Privacy Policy

---

Peak Midlife Solutions LLC
2804 W Northern Lights Blvd
Anchorage, AK 99517
Phone: (907) 312‑5345  |  Email: peakmidlifesolutions@gmail.com

Effective Date: July 14, 2025
Last Updated: July 14, 2025

Introduction

Peak Midlife Solutions LLC (“we,” “us,” “our,” or “the Practice”) is committed to protecting the privacy and security of your personal information and Protected Health Information (“PHI”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit peakmidlifesolutions.com, use our services, or interact with us.

This Policy applies to all information collected through our Website, our HIPAA‑compliant EHR system and patient portal (OptiMantra), email communications, and any other digital platforms we operate. It is intended to work in conjunction with our Notice of Privacy Practices.

Scope & Applicability

• Geography: We serve only Alaska residents and do not target or collect data from individuals in other states.
• Age: We do not knowingly collect information from anyone under age 18.

Information We Collect

1. Website (Non‑PHI)

• Contact & Newsletter Forms: Name, email address, phone number.
• General Inquiries: Records of communications via Website forms or email—do not share medical details here.
• Usage Data: IP address, browser type, operating system, referring website, pages viewed, and timestamps (collected via cookies and similar technologies).

2. Patient Portal & EHR (PHI)

All PHI is collected and stored only in OptiMantra under a signed Business Associate Agreement. This includes:

• Medical history, treatment records, appointment details, and payment information (cash‑based practice; insurance only for referrals).

3. Third‑Party Sources

With proper authorization, we may receive PHI from other healthcare providers for treatment coordination or referrals.

How We Use Your Information

A. Website Data

• Respond to inquiries and scheduling requests
• Send newsletters, practice updates, and educational content (opt‑out any time)
• Analyze Website usage to improve functionality and user experience

B. PHI (per HIPAA)

• Treatment: Coordinate and manage healthcare services; share with other providers as authorized.
• Payment: Limited to cash‑based billing and coordination of any insurer reimbursement requests.
• Operations: Quality assurance, staff training, practice management.
• Legal & Emergency: Required disclosures (e.g., disease reporting, court orders) and emergency care.

Uses & Disclosures Requiring Authorization

Except as described above and in our Notice of Privacy Practices, we will not use or disclose your PHI without your written authorization. You may revoke any such authorization in writing, except where we have already taken action in reliance on it.

Marketing & Sale of PHI

• Appointment reminders and information about treatment alternatives are “health care operations” and do not require your authorization.
• Any other marketing communications or sale of your PHI will occur only with your written authorization.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. Our consent banner lets you Accept All, Reject Non‑Essential, or Manage Preferences at any time.

For details on the specific cookies we use, their purposes, and how to manage them, please see our standalone Cookie Policy.

Data Security

• Website (Non‑HIPAA): SSL/TLS encryption for all traffic.
• EHR (HIPAA‑Compliant): Encryption in transit and at rest; access controls; audit logs; regular risk assessments; staff training; incident response; physical safeguards.

While we employ industry‑standard measures, no system is 100% secure.

Data Retention

• Patient Records: Retained for a minimum of seven years following the date of last service, per Alaska law.
• Website Data: Retained until you unsubscribe or request deletion.

Your Rights

Under HIPAA and applicable law, you have the right to:

1. Access & Copy: Receive your PHI in the format you request within 30 days of a written request.
2. Amend: Request corrections to your PHI.
3. Restrict: Request limits on uses or disclosures of your PHI (we will honor reasonable requests).
4. Accounting of Disclosures: Obtain a list of certain disclosures of your PHI from the past six years.
5. Confidential Communications: Specify alternative communications methods or locations.
6. Paper Copy of Notice: Request a paper copy of this Privacy Policy or our Notice of Privacy Practices at any time, even if you agreed to receive it electronically.
7. Breach Notification: Be notified of a breach of your unsecured PHI, as required by law.

Complaints

If you believe your privacy rights have been violated, you may:

• File a written complaint with our Privacy Officer (no retaliation will occur).
• File a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights, online at https://www.hhs.gov/ocr/privacy/hipaa/complaints or by mail to:
     U.S. Department of Health & Human Services
     200 Independence Avenue, S.W.
     Room 509F, HHH Building
     Washington, D.C. 20201

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will post the revised version here and update the “Last Updated” date above.

Contact

Privacy Officer: Kari Ivany
Peak Midlife Solutions LLC
2804 W Northern Lights Blvd, Anchorage, AK 99517
Phone: (907) 312‑5345  |  Email: peakmidlifesolutions@gmail.com

Please review our Notice of Privacy Practices and Cookie Policy for more detail on those topics.