Privacy Policy

This Privacy Policy explains how Healing Soulutions (the name under which BT RPN PLLC and Kristina Castro Nurse Practitioner in Family Health, PLLC provide care, with Healing Soulutions LLC as their management company) collects, uses, and safeguards information submitted through this website and our patient portal at portal.healingsoulutions.care. Protected Health Information you share as a patient is separately governed by our HIPAA Notice of Privacy Practices, which is available on this website and provided in your patient portal or on your booking form.

Information We Collect

We collect information you provide through our booking form and patient portal, such as your name, contact details, date of birth, address, appointment preferences, and the intake and health information you enter to request care. In the portal we also keep your visits, lab results, protocols, messages, invoices, and a log of account activity. Payment card details are collected and processed by our payment processors and are not stored on our own servers.

Website Analytics and Cookies

Parts of this website use Vercel Web Analytics to count page visits. It does not use advertising cookies, and visits to our booking page are not counted. The patient portal uses cookies only to keep you signed in and secure.

How We Use Information

We use your information to schedule and provide care, communicate with you about appointments and billing, comply with legal obligations, and improve our services. We do not sell your personal information.

Service Providers

We share information only as needed with vendors that help us operate, and as required by law. They include Jotform (booking and intake forms), Google Cloud (portal hosting), Neon (portal database), Microsoft 365 (email), Stripe (payment processing), and Vercel (website hosting and analytics). Vendors that handle Protected Health Information for us do so under a business associate agreement.

Retention

Medical records are kept for at least six years as required by New York law, and records of minor patients until at least one year after the patient turns 21. Other information is kept only as long as needed for the purposes above or as the law requires.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, consistent with the New York SHIELD Act (General Business Law §899-bb) and, for health information, HIPAA. No method of transmission or storage is completely secure, and standard email and text messages are not fully secure methods of communication.

Your Choices & Rights

You may request access to, correction of, or deletion of personal information, and may opt out of non-essential communications, subject to legal and recordkeeping requirements. Health-record rights are addressed in our HIPAA Notice of Privacy Practices.

Changes

We may update this policy from time to time; the effective date above reflects the latest revision.

Contact

Questions about privacy? Email info@healingsoulutions.care or call (585) 747-2215.