1.Purpose

Firm Hill uses digital technologies to operate its public website and provide access to designated clinical services.

This notice explains the role of website technologies, external service providers, and information security practices.

2.Essential Website Technologies

Our website may use necessary technical functions to maintain security, support navigation, remember essential preferences, and enable reliable website operation.

These functions may include strictly necessary cookies or similar technologies.

3.Optional Analytics

Optional analytics will be enabled only after appropriate privacy and security review.

We will assess the categories of information collected, vendor access, potential disclosure of sensitive information, and applicable consent or authorization requirements.

The Practice will not knowingly transmit protected health information to unauthorized analytics or advertising services.

4.Advertising and Tracking

Firm Hill will not use advertising pixels, behavioral profiling technologies, or other tracking systems in a manner that violates applicable healthcare privacy requirements.

Any use of optional advertising or marketing technologies will require appropriate review and lawful implementation.

A cookie consent banner is not a substitute for a HIPAA authorization when one is required.

5.Website Hosting and Development

The public website may be developed or maintained using Lovable and associated infrastructure.

Before launch, Firm Hill will evaluate the final hosting environment, information flows, security settings, vendor relationships, and applicable contractual requirements.

Public website forms will be configured to avoid unnecessary collection of protected health information.

6.Tebra Clinical Services

Tebra is the Practice's designated patient portal and primary clinical scheduling platform.

Clinical registration, patient records, supported intake processes, and related clinical functions will be directed through authorized Tebra workflows.

The Practice will verify its Tebra configuration and applicable contractual protections before activating patient-facing features.

7.Third-Party Links

External links may lead to services governed by their own terms and privacy notices.

Users should review the relevant disclosures before providing information to external services.

8.Security Measures

Firm Hill will implement safeguards appropriate to the information it maintains and the systems it operates.

These may include secure access controls, appropriate encryption, vendor oversight, staff access management, and security incident response procedures.

No website or electronic system can guarantee absolute security.

9.Technology Changes

We may update website technologies as operational needs evolve.

Material changes to our information practices will be reflected in applicable notices.

10.Contact

For privacy or security questions:

Firm Hill Cardiometabolic Center

Email: admin@firmhillcenter.com
Telephone: 830 444 4477