top of page

Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their 'Personally Identifiable Information' (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.


What personal information do we collect from the people that visit our blog, website or app?


When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, phone number, convenient time or other details to help you with your experience.


When do we collect information?


We collect information from you when you fill out a form or enter information on our site.

How do we use your information?


To follow up with them after correspondence (live chat, email or phone inquiries) 

How do we protect your information?


Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.


We use cookies to:
  • Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.

  • You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.

  • If you turn cookies off, Some of the features that make your site experience more efficient may not function properly.It won't affect the user's experience that make your site experience more efficient and may not function properly.


Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. 


HIPAA Privacy policy


This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. 


Federal regulations developed under the Health Insurance Portability and Accountability Act (HIPAA) requires that the practice provide you with this Notice Regarding Privacy of Personal Health Information. The Notice describes (1) how the practice may use and disclose your protected health information, (2) your rights to access and control your protected health information in certain circumstances, and (3) the practices' duties and contact information

The Use and Disclosure of Protected Health Information in Treatment, Payment, Health Care Operations, and Other Disclosures 


Your protected health information may be used and disclosed by the practice in the course of providing treatment, obtaining payment for treatment, conducting health care operations, or reviewing for research/clinical trial purposes. Any disclosures may be made in writing, electronically, by facsimile, or verbally. The practice may also use or disclose your protected health information in other circumstances if you authorize the use or disclosure, or if state law or the HIPAA privacy regulations authorize the use or disclosure.




The practice may use and disclose your protected health information in the course of providing or managing your health care as well as any related services. For the purpose of treatment, the practice may fax, phone, mail, or electronically share your health care records with a third party. For example, the practice may disclose your protected health information in order to complete the following: 

  • Fulfill a medication prescription 

  • Order imaging or lab at a facility  

  • Share information with another physician who is administering your allergy injections, a provider conducting primary care, or a provider conducting care upon a referral.  

  • Sharing information with state of Colorado Vaccine Registry (CIIS)  

  • Submit PHI requested for insurance reviews or audits  

  • In addition, the practice may disclose protected health information in order to:  

    • Share information with other physicians or health care providers for treatment activities of those other providers; i.e. ENT, Dermatology, Gastroenterologist. 

    • Share information with other professionals involved in the patient’s healthcare such as schools, day care or college health centers.




Photographs may be used to document response to treatment, and will not be used outside of the patient record for any purpose other than medical treatment. Any photos used for marketing purposes will be on an individual request and a Media Release form will be completed prior to use. Photos will be taken with a camera, saved to the chart and then deleted from the device.




When needed, the practice will use or disclose your protected health information to obtain payment for its services. Such uses or disclosures may include: 

  • Disclosures to your health insurer to get approval for a recommended treatment. 

  • Determine whether you are eligible for benefits or whether a particular service is covered under your health plan. 

  • Disclose PHI to your insurance company to demonstrate the medical necessity of the care or for utilization review when required to do so by your insurance company.

  • Disclose your PHI to another provider where that provider is involved in your care and requires the information to obtain payment. 

  • Patients are offered to have a Credit Card on File for payments. If you agree to the terms of “Credit Card on File” the payment vendor will print out an agreement to encompass privacy guidelines.




The practice may use or disclose your protected health information:  

  • When needed for the practice's health care operations for the purposes of management or administration of the practice health care operations may include: Quality evaluations and improvement activities 

  • Employee review activities and training programs;  

    • Accreditation, certification, licensing, or credentialing activities 

  • Reviews and audits such as compliance reviews, medical reviews, legal services, and maintaining compliance programs 

  • Business management and general administrative activities. For instance, the practice may use, as needed, protected health information of patients to review their treatment course when making quality assessments regarding allergy care or treatment 

  • The practice agrees to comply with all Federal Regulations and requests for PHI 

  • Record retention is in compliance with state regulations and then destroyed; as an adult, records are kept for 8 years from the last date of service. Charts for minors under 18 years old chart is kept until age and then 7 years before destruction. Off-site storage is used for record retention. 

  • Fees apply for record requests in compliance with Colorado State regulations. 


Law Enforcement Disclosures 


The practice complies with all requests from Law Enforcement Agencies regarding PHI. 

  • To report PHI to a law enforcement official reasonably able to prevent or lessen a serious and imminent threat to the health or safety of an individual or the public 

  • To report PHI that the covered entity in good faith believes to be evidence of a crime that occurred on the premises.  

  • To alert law enforcement to the death of the individual, when there is a suspicion that death resulted from criminal conduct.  

  • When responding to an off-site medical emergency, as necessary to alert law enforcement to criminal activity.  

  • To report PHI to law enforcement when required by law to do so (such as reporting gunshots or stab wounds).  

  • To comply with a court order or court-ordered warrant, a subpoena or summons issued by a judicial officer, or an administrative request from a law enforcement official (the administrative request must include a written statement that the information requested is relevant and material, specific and limited in scope, and de-identified information cannot be used). 


To respond to a request for PHI for purposes of identifying or locating a suspect, fugitive, material witness or missing person, but the information must be limited to basic demographic and health information about the person.


Other Uses and Disclosures 


As part of treatment, payment, healthcare operations, or reviewing for research/clinical trial purposes, the practice may also use or disclose your protected health information to:  

  • Request a photo ID at visit time  

  • Leave an appointment reminder or message for referral needs on your telephone voicemail, email or text  

  • Inform you of potential treatment alternatives or options, which may include, but not limited to, normal lab or x-ray results  

  • Inform you of health-related benefits or services that may be of interest to you 

  • Leave a message to discuss an opportunity to enroll you in ongoing Asthma Allergy Research; and/ or continuation in research studies/ clinical trials 

  • Leave a reasonable and limited message on one of following; home, work, cell, voicemail/ text or email


Marketing use and disclosure: 


  • Individuals may be contacted for consent of photo or video production. There will be a media release to sign. 

  • While patients may disclose their own PHI through social media outlets and/or public review websites, Ashok PC remains compliant with HIPAA.


Uses and Disclosures Authorized by You 


Other than the circumstances described above, the practice will not disclose your health information unless you provide written authorization. You may revoke your authorization in writing at any time except to the extent that the practice has taken action in reliance upon the authorization.

The Practice's Duties 


The practice is required to ensure the privacy of your health information and to provide you with this notice of your rights and the practice's duties and procedures regarding your privacy. The practice must abide by the terms of this Notice, and may be amended periodically. The practice reserves the right to change the terms of this notice and to make the new notice provisions effective for all protected health information that the practice collects and maintains. If the practice alters its notice, the practice will provide a copy of the revised notice through regular mail, in-person contact, or electronically.

Privacy policy updates

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. 


If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at

bottom of page