HIPPA Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Cross County Cardiology (“Cross County Cardiology,” “we,” “us,” or “our”) is committed to protecting your privacy and maintaining the confidentiality of your personal and health information. This combined Privacy Policy and Notice of Privacy Practices explains how we collect, use, disclose, and safeguard your information in compliance with HIPAA, A2P, CTIA, and other applicable privacy laws.
Our office is located at:
Cross County Cardiology
103 River Rd, 2nd Floor
Edgewater, NJ 07020
Phone: 1 (551) 357-0021
Website: https://crosscountycardiology.com
Our Legal Obligations
We are required by law to maintain the privacy of your protected health information (PHI), provide you with this notice of our legal duties and privacy practices, and follow the terms of this notice currently in effect.
How We May Use and Disclose Health Information
We may use and disclose your Health Information without your written authorization for the following purposes:
Treatment – To provide, coordinate, or manage your medical care. For example, we may share Health Information with doctors, nurses, technicians, or other providers involved in your care.
Payment – To bill and collect payment for services. For example, we may disclose information to your insurance plan so it will pay for your treatment.
Health Care Operations – To improve the quality of our services, manage our office, and train staff.
Appointment Reminders, Treatment Alternatives, and Health-Related Services – To remind you of appointments or tell you about health programs, services, or alternatives that may be of interest to you.
Individuals Involved in Your Care – With your consent, we may disclose your Health Information to family or friends involved in your care or payment for your care.
Research – Under certain circumstances, we may use and disclose Health Information for research after appropriate approvals.
Special Situations
We may also use or disclose Health Information in these circumstances:
-
When required by law
-
To prevent a serious threat to health or safety
-
To business associates providing services on our behalf (such as billing companies)
-
For organ and tissue donation
-
For military or veterans’ activities
-
For workers’ compensation programs
-
For public health reporting (disease prevention, recalls, abuse reporting)
-
For health oversight activities (audits, inspections, compliance reviews)
-
To notify you in case of a data breach
-
For lawsuits, disputes, or legal processes
-
To law enforcement under limited conditions
-
To coroners, medical examiners, or funeral directors
-
For national security and intelligence purposes
-
To correctional institutions if you are in custody
Uses and Disclosures That Require an Opportunity to Object
Unless you object, we may share Health Information with family or others involved in your care, and with disaster relief organizations.
Uses and Disclosures Requiring Written Authorization
Your written authorization is required for:
-
Marketing purposes
-
The sale of your Health Information
-
Any other disclosures not covered by this notice
You may revoke authorization at any time by submitting a written request.
Your Rights
You have the right to:
-
Inspect and copy your medical and billing records
-
Request an electronic copy of electronic medical records
-
Receive notice of a data breach affecting your information
-
Request an amendment to your records
-
Request a list of certain disclosures we made of your Health Information
-
Request restrictions on certain uses and disclosures
-
Request confidential communications in a specific way or location
-
Obtain a paper copy of this notice at any time, even if you agreed to electronic delivery
If you pay out-of-pocket in full for a service, you may request that information about that service not be disclosed to your health plan.
SMS/MMS Messaging Consent and Compliance
Cross County Cardiology also communicates with patients via SMS/MMS in compliance with A2P (Application-to-Person) standards.
Consent – By providing your phone number, you consent to receive appointment reminders, health updates, and educational messages.
Opt-In/Opt-Out – Opt-in by providing your number or replying START/SUBSCRIBE. Opt-out anytime by replying STOP.
Message Types and Frequency – Messages may include appointment confirmations, reminders, service notifications, and educational content. Frequency is generally limited to one per day unless requested.
Costs – Standard text and data rates may apply.
Age Restriction – We do not knowingly collect or transmit SMS/MMS information from individuals under 18.
Data Security – All SMS/MMS data is safeguarded under HIPAA, CTIA, and applicable standards.
Third-Party Providers – Some communications may be sent using automated systems or third-party platforms that must comply with confidentiality and A2P regulations.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
Information Collection on Our Website
When you use our website or engage with our content, we may collect:
-
Information you provide directly, such as when you complete forms or request services
-
Information collected automatically, including IP addresses, browser types, device IDs, access times, and pages viewed
-
Information from third parties such as analytics tools or payment processors
We use cookies, pixels, and tracking tools to improve website performance, optimize advertising, and enhance user experience.
Security
We use appropriate technical, administrative, and physical safeguards to protect your information against unauthorized access, loss, or disclosure.
Changes to This Notice
We reserve the right to change this notice at any time. Updated notices will apply to all information we already hold as well as new information we collect. The current version will always be posted in our office and on our website.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our office by contacting the Practice Manager or with the Secretary of the U.S. Department of Health and Human Services. All complaints must be in writing. You will not be penalized for filing a complaint.
Contact Us
For questions about this Privacy Policy and Notice of Privacy Practices, please contact:
Cross County Cardiology
103 River Rd, 2nd Floor
Edgewater, NJ 07020
Phone: 1 (551) 357-0021
Website: https://crosscountycardiology.com
