NorthStar Concierge Med
$50|Month Direct Primary Care | Family Practice
PRIVACY POLICY
Effective Date: October 24, 2024
Last Updated: September 7, 2026
NorthStar Concierge Med (“we,” “us,” “our,” or the “Practice”) respects your privacy and is committed to protecting the information you provide to us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, communicate with us electronically, submit an inquiry, request an appointment, or otherwise interact with our online services.
This Privacy Policy applies to information collected through northstarconciergemed.com and related online services. It does not replace our Notice of Privacy Practices, which describes how we may use and disclose protected health information (“PHI”) in connection with providing healthcare services.
By using our website or submitting information through our online services, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Depending on how you interact with us, we may collect the following categories of information:
Information You Provide Directly
You may provide information when you:
● Contact us through our website, email, telephone, text message, or other communication method;
● Request information about our DPC services;
● Request or schedule an appointment;
● Complete an online registration or membership form;
● Submit a question, comment, or inquiry;
● Subscribe to communications from us; or
● Otherwise voluntarily provide information to the Practice.
This information may include your name, address, email address, telephone number, date of birth, insurance information if applicable, payment information, and other information you choose to provide.
If you submit health-related information through a secure patient portal, electronic health record, or other healthcare platform, that information may constitute PHI and will be handled in accordance with applicable HIPAA requirements and our Notice of Privacy Practices.
Information Collected Automatically
When you visit our website, certain information may be collected automatically, including:
● IP address;
● Browser type and version;
● Device type;
● Operating system;
● Pages visited;
● Date and time of visits;
● Referring website or webpage;
● General geographic information derived from your IP address; and
● Other technical or usage information.
We may use cookies and similar technologies to operate, secure, analyze, and improve our website.
2. How We Use Information
We may use information we collect for legitimate business and healthcare-related purposes, including to:
● Respond to questions and requests;
● Contact you regarding an inquiry or appointment;
● Provide information about our services;
● Schedule and manage appointments;
● Establish or administer a DPC membership;
● Process payments;
● Communicate with patients;
● Operate, maintain, and improve our website;
● Monitor website performance and security;
● Prevent fraud, abuse, or unauthorized activity;
● Comply with legal and regulatory requirements; and
● Carry out other purposes disclosed at the time information is collected or otherwise permitted by law.
We will not use information for purposes that are materially different from those described in this Privacy Policy without providing any notice required by applicable law.
3. Protected Health Information and HIPAA
If you become a patient of the Practice, information we create, receive, maintain, or transmit in connection with providing healthcare services may constitute Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (“HIPAA”).
Our use and disclosure of PHI are governed by applicable federal and state healthcare privacy laws and our Notice of Privacy Practices.
This website Privacy Policy should not be interpreted as replacing or modifying our Notice of Privacy Practices.
For information about your HIPAA rights and how we may use or disclose PHI, please review our Notice of Privacy Practices.
4. Information Submitted Through Our Website
Please do not submit highly sensitive medical information through ordinary website contact forms, email, or other unsecured communication methods unless specifically instructed by the Practice.
Website contact forms are generally intended for general inquiries, appointment requests, and similar communications. They may not provide the same protections as a secure patient portal or other designated healthcare communication system.
If you need to communicate sensitive medical information, please use the secure communication method provided by the Practice or contact us directly for instructions.
5. Sharing and Disclosure of Information
We do not sell your personal information for monetary consideration.
We may disclose information to third parties when reasonably necessary to operate our business, provide services, communicate with you, or comply with legal obligations.
Depending on the circumstances, these parties may include:
● Healthcare technology and electronic health record providers;
● Practice-management and scheduling providers;
● Payment processors and financial service providers;
● Website hosting and technology providers;
● Email, telephone, and text-message service providers;
● Information technology and cybersecurity providers;
● Professional advisers, such as attorneys, accountants, and consultants;
● Government agencies or law-enforcement authorities when required or permitted by law; and
● Other service providers that perform services on our behalf.
When required by applicable law, we require vendors that handle PHI on our behalf to enter into appropriate agreements, including Business Associate Agreements where applicable.
We may also disclose information when necessary to protect the rights, safety, property, or security of the Practice, our patients, or others, or as otherwise permitted by law.
6. Advertising, Analytics, Cookies, and Similar Technologies
We may use cookies, analytics tools, pixels, tags, or similar technologies to understand how visitors use our website, improve website functionality, measure the effectiveness of our communications, and maintain website security.
Depending on the tools we use, these technologies may collect information such as IP address, device information, browser information, pages visited, and interactions with the website.
We do not intentionally use website advertising or analytics technologies to collect or disclose PHI in violation of HIPAA.
Because healthcare-related website information can be sensitive, we take care when selecting and configuring analytics, advertising, and other third-party technologies.
If we use third-party advertising or analytics services, those services may process information according to their own privacy policies. We encourage you to review the privacy policies of third-party services that you use to interact with us.
You may be able to control cookies through your browser settings. Disabling cookies may affect certain website functionality.
7. Communications
If you provide us with your telephone number or email address, we may use that information to respond to your requests, communicate regarding appointments or your relationship with the Practice, provide administrative information, and, where permitted, send information about our services.
If you provide consent to receive marketing communications, you may withdraw that consent or opt out at any time by following the instructions provided in the communication or contacting us directly.
Opting out of marketing communications will not prevent us from sending communications that are necessary for your care, membership, appointments, transactions, or other legitimate administrative purposes.
8. Text Messages
If you elect to communicate with us by text message, standard messaging and data rates from your mobile carrier may apply.
Text messaging may be used for purposes such as appointment reminders, administrative communications, responses to requests, and other communications permitted by law.
You should not send sensitive medical information by ordinary text message unless the Practice has specifically instructed you to do so through an approved secure communication process.
You may opt out of non-essential text communications by following the instructions provided in the message or contacting the Practice.
9. Payment Information
If you make payments to the Practice online, your payment information may be processed by a third-party payment processor.
We may receive limited payment-related information necessary to administer your account, such as transaction details, payment status, or the last four digits of a payment card. Full payment card information may be processed directly by our payment provider.
Payment information is handled according to applicable law and the privacy and security practices of the payment processor.
10. Third-Party Websites and Services
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content, security, or policies of third-party websites or services. We encourage you to review the privacy policies of those third parties before providing them with personal information.
11. Data Retention
We retain information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, maintain appropriate business and healthcare records, comply with legal and regulatory requirements, resolve disputes, enforce agreements, and protect our rights.
Medical records and PHI may be retained for periods required by applicable federal or state law and professional requirements.
Different categories of information may therefore be retained for different periods.
12. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, disclosure, alteration, or destruction.
However, no website, electronic communication system, or method of transmitting information over the internet can be guaranteed to be completely secure.
You should use caution when transmitting sensitive information electronically and use secure communication methods provided by the Practice whenever available.
13. Your Privacy Choices and Rights
Depending on the type of information involved and applicable law, you may have rights concerning your personal information, including the ability to:
● Request access to certain information;
● Request correction of inaccurate information;
● Request information about how certain information is used or disclosed;
● Opt out of certain marketing communications;
● Request deletion of certain non-medical personal information, where legally permitted; or
● Exercise other rights provided by applicable law.
Because healthcare information is subject to specific legal requirements, requests involving medical records or PHI may be subject to additional procedures, limitations, and retention requirements.
To exercise an applicable privacy right, contact us using the information provided below.
14. Children’s Privacy
Our website is not intended to knowingly collect personal information directly from children under the age of 13 without appropriate parental or guardian involvement.
If we learn that we have collected personal information from a child in circumstances where collection was not appropriate or legally permitted, we will take reasonable steps to address the information in accordance with applicable law.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or services.
When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. Material changes may also be communicated through our website or other appropriate means when required by law.
Your continued use of our website after an updated Privacy Policy becomes effective constitutes your acknowledgment of the updated policy, to the extent permitted by law.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
NorthStar Concierge Med
248 River St N
Delano, MN 55328
Phone: 651-443-2582
Email: support@northstarconciergemed.com
Website: www.northstarconciergemed.com
For questions regarding your rights under HIPAA or our use and disclosure of PHI, please refer to our Notice of Privacy Practices.
This Privacy Policy is intended to describe our general website and information practices. It does not create a contract between you and the Practice and does not replace our Notice of Privacy Practices or any other agreement governing your relationship with the Practice.