How Wells Legacy Health & Wellness approaches digital safety and data protection.

This page applies to the Wells Legacy Health & Wellness website, online contact features, digital communications, appointment links, patient portal connections, telehealth-related systems, third-party platforms, and practice workflows used to support information security and data protection.

This page should be read with the Web & Mobile Privacy Policy, Notice of Privacy Practices, Terms of Service, Terms and Conditions, and Legal Disclaimer.

Wells Legacy Health & Wellness aims to use reasonable administrative, technical, and organizational safeguards to help protect information collected, maintained, used, or transmitted through practice operations and approved digital systems.

Security practices may include, as appropriate:

• Limiting access to information based on role, purpose, and need.
• Using third-party healthcare, scheduling, telehealth, hosting, or portal systems with security and privacy expectations.
• Maintaining privacy-aware workflows for patient information.
• Reducing unnecessary collection of sensitive information through public website pages.
• Reviewing potential security concerns, incidents, and suspicious activity as appropriate.
• Encouraging patients and visitors to use secure communication channels when available.

Protected health information used or disclosed for treatment, payment, healthcare operations, and other healthcare purposes is addressed in the Notice of Privacy Practices.

Wells Legacy Health & Wellness takes a HIPAA-aware approach to health information privacy and electronic protected health information. The HIPAA Security Rule includes administrative, physical, and technical safeguard standards for certain electronic protected health information maintained or transmitted by regulated entities.

Visitors and patients should not send highly sensitive medical details through public website forms, regular email, or social media unless Wells Legacy Health & Wellness specifically directs them to an approved secure method.

The website may use hosting, security, analytics, spam prevention, performance, form, and communication tools to support basic website operation and protection. Website-related data may include contact form information, browser information, device data, IP address, page activity, referral information, cookies, and similar technical data.

Public website forms are intended for general, non-emergency contact requests. They should not be used to submit urgent symptoms, emergencies, detailed medical history, sensitive diagnoses, full medical records, payment card details, passwords, or other highly sensitive information unless specifically requested through a secure method.

Website visitor data practices are explained in the Web & Mobile Privacy Policy.

Wells Legacy Health & Wellness may use third-party systems for patient portal access, online booking, telehealth, billing, forms, payment processing, communications, analytics, hosting, maps, or other operational functions.

Third-party platforms may have their own privacy policies, terms, security controls, account requirements, data practices, and technical limitations. Patients should review the privacy and security information provided by those platforms when creating accounts, booking appointments, using telehealth, or submitting information.

Online booking is available through the practice’s appointment link: Book an Appointment.

Wells Legacy Health & Wellness may communicate by phone, voicemail, email, text, mail, patient portal, scheduling tools, telehealth systems, or other communication channels as appropriate.

Standard email, text messaging, and voicemail may have security limitations. Patients should avoid sending urgent symptoms, highly sensitive medical details, passwords, complete payment card information, or full records through unsecured or general communication methods.

For life-threatening symptoms, call 911 or go to the nearest emergency room. For non-emergency questions, use the Contact page or call the office.

Patients and visitors can help reduce security risk by:

• Using strong, unique passwords for patient portals, email, and related accounts.
• Turning on multi-factor authentication when available.
• Not sharing portal passwords, login codes, or secure access links.
• Keeping phone numbers, email addresses, and mailing addresses up to date.
• Logging out of shared or public devices after using portal or scheduling tools.
• Avoiding public Wi-Fi for sensitive healthcare activity when possible.
• Checking website links carefully before entering personal information.
• Reporting suspicious messages, unexpected portal activity, or possible account compromise.

Patients using mobile devices or telehealth should choose a private, safe location whenever possible and protect their device with a passcode, biometric lock, or other security setting.

For telehealth visits, patients should consider:

• Using a private room where others cannot easily overhear sensitive information.
• Confirming the correct appointment link or platform before joining.
• Using a secure internet connection where possible.
• Avoiding screenshots, recordings, or sharing visit links unless authorized.
• Not using a device that is shared with others without logging out afterward.

Wells Legacy Health & Wellness may review, document, investigate, and respond to reported or suspected security incidents, suspicious communications, unauthorized access concerns, or potential data exposure as appropriate.

When required by applicable law, affected individuals, regulators, or other required parties may be notified following a reportable breach involving unsecured protected health information.

To report a non-urgent security concern, suspicious message, or possible privacy issue, use the Contact page or call the office. Do not use public forms for emergencies.

Wells Legacy Health & Wellness may retain information for healthcare operations, patient care, billing, legal, regulatory, accounting, security, quality, and administrative purposes as appropriate.

Access to patient-related information may be limited based on role, purpose, authorization, and applicable law. Information that is no longer needed may be securely deleted, archived, de-identified, or disposed of according to applicable requirements and practice workflows.

No website, portal, device, software, email system, communication method, hosting service, or internet transmission can be guaranteed to be completely secure. Technical failures, human error, malware, phishing, device compromise, third-party incidents, and unauthorized activity can still occur.

Wells Legacy Health & Wellness encourages patients and visitors to use secure channels, keep personal devices protected, avoid suspicious links, and report potential issues promptly.

Wells Legacy Health & Wellness may update this Information Security & Data Protection page from time to time. The updated version will be posted on this page with a revised “Last updated” date.

Continued use of the website, online resources, appointment links, or related digital tools after updates are posted means the updated information applies going forward.