies
Our site may contain links to external content, such as social media platforms (e.g., Facebook, Twitter) or articles on news websites. We may also embed media like videos hosted on platforms such as YouTube. When you interact with or load pages containing this content, third-party providers may place their own cookies on your device, access existing cookies, or collect information about you.
We encourage you to review the privacy policies of these third-party content providers to understand how they handle your information. We are not responsible for their privacy practices.
V. Security Measures
We implement reasonable security measures to protect against unauthorized access to the information you provide, including PHI. These measures include encryption, access controls, secure servers, and regular security assessments. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security; third parties may unlawfully intercept or access private communications.
VI. Updates to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page, and significant changes will be highlighted on our site. We encourage you to review this policy regularly to stay informed about how we protect your information.
VII. Your Rights Under New York Law
Under New York law, you have certain rights regarding your personal information:
- Right to Access: You may request access to the personal information we hold about you.
- Right to Correction: You may request that we correct any inaccuracies in your personal information in our system.
- Right to Confidentiality: We are required to maintain the confidentiality of your information, especially concerning legal representation and PHI.
VIII. Contact Information
If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us at:
Privacy Officer
Address: TonaLaw PC, 152 Islip Ave., Suite 18, Islip, NY 11751
Telephone: 844-TONALAW
Email: [email protected]