Privacy Policy (PRHCC)

Effective date: September 24, 2025

Puerto Rico Healthcare Centers (“PRHCC,” “we,” “us,” or “our”) respects your privacy. This Website Privacy Policy explains how we collect, use, disclose, and protect information when you use our websites, patient portals, mobile apps, and communication channels that link to this Policy (collectively, the “Services”).

Note: If you become a PRHCC patient, your protected health information (“PHI”) is also governed by the HIPAA Privacy, Security, and Breach Notification Rules and our Notice of Privacy Practices (NPP) provided at time of care.

1) Information we collect

• Identifiers & contact info: name, email, phone, address, government-issued ID you submit, insurance member ID, etc.
  
• Health & insurance info: symptoms you describe in web forms, appointment details, insurance eligibility/coverage info. (When this is PHI, HIPAA applies; see our NPP.)
  
• Technical data: device/browser type, IP address, pages viewed, referring URLs, and approximate location derived from IP.
  
• Cookies & similar tech: analytics and performance cookies; you can adjust preferences in your browser.
  
• Communications: messages, call recordings where permitted, SMS/WhatsApp messages (with your consent), and email. Some treatment-related healthcare messages may be permitted under FCC rules; marketing requires opt-in.
  
• Children’s data: Our Services are not directed to children under 13. If we learn we collected personal information from a child under 13 without required parental consent, we will delete it.
  

2) How we use information

• To deliver the Services (e.g., scheduling, eligibility checks, patient portal, telehealth), provide customer support, and communicate about appointments, results, or invoices.
  
• For operations, safety, quality, and compliance (e.g., security, fraud prevention, audits, and legal obligations).
  
• To improve our Services (analytics, site performance, de-identified insights).
  
• Marketing: We may send non-treatment marketing communications with your consent; you can opt out at any time.
  

3) How we share information

• Vendors/Business Associates: With service providers (hosting, EHR/EMR, billing, analytics, messaging) under contracts requiring privacy and security safeguards.
  
• Healthcare purposes: With other providers/insurers at your direction or as permitted/required by law and HIPAA (see NPP).
  
• Legal/Compliance: To comply with law, court orders, or to protect safety, rights, and security.
  
• Corporate events: In merger, acquisition, or asset transfer, consistent with applicable law.
  
• We do not sell personal information.
  

4) Cookies, analytics, and tracking

We use cookies and similar technologies for functionality and analytics. You can control cookies via browser settings; disabling some cookies may impact site performance.

5) Your choices

• Email/SMS: Unsubscribe using links provided; reply STOP to SMS.
  
• Cookies: Adjust browser settings.
  
• HIPAA rights (patients): Access, amend, receive an accounting of disclosures, request restrictions, and more—see our NPP or contact us.
  

6) Data security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including measures aligned with HIPAA’s Security Rule for ePHI.

7) Data retention

We retain information as needed to provide Services, meet legal/contractual obligations (including medical-record retention), resolve disputes, and enforce agreements.

8) Breach notification

If a security incident compromises privacy or security, we will investigate and, where required, notify you and regulators.

• For unsecured PHI, we follow the HIPAA Breach Notification Rule.
  
• For personal data of Puerto Rico residents, we comply with Puerto Rico’s breach-notification law, including notice to the Department of Consumer Affairs (DACO) within statutory timeframes.
  

9) Children’s privacy

We don’t knowingly collect personal information from children under 13 through the public website. If you believe we have, contact us and we will take appropriate action.

10) Third-party links & services

Our site may link to third-party sites or embed third-party tools (e.g., maps, patient portals). Their privacy practices govern their content.

11) International visitors

Our Services are intended for U.S. residents. If you access from outside the U.S., you consent to U.S. processing.

12) Changes to this Policy

We may update this Policy. Changes take effect when posted. We will note the “Effective date” above and, if material, provide additional notice as required.

13) Contact us

PRHCC Privacy Office1666 Ave Ponce de Leon, San Juan, PR 00909
[email protected]  •  787-356-6000