Privacy Policy

Privacy Policy

Effective Date: 9/18/2025
Business Name: Triad DEXA
Facility Address: 4361 Federal Drive, STE 180, Greensboro, NC 27410
Contact: Info@TriadDEXA.com

1. Introduction

This Privacy Policy explains how Triad DEXA (“we,” “our,” or “us”) collects, uses, shares, and protects information when you use our website, purchase services, complete intake forms, or schedule appointments. We are committed to protecting your privacy and complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state and federal privacy laws.

2. Information We Collect

We collect two categories of information:

A. Personal Information (Non-Health)

Name, email, phone number, billing and shipping address
Login credentials for your account
Payment details (processed securely by third-party payment processors; we do not store full card numbers)
Technical data (IP address, browser type, cookies, site usage)

B. Protected Health Information (PHI)

Information you provide in intake forms (date of birth, sex, weight, medical conditions, pregnancy status, etc.)
Results of DEXA body composition scans
Referral and approval records from your physician

3. How We Use Your Information

To process orders and manage scan packages through WooCommerce
To complete intake and consent requirements using DocuSign
To obtain physician approval and securely share intake/scan results with your referring provider
To manage appointment scheduling through SimplyBook.me
To communicate with you regarding approvals, scheduling, results availability, and customer service
To comply with legal and regulatory obligations

4. Sharing of Information

We share your information only as necessary:

Physicians: PHI is shared with your referring physician for approval and medical oversight.
Vendors/Service Providers: WooCommerce (e-commerce), DocuSign (intake/consent), SimplyBook.me (scheduling), and secure payment processors.
Legal/Compliance: When required by law, regulation, subpoena, or court order.

We do not sell, rent, or trade your personal or health information.

5. HIPAA Compliance & Data Security

PHI is stored and transmitted through HIPAA-compliant platforms (DocuSign, secure scheduling, encrypted email/fax if applicable).
Access to PHI is restricted to authorized personnel only.
We use secure encryption (SSL/TLS) for all web traffic and maintain administrative, technical, and physical safeguards to protect data.

6. Your Rights

Under HIPAA and applicable privacy laws, you have the right to:

Access and obtain a copy of your PHI
Request corrections to your PHI
Request restrictions on certain uses and disclosures
Receive an accounting of disclosures
File a complaint if you believe your rights have been violated

To exercise these rights, contact us at Info@TriadDEXA.com

7. Cookies & Analytics

Our website uses cookies to enhance user experience, analyze traffic, and improve site performance. Cookies may also be used for WooCommerce shopping functionality. You may disable cookies in your browser, but some features may not function correctly.

8. Data Retention

PHI is retained in accordance with medical record retention laws (typically 6–7 years or as required by state law).
Non-health data (e.g., site analytics, account info) is retained as long as necessary for business and legal purposes.

9. Children’s Privacy

Our services are not directed at children under 13. Minors may only use our Services with parental or guardian consent and a physician referral.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with the effective date. Continued use of the Services after changes are posted constitutes acceptance.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact:

Triad DEXA
4361 Federal Drive, STE 180
Greensboro, NC 27410
Email: Info@TriadDEXA.com