Privacy Policy
Last updated: July 4, 2026
Harmony Health Clinic ("Harmony Health Clinic," "we," "us," or "our"), operated by All American Chiropractic LLC, respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what we collect through our website at flharmony.com and in the course of providing care, how we use it, and the choices you have.
This Privacy Policy governs our website and general business practices. It is not the same as our Notice of Privacy Practices (NPP), which describes in detail how we may use and disclose your protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). Where this policy and our NPP differ regarding PHI, the Notice of Privacy Practices controls. A copy of our Notice of Privacy Practices is available on request at the contact information below.
Information We Collect
Information you give us directly. When you fill out a contact or appointment form, book an appointment, complete intake paperwork, or communicate with us, we may collect your name, date of birth, email address, phone number, mailing address, insurance or payment details, and the health information you choose to provide.
Health information. As a healthcare provider, we collect and maintain health information necessary to evaluate and treat you, including medical history, examination findings, lab and diagnostic results, medications, and treatment records. This information is protected health information and is handled in accordance with HIPAA and our Notice of Privacy Practices.
Payment information. We are a cash-pay practice. When you pay for services, payment card information is collected and processed by our third-party payment processors. We do not store complete payment card numbers on our own systems.
Information collected automatically. When you visit our website, we and our analytics providers may automatically collect technical information such as your IP address, browser type, device type, pages viewed, referring website, and the dates and times of your visits. This is collected through cookies and similar technologies (see "Cookies and Analytics" below).
How We Use Your Information
We use the information we collect to:
-
Schedule, confirm, and manage appointments (including telehealth visits) and send appointment reminders;
-
Provide, coordinate, and document medical care;
-
Process payments and provide superbills for out-of-network reimbursement;
-
Respond to your questions, requests, and communications;
-
Operate, maintain, secure, and improve our website and services;
-
Send administrative or, where you have opted in, marketing communications; and
-
Comply with legal, regulatory, and professional obligations.
We do not sell your personal or health information, and we do not use protected health information for marketing without your authorization.
How We Share Your Information
We share information only as needed to run the practice and provide care, and only with parties that agree to protect it. Where a service provider handles protected health information on our behalf, they do so under a HIPAA Business Associate Agreement. Categories of recipients include:
-
Electronic health records and scheduling: our EMR and booking platform (OptiMantra), which stores patient records and manages appointments;
-
Payment processing: our card processors (Authorize.net, used with our EMR for card-on-file transactions, and Helcim for in-clinic card-present transactions);
-
Clinical documentation: AI-assisted clinical documentation tools used to support accurate record-keeping, under a Business Associate Agreement;
-
Business and productivity tools: Google Workspace (email and file storage);
-
Website analytics: Google Analytics, which helps us understand website usage;
-
Legal and safety purposes: courts, regulators, or law enforcement when required by law, and others as permitted or required by HIPAA and applicable Florida law; and
-
Business transfers: a successor entity in the event of a merger, acquisition, or sale of assets, subject to the protections described here.
We do not share your information with advertising networks for their own purposes.
Protected Health Information and HIPAA
Your protected health information is governed by HIPAA and by our Notice of Privacy Practices, which describes your rights and how we may use and disclose PHI for treatment, payment, and health care operations. Nothing in this website Privacy Policy is intended to limit the protections or rights described in our Notice of Privacy Practices.
Payment Processing
We operate on a transparent cash-pay basis and do not bill insurance directly. We accept cash, credit and debit cards, HSA/FSA cards, and Zelle. Card payments are processed by PCI-DSS-compliant third-party processors; we do not retain full card numbers on our systems. Superbills can be provided for you to submit for potential out-of-network reimbursement.
Telehealth Privacy
We offer telehealth follow-up visits to established patients located in Florida. Telehealth visits are conducted over a HIPAA-compliant platform. As with any internet-based communication, we cannot guarantee against technical failures or interception outside our control; please conduct visits in a private location.
Cookies and Analytics
Our website uses cookies and similar technologies to operate the site, remember preferences, and measure traffic. Analytics cookies (such as those used by Google Analytics) help us understand how visitors use the site so we can improve it. You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality. To opt out of Google Analytics across sites, you may install the Google Analytics Opt-out Browser Add-on.
Data Security
We maintain administrative, technical, and physical safeguards designed to protect the information we hold, including transitioning patient records to encrypted electronic systems and limiting access to authorized personnel involved in your care or our operations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal and health information for as long as necessary to provide care, operate our practice, and comply with legal, tax, and professional record-retention requirements, after which it is securely destroyed or de-identified.
Your Privacy Rights
Depending on your relationship with us and applicable law, you may have the right to:
-
Access and request a copy of your health records;
-
Request corrections or amendments to your records;
-
Request restrictions on certain uses or disclosures;
-
Receive an accounting of certain disclosures; and
-
Request that we communicate with you through a particular method or at a particular location.
Requests concerning protected health information are handled under HIPAA and our Notice of Privacy Practices. To exercise any of these rights, contact us using the information below.
Third-Party Websites
Our website may link to third-party websites or services (for example, our booking platform or social media profiles). We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies.
Children's Privacy
Our website is intended for a general audience and is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. We do provide care to minors; health information for minor patients is handled under HIPAA and applicable Florida law, and a parent or legal guardian must generally consent to and accompany a minor's care.
Communications and Appointment Reminders
With your consent, we may contact you by phone, text message, or email for appointment reminders, scheduling, billing, and other administrative purposes. Message and data rates may apply. You may opt out of non-essential communications at any time by replying STOP to text messages, using the unsubscribe link in emails, or contacting us directly; note that we may still need to contact you for essential care-related or administrative reasons.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes become effective when posted, and the "Last updated" date above will reflect the most recent revision. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, or to exercise your rights, contact:
Harmony Health Clinic Attn: Privacy Officer — Dr. Joshua Lamers, Owner and Compliance Officer 538 10th Street North, Naples, FL 34102 Phone: (239) 596-4801 Email: admin@flharmony.com
This Privacy Policy is provided for general informational purposes and does not constitute legal advice. Healthcare privacy is governed by HIPAA and Florida law, and requirements vary by circumstance. Have this policy — and a separate HIPAA Notice of Privacy Practices — reviewed by a Florida healthcare attorney before publishing to confirm it fits your specific operations, vendors, and obligations.
