Privacy Policy

NorthStarr Cardiothoracic Surgery (“we,” “us,” or “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, and protect information collected through our website and electronic communication services.

1. Information We Collect

We collect information to provide better services to our patients and website visitors. The types of information collected include:

  • Personal Information You Provide: When you fill out contact forms, schedule appointments, or register for patient services, you may provide personal details such as your name, phone number, email address, mailing address, and health-related inquiries.
  • Automated Usage Data (Google Analytics): When you navigate our website, we use Google Analytics to gather general, non-personally identifiable technical information. This includes your IP address, browser type, operating system, referring URLs, pages visited, and time spent on the site. Google Analytics uses cookies to collect this data to help us analyze website traffic and improve site usability.

2. How We Use Your Information

We use the information gathered on our website solely to:

  • Respond to patient inquiries and process appointment requests.
  • Deliver administrative notifications, healthcare-related information, and SMS alerts (if you have opted in).
  • Evaluate website performance and improve patient user experience.

3. We Never Sell Your Information

NorthStarr Cardiothoracic Surgery does not sell, rent, lease, or trade your personal information, mobile phone numbers, or website usage data to third parties under any circumstances.

All information collected is used strictly for internal operational purposes and patient communication. Text messaging (SMS) originator opt-in data and consent will not be shared with, sold to, or used by any third parties or affiliates for marketing or promotional purposes.

4. Data Access, Management, and Security

We maintain administrative, technical, and physical security measures to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

  • Restricted Access: Access to personal information and website analytics is strictly restricted to authorized NorthStarr Cardiothoracic Surgery office personnel and internal IT staff who require access to perform their operational duties.
  • Data Handling: All personnel with access to patient and visitor data are trained in privacy standards and bound by strict confidentiality obligations.

5. Third-Party Services & Analytics

While we utilize Google Analytics to process technical site data, Google is restricted from using this information for its own marketing or secondary purposes beyond providing analytics services to us. You may opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how your data is managed, please contact us:

NorthStarr Cardiothoracic Surgery

Attn: Privacy Officer / IT Administrator

Email: [email protected]

Phone: (907) 917-2200

Fax: (907) 212-8655

Address: 3841 Piper Street, Suite T382 Anchorage, AK 99508

Mobile messaging privacy policy

NorthStarr Cardiothoracic Surgery is committed to protecting your privacy. This section outlines our practices regarding text messaging (SMS) programs.

Information Collection and Use

We collect mobile phone numbers and opt-in consent when provided directly by patients or their authorized representatives via intake forms, website scheduling forms, or keyword text submissions. Mobile numbers are used exclusively to send transactional and healthcare-related communications, such as appointment reminders, procedure prep/post-op instructions, and account alerts.

Sharing and Disclosure

No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties or affiliates.

Data Security

We maintain physical, administrative, and technical safeguards designed to protect personal data and maintain HIPAA compliance for patient communications.

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Legal Duty & Protected Health Information (PHI)

NorthStarr Cardiothoracic Surgery is required by federal and state law (including the Health Insurance Portability and Accountability Act – HIPAA) to maintain the privacy and security of your Protected Health Information (PHI). We are required to provide you with this Notice describing our legal duties and privacy practices with respect to your medical records, follow the terms of the Notice currently in effect, and notify you promptly if a breach occurs that compromises the privacy or security of your unsecured PHI.

2. How We May Use and Disclose Your Health Information

We typically use or share your health information for the following purposes:

  • For Treatment: We use your medical information to provide, coordinate, or manage your surgical care and related services. For example, our cardiothoracic surgeons, nurses, technicians, and office staff share information to prepare you for procedures, manage post-operative recovery, and consult with referring physicians or specialists.
  • For Payment: We use and share your health information to bill and receive payment from health insurance plans, Medicare, Medicaid, or other entities. For example, we submit procedure details and medical coding to your insurance carrier to secure payment for your surgery.
  • For Healthcare Operations: We use and share your information to run our practice, improve quality of care, evaluate staff performance, and manage administrative operations.
  • Appointment Reminders and Care Alerts: We may contact you via phone, email, patient portal, or SMS (if you have opted in) to send appointment reminders, pre-procedure instructions, and post-operative follow-up notifications.

3. Other Permitted and Required Uses and Disclosures

We are permitted or required by law to share your information under specific circumstance without your explicit prior authorization, including:

  • Public Health and Safety: Reporting disease outbreaks, adverse drug reactions, product recalls, or suspected abuse/neglect to government agencies.
  • Judicial and Administrative Proceedings: Responding to court orders, subpoenas, or lawful government investigations.
  • Law Enforcement & Special Government Functions: For national security, workers’ compensation claims, or specialized military/law enforcement mandates.
  • Organ and Tissue Donation: Sharing information with organ procurement organizations if you are an organ donor.
  • Coroners and Funeral Directors: Sharing necessary health information to assist coroners or funeral directors in performing their duties.

4. Uses Requiring Your Written Authorization

For any uses or disclosures beyond treatment, payment, healthcare operations, or mandatory legal disclosures, we must obtain your express written authorization. Specifically:

  • No Sale of PHI: We will never sell your health information.
  • No Marketing: We will not use or share your health information for marketing purposes without your written permission.
  • SMS Data Protection: Mobile originator opt-in data and consent collected for text messaging programs are never shared with or sold to third parties or affiliates for marketing.

You may revoke any written authorization at any time in writing, except to the extent that we have already acted upon it.

5. Your Rights Regarding Your Health Information

When it comes to your health information, you have the following rights:

  • Get an Electronic or Paper Copy of Your Medical Record: You can inspect or request a copy of your health records. We will provide a copy or summary within 30 days of your written request.
  • Request Corrections: You can ask us to correct or amend health information that you believe is incorrect or incomplete.
  • Request Confidential Communications: You can ask us to contact you in a specific way (for example, home or office phone) or send mail to a different address.
  • Ask Us to Limit What We Use or Share: You can ask us not to use or share certain health information for treatment, payment, or operations. If you pay for a service out-of-pocket in full, you may request that we do not share that information with your health insurer.
  • Get a List of Disclosures (Accounting): You can request a list (accounting) of the times we have shared your health information during the past six years prior to your request, including with whom it was shared and why.
  • Get a Copy of This Notice: You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
  • Choose Someone to Act for You: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.

6. Complaints and Contact Information

If you believe your privacy rights have been violated, you may file a complaint directly with our practice or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with our office, or if you have questions about this Notice, please contact:

Privacy Officer / Compliance Administrator

NorthStarr Cardiothoracic Surgery

Phone: (907) 917-2200

Fax: (907) 212-8655

Email: [email protected]

Address: 3841 Piper Street, Suite T382 Anchorage, AK 99508