Effective Date: 3/14/2025

Introduction
At Prosper Direct Primary Care (Prosper DPC), we are committed to protecting the privacy and security of our patients’ personal and medical information. This Privacy Policy explains how we collect, use, store, and safeguard information from our members, including communications conducted through RingCentral and other approved communication platforms.
By using our services, you acknowledge that you have read and agree to this Privacy Policy.
Information We Collect
We collect information necessary to provide direct primary care services and to communicate effectively with patients. This may include:

• Personal Identifiable Information (PII): Name, date of birth, address, phone number, email address, and payment information

• Medical Information: Health history, medications, treatment records, and other health-related data

• Communication Records: Phone calls, text messages, voicemails, and secure messages exchanged through RingCentral and other HIPAA-compliant platforms

How We Use Your Information
We use your information to:

• Provide medical care and maintain accurate health records

• Communicate appointment reminders, test results, and health-related updates

• Process membership payments and related administrative transactions

• Maintain compliance with applicable healthcare regulations, including HIPAA

• Improve patient care experience and office operations

We do not sell, rent, or share your personal information with third parties for marketing purposes.
SMS opt-in data and phone numbers collected for text messaging purposes will not be shared with third parties or affiliates for marketing purposes.
How We Protect Your Information
Prosper DPC uses secure, HIPAA-compliant systems to store and transmit patient information, including RingCentral for communication.
Security measures include:

• Encryption of communications (phone, text, and email where applicable)

• Access controls limiting data access to authorized personnel only

• Routine system monitoring, updates, and compliance checks

In the event of a data security incident, we will follow all applicable HIPAA notification requirements.
Patient Rights & Responsibilities
As a patient, you have the right to:

• Access your medical records and request corrections

• Request restrictions on certain uses of your information, where applicable

• Opt out of non-essential communications

• Request secure communication methods when available

• Terminate your membership at any time, subject to the terms of your membership agreement

Patients are responsible for providing accurate contact information and for communicating through approved, secure channels when required.
RingCentral & Third-Party Communication

• Prosper DPC uses RingCentral as a HIPAA-compliant communication platform for phone calls, text messages, and messaging services

• By communicating with Prosper DPC via RingCentral, you acknowledge that communications may be documented as part of your medical record and may be monitored for quality assurance and compliance

• Patients who prefer alternative secure communication methods may request options such as email or other HIPAA-compliant messaging platforms (e.g., Spruce Health, if applicable)

Changes to This Privacy Policy
Prosper DPC may update this Privacy Policy periodically to reflect changes in regulations, technology, or practice operations. Updates will be posted on our website, and patients may be notified via email or other standard communication methods when appropriate.
Contact Information
If you have questions about this Privacy Policy, please contact us:
Prosper Direct Primary Care
Email: info@prosperdpc.com
Phone: 321-386-6318
Website: www.prosperdpc.com
If you want, I can also:

• align this with HIPAA “Notice of Privacy Practices” language (more formal/legal)

• shorten it for a website footer version

• or convert it into a downloadable PDF policy document