Privacy Policy
What this website collects, and how we handle it.
Effective [DATE]. This website is operated by The Buckson Group, LLC ("we"). This policy explains what information we collect through this website and how we handle it. For your rights regarding billing records themselves, see the Records Custodian Notice.
Information you submit through the Request Records form
The request form collects the information needed to locate an account and verify your identity: patient name, date of birth, approximate dates of service, your name and relationship to the patient, contact information, delivery preference, and (through the secure upload link) a photo ID or authorization document. This information is protected health information under HIPAA. We use it only to verify and fulfill your request. It is collected through Microsoft Forms and a Microsoft OneDrive file request, stored in our Microsoft 365 environment under a business associate agreement with Microsoft, encrypted in transit and at rest, and accessible only to authorized personnel using multi-factor authentication. We do not sell, share, or use this information for any other purpose.
Information you submit through the Contact form
The Contact page form is for practices, administrators, and vendors. It collects business contact information only. Please do not enter patient information on it; if you are a patient or attorney requesting records, use the Request Records page.
Retention of request information
Request submissions are transferred to our secure records system and removed from the form platform within 30 days. We keep a log of each request and how it was fulfilled for six years as required by HIPAA.
Information collected automatically
Our website host may collect standard server log information (IP address, browser type, pages visited, time of visit) for security and troubleshooting. We do not use advertising trackers, social media pixels, chat widgets, or third-party analytics anywhere on this site.
Cookies
This site uses only cookies necessary for it to function. The embedded Microsoft Forms may set cookies required by Microsoft to operate the form.
Email and fax
We send records by encrypted email only after confirming the recipient's address, by HIPAA-compliant fax to verified numbers, or by U.S. mail. Ordinary email is not secure; please do not send personal information to us by email.
Children
This site is not directed to children. Requests for a minor's records must be made by a parent or legal guardian.
Your rights and complaints
See our Records Custodian Notice for your rights regarding billing records. Questions about this policy: Privacy Officer, The Buckson Group, LLC, 2624 Timber Dr, Suite 151, Garner, NC 27529. Fax 888-518-4948. Email [email protected].
Changes
We may update this policy. The effective date above reflects the current version.