Privacy Policy

This Privacy Policy (“Policy”) explains how Salk Health USA Inc. d/b/a Bowery Clinic (“Bowery Clinic,” “we,” “our,” or “us”) and Hoedebecke Clinic P.C. (“Medical Group”) collect, use, disclose, and protect your information when you visit or use:

boweryclinic.com
Any related websites, applications, platforms, messaging systems, and telehealth technologies (“Site”)
Telehealth services delivered by licensed healthcare providers of the Medical Group (“Telehealth Services”)

By using the Site or Telehealth Services, you acknowledge that you have read and understood this Policy.

1. ENTITIES COVERED BY THIS POLICY

Bowery Clinic and Hoedebecke Clinic P.C. operate under a management services structure:

Hoedebecke Clinic P.C. is an independent professional corporation providing all clinical services.
Bowery Clinic provides non-clinical services such as scheduling, technology, communications, payment processing, marketing, and administrative support.

Medical records created by Hoedebecke Clinic P.C. are protected under HIPAA and are not governed by all provisions of this Policy.

Bowery Clinic does not access or use protected health information (“PHI”) except as permitted under HIPAA‐compliant business associate arrangements.

2. INFORMATION WE COLLECT

We collect information in the following ways:

A. Information You Provide Directly

This includes:

Personal identifiers (name, address, date of birth, phone number, email)
Account registration information
Appointment information
Payment and billing details
Medical history, symptoms, and intake information (for Telehealth Services)
Communications sent to Bowery Clinic or the Medical Group
Uploaded documents, photos, lab results, or medical data

B. Information Collected During Telehealth Services

Hoedebecke Clinic P.C. may collect:

Medical history and clinical data
Symptoms, diagnostic information, treatment responses
Prescriptions, lab orders, and clinical notes
Video, audio, chat, and message content used for clinical purposes

This information is classified as Protected Health Information (PHI) under HIPAA.

C. Information Collected Automatically

When you use the Site, we may collect:

Device information (IP address, browser type, OS)
Cookies and tracking technologies
Log data (pages viewed, time spent, links clicked)
Location information (approximate)
Usage information for analytics and fraud prevention

D. Information From Third Parties

We may receive information from:

Payment processors (e.g., Stripe)
Laboratories and pharmacies
Referral partners or affiliates
Identity verification services

3. HOW WE USE YOUR INFORMATION

Bowery Clinic and the Medical Group use information for different purposes depending on the nature of your interaction.

A. Use by Hoedebecke Clinic P.C. (Medical Group)

For clinical purposes:

Evaluating your health
Providing telehealth consultations
Diagnosing and treating conditions
Prescribing medications
Ordering and reviewing diagnostic tests
Communicating with you about medical care
Maintaining medical records
Compliance with HIPAA and medical regulations

This data is used solely to deliver medical care.

B. Use by Bowery Clinic (Non-Clinical Purposes)

For administrative, operational, and business purposes:

Operating and improving the Site
Processing payments
Scheduling appointments
Providing customer support
Sending administrative or service-related messages
Fraud prevention and security
Internal analytics
Marketing and advertising (only where permitted)
User account management
Enforcing Terms of Use

Bowery Clinic does not use PHI for marketing without explicit HIPAA-compliant authorization.

4. HOW WE SHARE YOUR INFORMATION

We may share information under the following circumstances:

A. With Hoedebecke Clinic P.C.

To provide Telehealth Services, Bowery Clinic may share:

Contact information
Intake data
Information necessary to schedule or support healthcare delivery

All clinical information is handled directly by the Medical Group under HIPAA.

B. Service Providers & Vendors

Bowery Clinic may share information with:

Payment processors (Stripe)
Cloud service providers
Communication platforms (SMS/email systems)
Analytics providers
Pharmacy and laboratory partners
IT and security providers

All PHI shared is governed by HIPAA business associate agreements where required.

C. Legal, Regulatory, and Safety Requirements

Information may be disclosed:

To comply with applicable laws
To respond to subpoenas or legal processes
To protect against fraud or security threats
To protect patient safety or public health

D. Corporate Transactions

In cases of merger, acquisition, financing, or sale of assets, information may be transferred as permitted by law.

5. COOKIES & TRACKING TECHNOLOGIES

We may use:

Cookies
Pixels
Web beacons
Session tracking
Analytics tools (e.g., Google Analytics)

These help improve user experience, measure effectiveness, and enhance Site functionality.

You may adjust your browser settings to disable cookies, but certain features may not function correctly.

6. HIPAA AND PROTECTED HEALTH INFORMATION (PHI)

Hoedebecke Clinic P.C. is a HIPAA-covered entity, and Bowery Clinic may operate as its business associate for certain functions.

Your PHI:

Is used only for treatment, payment, and healthcare operations
Is protected under federal and state law
Is not used for marketing without written authorization
Is not sold under any circumstances

Bowery Clinic maintains administrative, physical, and technical safeguards to protect PHI.

7. DATA SECURITY

We use industry-standard security measures to protect your personal information, including:

Encryption of sensitive data
Secure servers
Access controls
Audit logs
Periodic security assessments

However, no system is 100% secure.

You acknowledge that transmission of information via the internet is done at your own risk.

8. DATA RETENTION

We retain:

Medical records — as required by state law and medical regulations
Non-medical user data — as long as necessary for operational, legal, and business purposes

You may request deletion of certain data, but medical records cannot be deleted before regulatory requirements are met.

9. YOUR RIGHTS

Depending on your jurisdiction, you may have rights to:

Access your personal information
Request corrections
Request deletion (where permitted)
Opt out of marketing communications
Request restrictions on certain uses of PHI (HIPAA)
Obtain a copy of your medical records (HIPAA)

To exercise rights related to PHI, contact Hoedebecke Clinic P.C.

For other rights, contact: members@boweryclinic.com

10. CHILDREN’S PRIVACY

The Site is not intended for individuals under 18 years of age.

We do not knowingly collect information from minors.

11. THIRD-PARTY LINKS

The Site may contain links to external websites not controlled by Bowery Clinic.

We are not responsible for the privacy practices of third parties.

12. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents may:

Request disclosure of personal information collected
Request deletion (with exceptions)
Opt out of certain data sharing
Request correction of inaccurate information
Not be discriminated against for exercising privacy rights

We do not sell personal information.

To exercise California privacy rights:

Email members@boweryclinic.com

13. INTERNATIONAL USERS

The Site is operated in the United States.

If you access from outside the U.S., you consent to data processing within the U.S.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Policy periodically.

The updated Policy will be posted on the Site with a new “Last Updated” date.

Continued use of the Site constitutes acceptance of changes.

15. CONTACT US

For privacy-related inquiries, contact:

Bowery Clinic / Salk Health USA Inc.

Email: members@boweryclinic.com

For HIPAA or PHI-related requests, contact:

Hoedebecke Clinic P.C.

31014 Timber Bend Ln

Spring, TX 77386

Email: members@boweryclinic.com