Privacy Notice

1. Who we are

Meridian Imaging operates this appointment portal as a HIPAA-covered Covered Entity. The portal is used by referring physicians and our clinic staff to coordinate imaging studies and reports.

2. What information we collect

• Patient demographics (name, DOB, contact details).
• Appointment details (study type, body part, indication).
• Insurance information you upload.
• Appointment, study, and report metadata.
• Account and session data (login times, IP, audit events).

3. How we use it

Strictly for treatment, payment, and healthcare operations as defined by HIPAA. We do not sell or rent PHI. We do not use PHI for marketing without separate written authorization.

4. Who we share it with

• The treating imaging clinic and its authorized staff.
• The referring physician you submit on behalf of.
• Our subprocessors (hosting, error tracking — all under BAAs).
• Authorities, when required by law.

5. How we protect it

Encryption in transit (TLS) and at rest, role-based AccessPolicies, per-resource audit logging, and least-privilege practitioner identifiers. Sessions idle out after 15 minutes; absolute lifetime is 12 hours.

6. Your rights

You may request access, correction, an accounting of disclosures, and a copy of records. Email privacy@meridian.demo.

7. Breach notification

We will notify the clinic within 24 hours of discovering an incident that may affect PHI; the clinic notifies affected patients per HIPAA timelines.

8. Contact

Privacy Officer — privacy@meridian.demo

Meridian Imaging Center · 1200 Harbor Point Blvd, Suite 300, Springfield, IL 62701 · (555) 010-2400