Privacy Policy

VICTORY CLINIC LLC PRIVACY POLICY & NOTICE OF PRIVACY PRACTICES

Effective Date: August 28, 2026

1. Our Commitment to Your Privacy
   Victory Clinic LLC (“we,” “us,” or “our”) is dedicated to maintaining the privacy and security of your personal and medical data. This website complies with the United States Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable state privacy regulations.
2. Protected Health Information (PHI) We Collect
   When you use our Electronic Healthcare Record platforms (NextGen, which also includes our telehealth platform, and KLARA), we collect Protected Health Information (PHI). This includes:
   • Clinical histories, symptoms, diagnoses, and medical records.
   • Prescription information and lab results.
   • Government-issued identification and insurance details.
   • Billing, payment information, and credit card processing details.
3. How We Use and Disclose Your Information
   We use your PHI strictly for Treatment, Payment, and Healthcare Operations (TPO) in accordance with the HIPAA Privacy Rule:
   • Treatment: Sharing information with licensed clinicians, doctors, and dispensing pharmacies to facilitate your care.
   • Payment: Processing transactions securely via your credit card and/or health insurance provider.
   • Operations: Conducting quality assessments and internal auditing to improve platform safety.
   • Third-Party Disclosures: We do not sell, rent, or share your PHI for marketing purposes without your explicit written authorization. We sign formal Business Associate Agreements (BAAs) with all vendors who touch our data pipeline.
4. Data Security and Technology Safeguards
   To protect your electronic PHI (ePHI), we employ rigorous administrative, physical, and technical safeguards required under the HIPAA Security Rule:
   • Encryption: All medical, transactional, and sensitive data is transmitted exclusively via Secure Socket Layer (SSL) technology and encrypted at rest.
   • Access Controls: Only authorized personnel with unique credentials can access internal patient databases.
   • No Unregulated Tracking: We strictly govern the use of analytics tools. No marketing tracking pixels or tracking tags are installed on sensitive pages where PHI is collected.
5. Your Patient Rights Under HIPAA
   As a patient, you hold specific federal rights regarding your medical information:
   The right to inspect and copy your electronic medical and billing records.
   • The right to request restrictions on certain uses and disclosures of your PHI.
   • The right to receive an accounting of disclosures made outside of standard operations.
   • The right to request confidential, alternative methods of communication.
6. Contact and Grievances
   If you believe your privacy rights have been violated, or to exercise your rights, please contact our designated Privacy Officer:
   • Privacy Officer: Yvette Bell, RN BSN
   • Email: Compliance@VictoryClinics.com
   • Mailing Address: Victory Clinic LLC c/o Yvette Bell BSN, 715 Southwind DR, Junction City KS 66441