Pinnacle Allergy Privacy Policy & Notice of Privacy Practices

Pinnacle Allergy

(Effective Date: 09/23/2025)

Introduction

Pinnacle Allergy (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding the confidentiality of your health information. This Privacy Policy and Notice of Privacy Practices (“Notice”) describes how we may use and disclose your information, your rights under federal and state law, and how you can exercise those rights.

We comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Georgia Personal Identity Protection Act (GPIPA), and other applicable laws.

1. Information We Collect

We may collect:

Personal Identifiers: Name, address, phone, email, date of birth.
Medical Information: Symptoms, diagnoses, treatment history, test results, prescriptions.
Insurance & Billing Information: Insurance ID numbers, payment details.
Online Data: IP address, browser type, cookies, and usage analytics. We do not publish Social Security Numbers or other sensitive identifiers on our website.

2. How We Use Your Information

We use your information to:

Provide diagnosis, testing, and treatment services.
Coordinate care with your other providers.
Process billing and insurance claims.
Communicate with you regarding appointments, results, and care plans.
Improve our services and website.
Meet legal, accreditation, and regulatory requirements.

We will not use or disclose your information for purposes not listed here without your written authorization.

3. How We Share Information

Your information may be disclosed:

For Treatment: To doctors, nurses, or pharmacists involved in your care.
For Payment: To your insurance plan to process claims.
For Operations: For audits, training, and quality improvement.
As Required by Law: For public health, court orders, or government compliance.
With Business Associates: Vendors (labs, IT providers) who are under HIPAA-compliant agreements.

We do not sell your personal information.

4. Your Rights Under HIPAA

You have the right to:

Access: Request a copy of your medical record.
Amend: Ask for corrections to inaccurate or incomplete information.
Restrict: Request limits on how your information is shared.
Confidential Communication: Ask us to contact you in a specific way (e.g., mail instead of phone).
Accounting of Disclosures: Request a list of disclosures we’ve made.
Receive a Paper Copy of this Notice, even if you agreed to receive it electronically.

Requests can be made in writing to our Privacy Officer (see contact below).

5. Breach Notification (Georgia Law)

If your unencrypted personal information is accessed or reasonably believed to be accessed by an unauthorized party, we will notify you without unreasonable delay and in accordance with Georgia law.

Vendors and service providers must notify Pinnacle Allergy within 24 hours of any suspected breach.

6. Children’s Privacy

Our services are directed to adults and families under provider supervision. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that a child has provided personal data without consent, we will promptly delete it.

7. Data Retention

Medical Records: Retained as required by HIPAA and Georgia law (typically 7–10 years).
Billing Records: Retained for federal/state tax and compliance purposes.
Website Data: Retained only as long as necessary for its stated purpose.

8. Accessibility (ADA Compliance)

We are committed to providing an accessible digital experience for all patients. Our website follows the Web Content Accessibility Guidelines (WCAG) 2.1 AA.

If you experience any accessibility issues, please contact us:

info@pinnacleallergy.com
404-260-5366

We will respond within 5 business days.

9. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

– Our Privacy Officer (contact below)

– The U.S. Department of Health and Human Services, Office for Civil Rights

You will not face retaliation for filing a complaint.

10. Updates to This Notice

We may update this Notice from time to time. The updated version will be posted on our website with a new “Effective Date.”

11. Contact Information

Privacy Officer