Effective Date: January 2025
1. Introduction & Scope
These Terms and Conditions (“Terms”) govern your access to and use of the website https://orthospine‑md.org/ (the “Site”), services provided by Comprehensive Spine and Joints (“Company”, “we”, “us”, or “our”), and communications through SMS, phone, email, or other channels.
2. HIPAA Compliance & PHI Safeguards
We are a HIPAA covered entity or business associate and adhere to the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule. This ensures protection of Protected Health Information (PHI) as defined under 45 CFR Parts 160 and 164
PHI includes identifiers like names, phone numbers, email addresses, IP addresses, health records, and dates tied to medical information
We implement administrative, physical, and technical safeguards to secure ePHI (electronic PHI), including encryption, access controls, and secure data handling practices
Any disclosure of PHI to third parties is strictly limited to purposes permitted under HIPAA (treatment, payment, operations) or made with the individual’s explicit authorization. We follow the “minimum necessary” standard.
3. Communications & A2P SMS
By opting in, you consent to receive SMS, email, or phone communications related to our services (e.g., appointment reminders, updates, promotions).
SMS messages comply with TCPA and HIPAA: individuals may opt out by replying “STOP”, and email offers an unsubscribe link.
Messages do not share your contact or health information with unaffiliated third parties for marketing.
4. Cookie Consent & Tracking Technologies
We use cookies and similar tracking technologies only after obtaining explicit consent from users. Users can opt in or out via our cookie banner/settings.
If tracking technologies may collect or transmit PHI, we require execution of a Business Associate Agreement (BAA) with vendors and ensure HIPAA compliance, or we remove non‑compliant scripts
Consent banners alone are not HIPAA‑valid, so PHI-associated tracking is only enabled when BAA and proper authorization are in place.
5. User Responsibilities
You agree not to misuse the Site or communications. Do not attempt unauthorized access, data extraction, or interfere with operations.
You must provide accurate information and safeguard your own credentials/access.
6. Intellectual Property
All content (text, images, logos) is owned by Comprehensive Spine and Joints. No reproduction without written consent.
7. Disclaimer of Warranties
Services are provided “as is” without warranty. We disclaim any implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
8. Limitation of Liability
To the maximum extent permitted by law, the Company is not liable for indirect, incidental, special, or consequential damages from Site usage, communications, or HIPAA-related processing.
9. Breach Notification
In the event of a breach of unsecured PHI, we will follow the HIPAA Breach Notification Rule: notifying affected individuals, HHS, and, where applicable, the media in a timely manner
10. Changes to Terms
We may update these Terms at any time and will post notice on this page with the updated effective date. Continued use constitutes acceptance.
11. Contact Information
For questions regarding these Terms, HIPAA compliance, or privacy concerns, contact us at +1 844‑488‑0011 or via the contact form on our Site.
12. Privacy Policy
Our Privacy policy is outlines at https://lp.orthospine-md.org/privacy-policy