Last Updated: 01-08-2026
At Eastern Medical Group (“EMG,” “we,” “us,” or “our”), we are committed to protecting the privacy and security of our patients, users, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable U.S. laws.
1. Information We Collect
We may collect the following types of information:
a. Personal Information
-
Full name
-
Date of birth
-
Mailing and physical address
-
Email address
-
Phone number
-
Emergency contact information
b. Protected Health Information (PHI)
-
Medical history
-
Diagnoses
-
Test results
-
Treatments and care plans
-
Health insurance information
All medical information is considered Protected Health Information (PHI) under HIPAA.
c. Electronic Submissions
Information submitted through electronic forms, including but not limited to patient intake and consent forms, is collected through Updox, a secure platform integrated with our Electronic Health Record (EHR) system.
2. Patient Consent
All data provided to Eastern Medical Group is collected only with the patient’s informed consent. Consent is obtained through secure Updox electronic forms, including but not limited to:
By completing and submitting these forms, patients expressly authorize Eastern Medical Group to collect, use, and store their information in accordance with this Privacy Policy and applicable laws.
3. How We Use Information
We use the collected information to:
-
Provide medical care and healthcare services
-
Maintain and manage electronic health records (EHR)
-
Coordinate treatment and continuity of care
-
Process billing, insurance claims, and administrative operations
-
Communicate with patients regarding appointments, care, and services
-
Comply with legal, regulatory, and healthcare obligations
4. HIPAA Compliance
Eastern Medical Group fully complies with HIPAA and maintains appropriate administrative, technical, and physical safeguards to protect the confidentiality, integrity, and availability of Protected Health Information.
We do not disclose medical information without patient authorization except when:
-
Required by law
-
Necessary for treatment, payment, or healthcare operations
-
Required for public health, safety, or legal obligations
5. Data Security
We implement industry-standard security measures, including:
-
Secure and encrypted electronic systems
-
Restricted access to sensitive information
-
HIPAA-compliant platforms such as Updox and our EHR system
-
Ongoing staff training on privacy and data protection
6. Information Sharing
We may share information only with:
-
Healthcare providers involved in patient care
-
Insurance companies and billing entities
-
HIPAA-compliant technology and service providers (including Updox and EHR vendors)
-
Government or legal authorities when required by law
We do not sell, rent, or trade personal or medical information.
7. Patient Rights
Under HIPAA, patients have the right to:
-
Access their medical records
-
Request corrections or amendments
-
Request restrictions on certain uses or disclosures
-
Receive an accounting of disclosures
-
File a complaint without fear of retaliation
To exercise these rights, please contact us using the information below.
8. Data Retention
We retain personal and medical information for the period required by federal and state laws. Once retention requirements are met, information is securely destroyed.
9. Changes to This Policy
Eastern Medical Group reserves the right to update this Privacy Policy at any time. Any changes will be posted on our website with an updated effective date.
10. Contact Information
If you have any questions about this Privacy Policy or how your information is handled, please contact:
Eastern Medical Group
Email: info@easternmg.com
Phone: (305) 800-9080