Privacy Policy

 Monarch Healthcare (“us”, “we”, or “our”) operates the www.monarchhealthcaremi.com website (the “Service”). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the service. By using the service, you agree to the collection and use of information in accordance with this policy.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Monarch Healthcare PLLC (the “Practice”) is committed to protecting your privacy. The Practice is required by federal law to maintain the privacy of Protected Health Information (“PHI”), which is information that identifies or could be used to identify you. The Practice is required to provide you with this Notice of Privacy Practices (this “Notice”), which explains the Practice’s legal duties and privacy practices and your rights regarding PHI that we collect and maintain.

YOUR RIGHTS
Your rights regarding PHI are explained below. To exercise these rights, please submit a written request to the Practice at the address noted below.

To inspect and copy PHI.
• You can ask for an electronic or paper copy of PHI. The Practice may charge you a reasonable fee.
• The Practice may deny your request if it believes the disclosure will endanger your life or another person’s life. You may have a right to have this decision reviewed.

To amend PHI.
• You can ask to correct PHI you believe is incorrect or incomplete. The Practice may require you to make your request in writing and provide a reason for the request.
• The Practice may deny your request. The Practice will send a written explanation for the denial and allow you to submit a written statement of disagreement.

To request confidential communications.
• You can ask the Practice to contact you in a specific way. The Practice will say “yes” to all reasonable requests.

To limit what is used or shared.
• You can ask the Practice not to use or share PHI for treatment, payment, or business operations. The Practice is not required to agree if it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask the Practice not to share PHI with your health insurer.
• You can ask for the Practice not to share your PHI with family members or friends by stating the specific restriction requested and to whom you want the restriction to apply.

To obtain a list of those with whom your PHI has been shared.
• You can ask for a list, called an accounting, of the times your health information has been shared. You can receive one accounting every 12 months at no charge, but you may be charged a reasonable fee if you ask for one more frequently.

To receive a copy of this Notice.
• You can ask for a paper copy of this Notice, even if you agreed to receive the Notice electronically.

To choose someone to act for you.
• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights.

To file a complaint if you feel your rights are violated.
• You can file a complaint by contacting the Practice using the following information:
Monarch Healthcare PLLC

Privacy Officer: Julie McDonald

545 County Rd HQ

Marquette, MI 49855

906-273-0072

• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• The Practice will not retaliate against you for filing a complaint.

To opt out of receiving fundraising communications.
• The Practice may contact you for fundraising efforts, but you can ask not to be contacted again.

OUR USES AND DISCLOSURES
1. Routine Uses and Disclosures of PHI
The Practice is permitted under federal law to use and disclose PHI, without your written authorization, for certain routine uses and disclosures, such as those made for treatment, payment, and the operation of our business. The Practice typically uses or shares your health information in the following ways:

To treat you.
• The Practice can use and share PHI with other professionals who are treating you.
• Example: Your primary care doctor asks about your mental health treatment.

To run the health care operations.
• The Practice can use and share PHI to run the business, improve your care, and contact you.
• Example: The Practice uses PHI to send you appointment reminders if you choose.

To bill for your services.
• The Practice can use and share PHI to bill and get payment from health plans or other entities.
• Example: The Practice gives PHI to your health insurance plan so it will pay for your services.

2. Uses and Disclosures of PHI That May Be Made Without Your Authorization or Opportunity to Object
The Practice may use or disclose PHI without your authorization or an opportunity for you to object, including:

To help with public health and safety issues
• Public health: To prevent the spread of disease, assist in product recalls, and report adverse reactions to medication.
• Required by the Secretary of Health and Human Services: We may be required to disclose your PHI to the Secretary of Health and Human Services to investigate or determine our compliance with the requirements of the final rule on Standards for Privacy of Individually Identifiable Health Information.
• Health oversight: For audits, investigations, and inspections by government agencies that oversee the health care system, government benefit programs, other government regulatory programs, and civil rights laws.
• Serious threat to health or safety: To prevent a serious and imminent threat.
• Abuse or Neglect: To report abuse, neglect, or domestic violence.

To comply with law, law enforcement, or other government requests
• Required by law: If required by federal, state or local law.
• Judicial and administrative proceedings: To respond to a court order, subpoena, or discovery request.
• Law enforcement: For law locate and identify you or disclose information about a victim of a crime.
• Specialized Government Functions: For military or national security concerns, including intelligence, protective services for heads of state, or your security clearance.
• National security and intelligence activities: For intelligence, counterintelligence, protection of the President, other authorized persons or foreign heads of state, for purpose of determining your own security clearance and other national security activities authorized by law.
• Workers’ Compensation: To comply with workers’ compensation laws or support claims.

To comply with other requests
• Coroners and Funeral Directors: To perform their legally authorized duties.
• Organ Donation: For organ donation or transplantation.
• Research: For research that has been approved by an institutional review board.
• Inmates: The Practice created or received your PHI in the course of providing care.
• Business Associates: To organizations that perform functions, activities or services on our behalf.

3. Uses and Disclosures of PHI That May Be Made With Your Authorization or Opportunity to Object
Unless you object, the Practice may disclose PHI:

To your family, friends, or others if PHI directly relates to that person’s involvement in your care.

If it is in your best interest because you are unable to state your preference.

4. Uses and Disclosures of PHI Based Upon Your Written Authorization
The Practice must obtain your written authorization to use and/or disclose PHI for the following purposes:

Marketing, sale of PHI, and psychotherapy notes.

You may revoke your authorization, at any time, by contacting the Practice in writing, using the information above. The Practice will not use or share PHI other than as described in Notice unless you give your permission in writing.

OUR RESPONSIBILITIES
• The Practice is required by law to maintain the privacy and security of PHI.
• The Practice is required to abide by the terms of this Notice currently in effect. Where more stringent state or federal law governs PHI, the Practice will abide by the more stringent law.
• The Practice reserves the right to amend Notice. All changes are applicable to PHI collected and maintained by the Practice. Should the Practice make changes, you may obtain a revised Notice by requesting a copy from the Practice, using the information above, or by viewing a copy on the website: www.monarchhealthcaremi.com/privacypolicy
• The Practice will inform you if PHI is compromised in a breach.

This Notice is effective on 11/1/2025.

What kind of data is processed?

We collect several different types of information for various purposes to provide and improve our service to you.

Personal Data

While using our service, we ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Address, State, Province, ZIP/Postal code, City

Cookies and Usage Data

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Usage Data

We collect information on how the service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on our service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

For what purpose is the data collected?

Monarch Healthcare uses the collected data for various purposes:

• To provide and maintain our service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Duration of Processing

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Monarch Healthcare will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

How do we protect your information?

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. We are committed to protecting your personal information against unauthorized use or disclosure.

Disclosure to Third Parties

We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services.

If Monarch Healthcare is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Under certain circumstances, Monarch Healthcare may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Monarch Healthcare may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Monarch Healthcare
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Your Rights

You have a right to be informed of Personal Data processed by Monarch Healthcare, a right to rectification/correction, erasure and restriction of processing. You also have the right to receive a structured, common and machine-readable format of Personal Data you provided to us.

We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.

To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact our support team: monarchhealthcaremi@gmail.com

You have the right to withdraw consent at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it. Whenever you withdraw consent, you acknowledge and accept that this may have a negative influence on the quality of the site and/or services. You further agree that Monarch Healthcare shall not be held liable with respect to any loss and/or damage to your Personal Data if you choose to withdraw consent.

In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

Hosting and backend infrastructure

SiteGround is a hosting service provided by SiteGround.

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Stripe

Stripe is a payment service provided by Stripe Inc.

PayPal

PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.

Other

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.

Gravatar

Gravatar is an image visualization service provided by Automattic Inc. that allows this Website to incorporate content of this kind on its pages.

Facebook Social Widgets

The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.

Instagram Social Widgets

The Instagram button and social widgets are services allowing interaction with the Instagram social network provided by Facebook Inc.

Twitter Social Widgets

The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.

LinkedIn Social Widgets

The LinkedIn share button and social widgets are services allowing interaction with the LinkedIn social network provided by LinkedIn.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.