Privacy Policy

Introduction

At Origins Integrative Health, your privacy is not just a legal obligation — it is a reflection of the respect and trust we bring to every patient relationship. This Privacy Policy explains how we collect, use, store, protect, and share information when you visit our website at www.originspdx.com, submit a form, use our patient portal, or interact with us online.

Please read this policy carefully. By using our website you agree to the practices described here. If you do not agree with this policy please do not use our website.

1. Who We Are

Origins Integrative Health

1421 SE Ankeny Street Portland, Oregon

📧 info@originspdx.com

📞 503-314-2176

🌐 originspdx.com

Origins Integrative Health is an integrative medicine clinic providing naturopathic medicine, acupuncture, mental health, regenerative therapies, and related services to patients in Portland, Oregon and throughout Oregon via telehealth.

2. Information We Collect

We collect two types of information through our website:

A. Information You Provide Directly

• Personal identification information — your name, date of birth, and gender.Contact information — email address, phone number, and mailing address.
• Health-related information — the nature of your inquiry, services of interest, symptoms, or health concerns you share voluntarily in a form or message.
• Insurance information — your insurance provider and plan details.
• Payment information — credit card or payment details when provided for services.
• Communications — any messages, questions, or feedback you send us directly

B. Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies, including:

• Device information — your device type, operating system, and browser type.
• Usage data — pages visited, time spent on pages, links clicked, and referring URLs.
• IP address — your approximate geographic location based on your IP address.
• Cookies and tracking data — described in detail in Section 7 below

C. Information From Third Parties

We may receive information about you from third party sources including:

• Scheduling platforms — if you book an appointment through an integrated scheduling tool.
• Insurance verification services — when verifying your insurance coverage.
• Referral sources — if another provider or patient refers you to our practice

3. How We Use Your Information

Origins Integrative Health uses the information we collect for the following purposes:

• Clinical & Administrative Purposes.
• To schedule and confirm appointments.
• To verify insurance coverage and process billing.
• To communicate with you about your care — including appointment reminders, follow-up messages, and care-related information.
• To maintain accurate administrative and clinical records.
• To coordinate care with other members of your healthcare team with your authorization.
• Website & Communication Purposes.
• To respond to your inquiries, questions, and form submissions.
• To send appointment reminders and administrative communications.
• To send newsletters, health education content, and clinic updates — if you have opted in to receive them.
• To improve the functionality and user experience of our website.
• To analyze how our website is used and optimize its performance.
• Legal & Compliance Purposes.
• To comply with applicable federal and state laws including HIPAA.
• To enforce our Terms of Service and other clinic policies.
• To protect the rights, safety, and property of Origins Integrative Health, our providers, staff, and patients.
• To respond to legal requests, court orders, or government inquiries as required by law

4. HIPAA & Protected Health Information

Origins Integrative Health is a HIPAA-covered entity. Any Protected Health Information (PHI) — meaning individually identifiable health information — that you share with us is handled in strict accordance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations.

Your HIPAA rights include:

• The right to access and obtain a copy of your health records.
• The right to request corrections to your health records.
• The right to request restrictions on how we use or disclose your PHI.
• The right to receive an accounting of disclosures of your PHI.
• The right to request confidential communications.
• The right to file a complaint if you believe your privacy rights have been violate

Our full Notice of Privacy Practices — which describes in detail how we may use and disclose your protected health information — is available at our clinic and upon request. Please contact us at info@originspdx.com to request a copy.

Important note about website forms: While we make every effort to protect information submitted through our website forms, please be aware that submitting health information through a standard web form is not the same as submitting information through our HIPAA-secured patient portal. For sensitive health information, we recommend using our secure patient portal through AthenaOne.

5. How We Share Your Information

Origins Integrative Health does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

With Your Healthcare Team With your authorization, we may share relevant health information with other members of your care team — including referring providers, specialists, or other practitioners involved in your treatment.

With Service Providers We work with trusted third party service providers who assist us in operating our website and delivering our services — including:

• Electronic Health Record system — AthenaOne.
• Website hosting and technology providers.
• Email and communication platforms — including Flodesk for newsletters.
• Payment processing services.
• Scheduling and appointment management tools.
• These service providers are contractually required to protect your information and use it only for the purposes for which it was disclosed.
• For Legal Compliance We may disclose your information when required to do so by law — including in response to a valid subpoena, court order, or government request — or when we believe disclosure is necessary to protect the safety of our patients, staff, or the public.
• Business Transfers In the event of a merger, acquisition, or sale of all or part of our practice, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We will never:

• Sell your personal information to advertisers or data brokers.
• Share your health information for marketing purposes without your explicit consent.
• Disclose your information to third parties for their own marketing use

6. Oregon Privacy Law

In addition to HIPAA, Origins Integrative Health complies with Oregon's health information privacy laws — which in some cases provide greater protection than federal law. Oregon law places specific restrictions on the use and disclosure of certain categories of sensitive health information including:

• Mental health records
• Substance use disorder records
• Reproductive health information
• HIV and AIDS-related information
• Genetic information

These categories of information receive heightened protection and will only be used or disclosed in strict accordance with applicable Oregon law and with your explicit authorization where required.

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and help us understand how our website is used.

What are cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember certain information about your visit.

Types of cookies we use:

• Essential cookies — necessary for the website to function properly. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with our website so we can improve it. We may use tools such as Google Analytics for this purpose.
• Marketing cookies — used to deliver relevant content and track the effectiveness of our communications. These are only active if you have opted in.
• Preference cookies — remember your settings and preferences to improve your experience on return visits.

Your cookie choices: You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific websites
• Block all cookies
• Receive a notification when a cookie is set

8. Email Communications & Marketing

If you subscribe to our email newsletter or opt in to receive marketing communications from Origins Integrative Health — through Flodesk or any other platform — we will use your email address to send you:

• Health education content and blog articles
• Clinic news and updates
• Service announcements and promotions
• Event invitations and community updates

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any email we send — or by contacting us directly at info@originspdx.com. We will process your unsubscribe request promptly.

9. SMS Communications and Opt-In Consent

We obtain your express opt-in consent before sending you SMS text messages. You may opt in by:

• Checking the SMS consent box on a form on our website.
• Providing your mobile number and consent verbally during a phone call or in person, which we document in your record.
• Texting our published business number at 503-314-2176.

By opting in, you authorize Origins Integrative Health LLC to send SMS text messages to the mobile number you provide, which may be sent using automated means. Messages may include appointment reminders and confirmations, scheduling updates, care coordination, billing notifications, and replies to your inquiries. Message frequency varies. Message and data rates may apply. Consent is not a condition of receiving care or of purchasing any service. Reply HELP for help. Reply STOP at any time to unsubscribe.

SMS communications are available only to individuals 18 years of age or older. By opting in, you confirm that you are at least 18 years old and that you are the subscriber of the mobile number provided, or that you have authority to opt that number in.

Mobile information, including text messaging originator opt-in data and consent, will not be shared with third parties or affiliates for marketing or promotional purposes. This information is disclosed only to the aggregators and service providers that deliver our text messages on our behalf, and it is never sold.

• Opt-out mechanism: reply STOP to any message, or contact us at 503-314-2176 or info@originspdx.com.
• Data retention: SMS communications and associated data are retained for 90 days and then deleted, unless a longer retention period is required by law or as part of your medical record.
• TCPA compliance: We comply with the Telephone Consumer Protection Act and maintain a list of numbers that have asked not to receive messages.
• Protected health information: We limit the clinical detail included in text messages. Please do not send sensitive health information by text. Use the patient portal for clinical communication.

10. Data Security

Origins Integrative Health takes the security of your personal information seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• Secure HTTPS encryption on our website
• HIPAA-compliant electronic health records through AthenaOne
• Restricted access to personal and health information — limited to authorized staff and providers on a need-to-know basis
• Regular review of our security practices and procedures
• Staff training on HIPAA compliance and data security

Please be aware that no method of internet transmission or electronic storage is completely secure. While we work diligently to protect your information, we cannot guarantee absolute security. If you have reason to believe your information has been compromised please contact us immediately at info@originspdx.com.

11. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected — including compliance with legal, accounting, and reporting obligations.

Medical records are retained in accordance with Oregon law — which requires retention of adult patient records for a minimum of 10 years from the date of last treatment. Records for minor patients are retained until the patient reaches the age of majority plus the applicable retention period.

When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policy and applicable law.

12. Children's Privacy

Our website is not directed to children under the age of 13 and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13 please contact us immediately at info@originspdx.com and we will take prompt steps to delete that information.

For patients under the age of 18, a parent or legal guardian must authorize the collection and use of their health information in accordance with HIPAA and Oregon law.

13. Third Party Websites

Our website may contain links to third party websites. This Privacy Policy applies only to our website and does not cover the privacy practices of third party sites. We encourage you to review the privacy policies of any third party website you visit. Origins Integrative Health is not responsible for the privacy practices or content of third party websites.

14. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Right to access — the right to request a copy of the personal information we hold about you.
• Right to correction — the right to request that we correct inaccurate or incomplete information.
• Right to deletion — the right to request that we delete your personal information in certain circumstances.
• Right to restriction — the right to request that we restrict the processing of your information in certain circumstances.
• Right to data portability — the right to receive your personal information in a structured, commonly used format.
• Right to object — the right to object to our processing of your personal information in certain circumstances.
• Right to withdraw consent — where we rely on your consent to process your information, you have the right to withdraw that consent at any time.
• To exercise any of these rights please contact us at:

📧 info@originspdx.com

📞 503-314-2176

• We will respond to your request within 30 days. Please note that some rights are subject to limitations under applicable law — including HIPAA — and we may need to verify your identity before processing your request.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will indicate the date of the most recent update at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of our website following the posting of any changes constitutes your acceptance of the updated policy. For significant changes we will make reasonable efforts to notify you directly — such as by email or a prominent notice on our website.

16. How to File a Privacy Complaint

If you believe your privacy rights have been violated you have the right to file a complaint with:

• Origins Integrative Health Please contact us first so we can attempt to resolve your concern directly: 📧 info@originspdx.com 📞 503-314-2176
• U.S. Department of Health and Human Services — Office for Civil Rights For HIPAA-related complaints: 🌐 www.hhs.gov/ocr 📞 1-800-368-1019
• Oregon Department of Justice For Oregon consumer privacy complaints: 🌐 www.doj.state.or.us 📞 503-378-4732
• We will never retaliate against you for filing a privacy complaint.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices please contact us:

Origins Integrative Health 1421 SE Ankeny Street Portland, Oregon

📧 info@originspdx.com

📞 503-314-2176

🌐 originspdx.com

We are committed to addressing your privacy concerns promptly and transparently.