Privacy Policy

Privacy Policy

Your privacy is important to us. It is ReNova Health’s policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://renovahealthclinics.com/, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of November 21, 2025

Last updated: November 21, 2025

Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

  • Device Type
  • Operating system
  • Geo-location data

Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal Information

We may ask for personal information – for example, when you submit content to us, when you subscribe to our newsletter or when you contact us — which may include one or more of the following:

  • Name
  • Email
  • Phone/mobile number

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

  • Sign up to receive updates from us via email or social media channels
  • Use a mobile device or web browser to access our content
  • Contact us via email, social media, or on any similar technologies
  • When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

  • to provide you with our platform’s core features and services
  • to enable you to customize or personalize your experience of our website
  • to contact and communicate with you
  • for advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you

We may combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources. For example, Our marketing and market research activities may uncover data and insights, which we may combine with information about how visitors use our site to improve our site and your experience on it.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring you do not make your personal information publicly available via our platform.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. For example, if you have provided us with personal information such as an email address when contacting us about a specific enquiry, we may retain this information for the duration of your enquiry remaining open as well as for our own records so we may effectively address similar enquiries in future. If your personal information is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

  • a parent, subsidiary or affiliate of our company
  • third-party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, analytics, error loggers, debt collectors, maintenance or problem-solving providers, professional advisors, and payment systems operators
  • our employees, contractors, and/or related entities
  • our existing or potential agents or business partners
  • credit reporting agencies, courts, tribunals, and regulatory authorities, in the event you fail to pay for goods or services we have provided to you
  • courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
  • third parties, including agents or sub-contractors who assist us in providing information, products, services, or direct marketing to you
  • third parties to collect and process data
  • an entity that buys, or to which we transfer all or substantially all of our assets and business

Third parties we currently use include:

  • Google Analytics
  • EverPatient

Your Rights and Controlling Your Personal Information

Your choice: By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Marketing permission: If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.

Access: You may request details of the personal information that we hold about you.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information. Unless your personal information is required to provide you with a particular service or offer (for example providing user support), we will not deny you goods or services and/or charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, or provide you with a different level or quality of goods or services.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe: To unsubscribe from our email database or opt-out of communications (including marketing communications), please contact us using the details provided in this privacy policy, or opt-out using the opt-out facilities provided in the communication. We may need to request specific information from you to help us confirm your identity.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Right to Know and Delete

You have rights to delete your personal information we collected and know certain information about our data practices in the preceding 12 months. In particular, you have the right to request the following from us:

  • The categories of personal information we have collected about you;
  • The categories of sources from which the personal information was collected;
  • The categories of personal information about you we disclosed for a business purpose or sold;
  • The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
  • The business or commercial purpose for collecting or selling the personal information; and
  • The specific pieces of personal information we have collected about you.

To exercise any of these rights, please contact us using the details provided in this privacy policy.

Shine the Light

In addition to the rights discussed above, you have the right to request information from us regarding the manner in which we share certain personal information as defined by applicable statute with third parties and affiliates for their own direct marketing purposes.

To receive this information, send us a request using the contact details provided in this privacy policy. Requests must include “Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code.

Additional Disclosures for Australian Privacy Act Compliance (AU)

International Transfers of Personal Information

Where the disclosure of your personal information is solely subject to Australian privacy laws, you acknowledge that some third parties may not be regulated by the Privacy Act and the Australian Privacy Principles in the Privacy Act. You acknowledge that if any such third party engages in any act or practice that contravenes the Australian Privacy Principles, it would not be accountable under the Privacy Act, and you will not be able to seek redress under the Privacy Act.

HIPAA Disclosure

HIPAA requires that we provide you with a Notice of Privacy Practices (the Notice) for use and disclosure of PHI for treatment, payment and health care operations. The Notice explains HIPAA and its application to your PHI in greater detail. In general, The HIPAA privacy rule gives individuals the right to request a restriction on uses and disclosures of their protected health information (PHI). The individual is also provided the right to request confidential communications or that a communication of PHI be made by alternative means, such as sending correspondence to the individual’s office instead of the individual’s home.

Use and Disclosure of Protected Health Information:

For Treatment – We use and disclose your health information internally in the course of your treatment. If we wish to provide information outside of our practice for your treatment by another health care provider, we will have you sign an authorization for release of information. Furthermore, an authorization is required for most uses and disclosures of psychotherapy notes.

For Payment – We may use and disclose your health information to obtain payment for services provided to you.

For Operations – We may use and disclose your health information as part of our internal operations. For example, this could mean a review of records to assure quality. We may also use your information to tell you about services, educational activities, and programs that we feel might be of interest to you.

Client Rights:

Right to Treatment – You have the right to ethical treatment without discrimination regarding race, ethnicity, gender identity, sexual orientation, religion, disability status, age, or any other protected category.

Right to Confidentiality – You have the right to have your health care information protected. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will agree to such unless a law requires us to share that information.

Right to Request Restrictions – You have the right to request restrictions on certain uses and disclosures of protected health information about you. However, we are not required to agree to a restriction you request.

Right to Receive Confidential Communications by Alternative Means and at Alternative Locations – You have the right to request and receive confidential communications of PHI by alternative means and at alternative locations.

Right to Inspect and Copy – You have the right to inspect or obtain a copy (or both) of PHI. Records must be requested in writing and release of information must be completed. Furthermore, there is a copying fee charge of 1.50 per page. Please make your request well in advance and allow 2 weeks to receive the copies. If we refuse your request for access to your records, you have a right of review, which we will discuss with you upon request.

Right to Amend – If you believe the information in your records is incorrect and/or missing important information, you can ask us to make certain changes, also known as amending, to your health information. You have to make this request in writing. You must tell us the reasons you want to make these changes, and we will decide if it is and if we refuse to do so, we will tell you why within 60 days.

Right to a Copy of This Notice – If you received the paperwork electronically, you have a copy in your email. If you completed this paperwork in the office at your first session a copy will be provided to you per your request or at any time.

Right to an Accounting – You generally have the right to receive an accounting of disclosures of PHI regarding you. At your request, we will discuss with you the details of the accounting process.

Right to Choose Someone to Act for You – If someone is your legal guardian, that person can exercise your rights and make choices about your health information; we will make sure the person has this authority and can act for you before we take any action.

Right to Choose – You have the right to decide not to receive services with us. If you wish, we will provide you with the names of other qualified professionals.

Right to Terminate – You have the right to terminate services with us at any time without any legal or financial obligations other than those already accrued. We ask that you discuss your decision with us in session before terminating or at least contact must be made by phone letting us know you are terminating services.

Right to Release Information with Written Consent – With your written consent, any part of your record can be released to any person or agency you designate. Together, we will discuss whether or not we think releasing the information in question to that person or agency might be harmful to you.

Clinician Duties:

We are required by law to maintain the privacy of PHI and to provide you with a notice of our legal duties and privacy practices with respect to PHI. We reserve the right to change the privacy policies and practices described in this notice. Unless we notify you of such changes, however, we are required to abide by the terms currently in effect. If we revise our policies and procedures, we will provide you with a revised notice in office during our session.

The Privacy Rule generally requires healthcare providers to take reasonable steps to limit the use or disclosure of PHI to the minimum necessary to accomplish the intended purpose. These provisions do not apply to uses or disclosures made pursuant to an authorization requested by the individual. Healthcare entities must keep records of PHI disclosures.  Information provided below, if completed properly, will constitute an adequate record.

Note: Uses and disclosures of PHI may be permitted without prior consent in an emergency.

Use of Artificial Intelligence for Clinical Documentation

ReNova Health uses DeepCuraAI Scribe, an AI-powered ambient documentation tool, to assist our clinicians with creating accurate clinical notes during patient encounters. This section explains how this technology works, how your protected health information (PHI) is handled, and what rights you have.

How DeepCuraAI Scribe Works

During your visit, DeepCuraAI Scribe may listen to the clinical conversation between you and your provider and automatically generate structured medical notes (such as SOAP notes or progress notes). This tool helps our clinicians focus on you rather than on manual documentation, improving both the quality of your care and the accuracy of your medical records. All AI-generated notes are reviewed and approved by your clinician before being finalized in your chart.

HIPAA Compliance and Business Associate Agreement

DeepCuraAI is a Business Associate of ReNova Health under HIPAA. We have executed a Business Associate Agreement (BAA) with DeepCura that governs the permissible use of your PHI, requires appropriate technical and administrative safeguards, and mandates prompt breach notification. Your PHI is encrypted in transit and at rest, and DeepCura’s platform is HIPAA-compliant and aligned with SOC 2 security standards.

How Your Data Is Used

Your PHI processed through DeepCuraAI Scribe is used solely for the purpose of clinical documentation — a permitted healthcare operations use under HIPAA. Your data is never used to train AI models, shared with advertisers, or sold to third parties.

Audio Recording and Consent

The AI scribe tool operates using ambient audio capture during your clinical encounter. Please be aware:

  • Florida patients (Winter Garden location): Florida law requires the consent of all parties to a recorded conversation. By proceeding with your visit at our Winter Garden clinic after being informed of this notice, you are providing your consent to the use of ambient AI scribing. You may opt out at any time (see below).
  • Iowa patients (Ames location): Iowa is a one-party consent state; however, we believe in transparency and will inform you of this tool’s use at or before your visit.

Your Rights Regarding AI Documentation

You have the right to:

  • Opt out of AI-assisted documentation at any time without affecting your access to care. Simply inform your provider or our front desk staff before your appointment begins.
  • Review AI-generated notes as part of your medical record, and request corrections under your existing HIPAA right to amend (see “Right to Amend” above).
  • Request information about how your PHI was used in connection with AI documentation tools.

Third-Party Disclosure

DeepCuraAI (deepcura.com) has been added to our list of third-party service providers who may receive or process your information on our behalf. This is consistent with our disclosure obligations under HIPAA and this Privacy Policy.

If you have any questions about our use of AI documentation tools or wish to opt out, please contact us at the details listed in the Contact Us section of this policy.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

Jacob Miller
https://renovahealthclinics.com/contact-us/