Privacy Policy

This Privacy Policy applies to all services, clinical appointments, online wellness portals, and digital interactions provided by MAHC Wellness ("we", "us", or "our"). By accessing our clinical facilities or digital services, you acknowledge the terms established under this governance framework.

We collect personal information necessary to deliver personalized, integrative wellness care. This includes:

• Identifying Data: Full legal name, date of birth, government-issued identification, residential address, and emergency contact details.
• Contact Records: Primary telephone number, verified email address, and direct messaging preferences.
• Administrative Metadata: Appointment histories, consultation intake forms, and clinical communication archives.

All medical histories, lab analyses, diagnostic images, wellness treatment plans, and practitioner session notes are classified as Protected Health Information (PHI). We adhere strictly to federal and state health data privacy regulations, ensuring medical data is segregated, encrypted, and accessible only to authorized medical personnel directly involved in your care pathway.

When you opt in to receive SMS or text communications from MAHC Wellness (such as appointment reminders, laboratory readiness alerts, and care plan updates), your mobile phone number is protected under the strictest standards of confidentiality.

MAHC Wellness does not sell, rent, lease, or barter your personal, medical, or contact information to data brokers, ad networks, or commercial third parties under any circumstances. We maintain our practice as a sovereign clinical sanctuary.

Our commitment to your privacy extends unconditionally to all automated, clinical, and administrative short-message communication channels.

All digital transmissions across our patient portal, intake forms, and electronic messaging systems utilize high-grade TLS 1.3 protocol encryption. At-rest databases are protected via AES-256 multi-layered encryption with continuous automated vulnerability auditing.

Virtual telehealth sessions are conducted through dedicated, HIPAA-compliant audiovisual telecommunication suites. MAHC Wellness strictly prohibits session recordings unless express, written clinical authorization is obtained in advance for documented diagnostic reviews.

Financial transactions are securely processed by accredited PCI-DSS Level 1 compliant gateways. MAHC Wellness does not retain complete payment card numbers or CVV codes on local servers; all billing records are managed through encrypted payment tokens.

We partner only with vetted technical and diagnostic infrastructure providers who execute formal Business Associate Agreements (BAAs). These vendors are legally and contractually bound to uphold privacy protections equivalent to our own internal standards.

Our website employs essential functional cookies to authenticate secure portal logins and prevent session hijacking. We do not utilize invasive cross-site advertising trackers or third-party pixel aggregators that profile your medical browsing habits.

Clinical medical records are retained in accordance with statutory medical board mandates (typically a minimum of seven years following the last date of clinical service, or until the age of majority plus seven years for pediatric records). Subsequent destruction is executed via cryptographic erasure.

You maintain the right to inspect your medical records, request corrections to erroneous entries, obtain an accounting of administrative disclosures, and designate authorized personal representatives to manage your health record access.

Upon verified request, we provide your complete non-diagnostic administrative data and health records in a structured, machine-readable digital format (or encrypted PDF) for seamless transfer to an alternate medical provider.

In the unlikely event of an unauthorized security incident involving personal or health data, MAHC Wellness will notify affected individuals within required regulatory timelines (and no later than 30 business days) alongside explicit mitigation steps.

We do not knowingly collect digital information directly from individuals under the age of 18 without verified parental or legal guardian consent. Guardian access to minor health records complies with state-specific adolescent healthcare privacy laws.

All core clinical servers, backup arrays, and patient databases are located physically within the United States. International visitors accessing our digital services consent to data processing under prevailing United States privacy statutes.

We disclose protected information only when strictly mandated by valid court orders, enforceable subpoenas, or urgent statutory public health reporting obligations, and only after exhaustive legal review to ensure minimum necessary disclosure.

MAHC Wellness reserves the right to update this policy to reflect operational improvements or regulatory amendments. Substantive updates will be highlighted via portal notifications and reflected in the updated revision date at the top of this repository.

If you have questions regarding your medical record privacy, wish to exercise statutory data rights, or need to lodge a confidential inquiry, please contact our appointed Privacy Officer: