Welcome to Enfield Royal Clinic. Your trust in sharing personal and medical information is extremely important to us. This Patient Policy explains how we collect, use, disclose, and safeguard your personal and health information. By receiving care or visiting our website, you agree to the practices described below.

What Information We Collect 

Personal information you disclose to us:

Personal & Contact Information

• Name, date of birth, address, phone, email, insurance and payment details.
  
  
• Emergency contact and referring provider details.

Medical & Health Records

• Medical history, current health conditions, medications, lab/test results, surgical reports, allergies, and imaging.

Digital & Usage Data

• IP address, device/browser type, website usage for appointment booking or accessing telehealth.

Purpose & Use of Information

We use your information to:

• Deliver care, support diagnosis, treatment, follow-up, billing and insurance.
  
  
• Communicate, send reminders, answer questions, and provide service updates.
  
  
• Comply with the law, share data as required by HIPAA, public health authorities, or the court.
  
  
• Improve services, for staff training, quality assurance, and research (aggregate/anonymised data).

Data Sharing & Disclosure

We may share your information with:

• Healthcare providers are involved in your care.
  
  
• Billing & insurance companies to process claims.
  
  
• Third-party service providers (e.g., IT platforms, transcription services) operate under strict confidentiality agreements.
  
  
• Public health or legal authorities, when required by law.
  
  
• Business transfers , in case of mergers or practice sales.
  
  

We do not sell your information for marketing or external promotions.

Data Retention 

We retain your records for as long as required by law and necessary for treatment or billing, typically 6 to 8 years, depending on state regulations. Upon expiration, records are securely destroyed or archived.

Patients Under 18

We do not knowingly treat or collect information from patients under 18 without parental consent. If we inadvertently collect such information without consent, we will take steps to delete it promptly.

Your Privacy Rights

You have the right to:

• Access your medical and billing records.
  
  
• Amend any mistakes in your records.
  
  
• Request restrictions on usage or sharing (when applicable).
  
  
• Receive an accounting of disclosures made.
  
  
• Obtain paper copies of this policy.
  
  
• Revoke consent for certain uses (except when prohibited by law or essential for care/billing).
  
  

To exercise any rights, please contact our Privacy Officer:
[Email Address]
[Phone Number]
[Practice Address]

Do‑Not‑Track & Online Privacy

Our website does not respond to browser “Do‑Not‑Track” signals. We use cookies and similar tech for functionality, analytics, and marketing, all managed via our Cookie & Privacy settings page.

Miami & Other State Privacy Rights

If you’re a California resident, you have additional rights under the CCPA/CPRA, including:

• Right to know, delete, or opt out of the sale of personal data.
• Right to non-discrimination for exercising rights.
• For minors under 13, rights may include parental consent before data collection.

For more details, see the CCPA Addendum [linked here].

Updates to This Policy

We update this policy to reflect changes in practices or legal requirements. Each version will be dated (Revised) and posted on our website. If changes are significant, we will notify you directly via email or on-site alerts.

Contact & Requests

For questions or formal rights requests (access, amendment, records requests):

• Email: [Privacy Officer / Admin Email]
  
  
• Phone: [Practice Phone]
  
  
• Mail: [Practice Address]
  
  

We aim to respond within 30 days of your request.

How to Review, Update, or Delete Your Information

To review or update your personal or medical information, please:

1. Fill out the online Patient Record Request Form ([link]).
   
   
2. Submit in person or mail to our office.
   
   
3. We will reply within 30 days with confirmation or clarification.

Patient Acknowledgement

By receiving treatment or accessing our services, you acknowledge that you have:

• Read and understand this Patient Policy.
  
  
• Authorised to collect, use, and share your information for care, operations, and legal purposes.
  
  
• Received (upon request) a copy of the policy and understand your rights.