HIPAA Privacy & Security Compliance Statement

Last updated: August 12, 2026

HIPAA Notice of Privacy Practices

Last updated: July 13, 2026

Our Commitment to Patient Privacy

At Golden Triangle Eye Center, protecting the privacy, confidentiality, and security of our patients' personal and health information is one of our highest priorities. We are committed to maintaining compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), along with applicable federal and state privacy and security regulations governing protected health information ("PHI"). We understand the importance of safeguarding sensitive medical information and have implemented administrative, technical, and physical safeguards designed to help protect patient data from unauthorized access, disclosure, misuse, alteration, or destruction.

How We May Use and Disclose Your Health Information

We may use and disclose protected health information for treatment, payment, healthcare operations, appointment reminders, required legal notices, and other purposes permitted or required by HIPAA.

HIPAA Compliance

Our practice maintains policies, procedures, and operational safeguards intended to support compliance with HIPAA regulations, including:

• The HIPAA Privacy Rule
• The HIPAA Security Rule
• The HIPAA Breach Notification Rule
• Applicable state privacy laws where required

These standards are designed to help ensure the confidentiality, integrity, and availability of protected health information.

Protection of Patient Information

We take reasonable and appropriate measures to help protect patient information collected, stored, transmitted, or processed through our office and website.

Protected information may include

• Medical records
• Appointment information
• Insurance information
• Contact information
• Online form submissions
• Communication records
• Payment-related information where applicable

Administrative Safeguards

Our organization implements administrative safeguards intended to support privacy and security compliance, including:

• HIPAA-related workforce training and awareness
• Role-based access controls
• Privacy and security policies and procedures
• Risk management and ongoing compliance reviews
• Incident response procedures
• Vendor and business associate evaluations where applicable
• Confidentiality practices for workforce members

Technical Safeguards

We utilize commercially reasonable technical safeguards designed to help secure electronic protected health information (ePHI), which may include:

• Secure website encryption (SSL/HTTPS)
• Password-protected systems and accounts
• Access restrictions and authentication measures
• Secure data transmission practices
• Firewall and network security protections
• Software and security updates where applicable
• Secure hosting environments
• Monitoring and vulnerability management efforts

While no method of electronic transmission or storage can be guaranteed to be 100% secure, we continuously work to maintain and improve our security practices.

Physical Safeguards

We maintain physical safeguards intended to protect patient information and sensitive systems, which may include:

• Restricted access to sensitive records and systems
• Secure disposal procedures
• Controlled office access measures
• Device and workstation protections where appropriate

Online Forms & Website Security

Any patient information submitted through our website is transmitted using secure encryption technologies when applicable.

We make reasonable efforts to ensure that

• Online forms are securely transmitted
• Sensitive information is handled appropriately
• Website infrastructure follows recognized security practices
• Patient communications are managed responsibly

Patients are encouraged not to submit highly sensitive medical information through unsecured email communications.

Third-Party Services

Our website and operations may utilize certain third-party providers or platforms for services such as:

• Appointment scheduling
• Payment processing
• Website hosting
• Patient communication tools
• Electronic health records systems

Where applicable, we work with service providers that represent compliance commitments and appropriate security measures consistent with healthcare privacy expectations.

Breach Response & Incident Management

In the event of a suspected or confirmed security incident involving protected health information, our organization maintains procedures intended to:

• Investigate the incident
• Mitigate potential harm
• Notify affected individuals when legally required
• Comply with applicable breach notification laws

Patient Rights

Under HIPAA, patients may have rights regarding their protected health information, including:

• The right to request access to medical records
• The right to request corrections to certain information
• The right to request restrictions on certain disclosures
• The right to request confidential communications
• The right to receive a Notice of Privacy Practices

Additional information regarding patient privacy rights may be available through our office directly.

Compliance Is an Ongoing Process

HIPAA compliance and cybersecurity are ongoing responsibilities. We continually review and improve our privacy and security practices to help maintain compliance with evolving laws, regulations, technologies, and industry best practices.

Our organization may periodically

• Review privacy and security procedures
• Update safeguards and technologies
• Evaluate operational risks
• Enhance workforce awareness and training
• Improve patient data protection practices

Contact Us

If you have questions regarding our HIPAA compliance practices, patient privacy protections, or data security procedures, please contact us.

Golden Triangle Eye Center

522 Alabama Street, Columbus, MS 39702 Phone: 662‑729‑8246 Email: leeford@gteyeclinic.com

Policy Updates

This HIPAA Compliance Statement may be updated periodically to reflect operational, legal, regulatory, or technological changes. Last Updated: July 13, 2026