Privacy Policy

Effective Date: September 18, 2026

InterState Medical Group, LLC (“InterState Medical Group,” “IMG,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how information may be collected, used, disclosed, stored, and protected when you visit www.InterStateMedicalGroup.com, communicate with our office electronically, submit an online form, request an appointment, or otherwise interact with our website or digital services.

Because InterState Medical Group is a healthcare practice, certain information we receive may also constitute Protected Health Information (“PHI”) and may be subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), applicable Oregon law, and professional requirements of the Oregon Board of Chiropractic Examiners (“OBCE”).

This Website Privacy Policy does not replace our HIPAA Notice of Privacy Practices. Our Notice of Privacy Practices provides additional information regarding how medical information may be used or disclosed and describes your rights concerning your health information.

1. Information We May Collect

Depending on how you interact with our website and office, we may collect information that you voluntarily provide as well as limited technical information generated when you use the website.

Information may include:

• Name
• Mailing address
• Email address
• Telephone number
• Date of birth
• Appointment information
• Preferred method of communication
• Information submitted through contact or appointment-request forms
• General information about symptoms or the reason you are contacting us
• Insurance, accident, workers’ compensation, or payment-related information when applicable
• Information necessary to respond to a request for medical records
• Communications you send to our office
• Other information that you voluntarily provide

If you become a patient, additional medical and health information may be collected and maintained as part of your clinical record.

2. Health and Medical Information

Information submitted through our website may become health information when it relates to your past, present, or future health condition, healthcare, or payment for healthcare and can be associated with you.

Once information becomes part of your patient record or otherwise qualifies as Protected Health Information, we handle that information according to applicable federal and Oregon privacy laws and our Notice of Privacy Practices.

Our clinical records may include information such as:

• Medical history
• Examination findings
• Diagnoses
• Treatment plans
• Treatment records
• Imaging and diagnostic information
• Referrals
• Communications relating to patient care
• Billing information
• Insurance information
• Personal injury or workers’ compensation information
• Other information necessary to provide and document healthcare services

We maintain, protect, disclose, and release patient records in accordance with applicable law and professional requirements.

3. How We Use Information

We may use information collected through the website or provided to our office for purposes including:

• Responding to inquiries
• Scheduling appointments
• Confirming or changing appointments
• Providing healthcare services
• Communicating with patients
• Coordinating referrals
• Obtaining or coordinating diagnostic imaging
• Processing payments
• Billing responsible parties
• Processing personal injury, workers’ compensation, Veterans Affairs, or other authorized healthcare claims
• Maintaining accurate patient records
• Improving our services
• Improving website functionality
• Protecting the security of our website and systems
• Responding to legal or regulatory requirements
• Communicating important information about our practice
• Providing information you have requested about our services

When health information is involved, our uses and disclosures are also governed by our HIPAA Notice of Privacy Practices and applicable law.

4. Online Appointment and Contact Forms

Our website may allow you to request an appointment, ask a question, or contact our office electronically.

Submitting an online form does not automatically establish a doctor-patient relationship.

Please do not use general website contact forms to communicate urgent or emergency medical information.

If you believe you are experiencing a medical emergency, call 911 or seek appropriate emergency medical care.

Although we use reasonable safeguards to protect information transmitted electronically, no method of communication over the internet can be guaranteed to be completely secure.

For highly sensitive medical information, you may prefer to contact our office directly.

5. Email and Electronic Communications

If you communicate with us by email, text message, website form, or another electronic method, you acknowledge that electronic communications may involve privacy and security risks.

We take reasonable steps to protect patient information; however, ordinary email and text messaging may not always be encrypted.

When appropriate, we may use secure systems or other methods for transmitting sensitive health information.

By providing us with your email address or telephone number, you may receive communications relating to:

• Appointment requests
• Appointment confirmations
• Appointment reminders
• Treatment-related communications
• Billing matters
• Requested information
• Practice-related communications

You may request that we communicate with you through an alternative method when reasonably available.

6. Text Messages and SMS Communications

If you provide a mobile telephone number and consent to receiving text messages, InterState Medical Group may use SMS messaging for appointment reminders, scheduling, requested communications, or other healthcare-related communications.

Message and data rates may apply depending on your mobile service provider.

Consent to receive promotional text messages, when applicable, is not a condition of receiving healthcare services.

You may request that nonessential text communications stop at any time.

Healthcare-related communications may still be sent when permitted or required by law and consistent with your communication preferences.

We do not sell mobile telephone numbers or SMS consent information to third parties for their independent marketing purposes.

7. Cookies and Website Technologies

Like many websites, our website may use cookies and similar technologies to improve functionality, understand website activity, maintain security, and improve the user experience.

These technologies may collect information such as:

• Browser type
• Device type
• Operating system
• Internet Protocol address
• General geographic region
• Pages visited
• Time spent on particular pages
• Referring website
• Date and time of visits
• Website interactions

This information is generally used to understand website performance and improve our online services.

You may be able to disable or restrict cookies using your browser settings. Some website functions may not operate properly if cookies are disabled.

8. Website Analytics

We may use third-party analytics services to understand how visitors interact with our website.

Analytics information may help us determine:

• Which pages are frequently visited
• How users navigate the website
• Which devices or browsers visitors use
• How visitors arrive at the website
• How website performance can be improved

We seek to configure analytics and other website technologies in a manner consistent with applicable healthcare privacy requirements.

Information that constitutes Protected Health Information will be handled according to HIPAA and our Notice of Privacy Practices.

9. Advertising and Tracking Technologies

Our website may use advertising, conversion-measurement, or similar technologies where legally permitted.

We do not intentionally authorize third parties to use Protected Health Information for their own advertising purposes in violation of HIPAA.

Healthcare information submitted by patients or prospective patients should not be used or disclosed for targeted advertising in a manner prohibited by applicable law.

Where legally required, visitors may be provided choices regarding cookies or advertising technologies.

10. We Do Not Sell Patient Medical Information

InterState Medical Group does not sell patient medical records or Protected Health Information.

We do not disclose Protected Health Information to third parties for their independent commercial use except when specifically authorized by the patient or otherwise permitted or required by law.

Information may be shared with healthcare providers, business associates, service providers, payers, legal representatives, government agencies, or others when legally permitted and appropriate for treatment, payment, healthcare operations, or other lawful purposes.

11. Sharing Information With Service Providers

We may work with companies that help operate our practice or website.

Examples may include:

• Website hosting providers
• Electronic health record vendors
• Scheduling systems
• Billing services
• Payment processors
• Information technology providers
• Email or communication providers
• Cloud-storage providers
• Analytics providers
• Medical imaging systems
• Professional consultants

When a vendor receives Protected Health Information on our behalf and is considered a HIPAA Business Associate, we require appropriate contractual safeguards as required by law.

Service providers are expected to use information only for authorized purposes.

12. Treatment, Payment, and Healthcare Operations

As permitted by law, patient health information may be used or disclosed for purposes related to treatment, payment, and healthcare operations.

Examples include:

Treatment

We may share relevant information with another healthcare professional involved in your care.

Payment

We may use or disclose information when seeking payment from an insurer, auto insurer, workers’ compensation carrier, government program, attorney, responsible third party, or another payer when legally permitted.

Healthcare Operations

We may use information for activities necessary to operate our practice, including:

• Quality improvement
• Staff training
• Credentialing
• Compliance
• Auditing
• Business administration
• Healthcare operations
• Patient safety

Additional information concerning these uses appears in our Notice of Privacy Practices.

13. Personal Injury and Workers’ Compensation Information

Patients receiving care related to an auto accident, workplace injury, personal injury claim, or similar matter may authorize or otherwise permit information to be shared with parties involved in the claim when allowed by law.

These parties may include:

• Attorneys
• Insurance carriers
• Claims adjusters
• Workers’ compensation insurers
• Employers when legally authorized
• Independent medical examiners
• Other healthcare providers
• Government agencies

Information is disclosed only as authorized, permitted, or required by applicable law.

14. Medical Record Requests

Patients have rights regarding access to their healthcare records.

Requests for copies or summaries of chiropractic medical records or diagnostic imaging will be processed in accordance with applicable federal and Oregon law and Oregon Board of Chiropractic Examiners requirements.

We may require a written and signed authorization identifying:

• The patient
• The records requested
• The person or organization authorized to receive the records
• The purpose of the request when required
• Any other information necessary to process the request legally

Reasonable fees may apply when permitted by law.

A patient will not be denied access to records solely because of an unpaid balance when applicable law prohibits such denial.

15. Your Privacy Rights

Depending on the information involved and applicable law, you may have rights that include the right to:

• Request access to your health records
• Obtain paper or electronic copies of records
• Request correction or amendment of certain information
• Request confidential communications
• Ask us to limit certain uses or disclosures
• Request an accounting of certain disclosures
• Obtain a copy of our Notice of Privacy Practices
• Authorize another person to act on your behalf
• Revoke certain authorizations
• File a privacy complaint

Certain rights, limitations, and procedures differ depending on whether the information is governed by HIPAA, Oregon law, or another privacy law.

Please refer to our Notice of Privacy Practices for a more detailed description of your healthcare privacy rights.

16. Oregon Privacy Rights

Oregon residents may have additional privacy rights under Oregon law.

Depending upon whether a particular Oregon privacy law applies to our organization or to the information involved, those rights may include the ability to:

• Confirm whether personal data is being processed
• Access certain personal data
• Correct inaccurate information
• Request deletion of certain personal data
• Obtain a copy of certain personal data
• Opt out of certain sales, targeted advertising, or profiling activities where applicable

Certain information, including information maintained in accordance with HIPAA and other specified federal privacy laws, may be treated differently or exempt from some state consumer privacy provisions.

We will respond to valid privacy requests according to applicable law.

17. Children and Minors

Our website is intended primarily for adults, parents, guardians, caregivers, and individuals seeking information about healthcare services.

We do not knowingly use the website to solicit personal information directly from children for commercial purposes.

Healthcare information concerning minors is handled according to applicable Oregon and federal law, including laws governing parental or guardian access, minor consent, confidentiality, and healthcare records.

A parent, guardian, or legally authorized representative may exercise privacy rights on behalf of a minor when permitted by law.

18. Data Security

InterState Medical Group uses reasonable administrative, physical, and technical safeguards designed to protect personal and health information against unauthorized access, use, alteration, loss, or disclosure.

Safeguards may include:

• Access controls
• Password protections
• Secure systems
• Staff training
• Confidentiality policies
• Physical safeguards
• Security procedures
• Vendor safeguards
• Backup procedures
• Access limitations based on job responsibilities

No computer system, website, email system, mobile device, or internet transmission can be guaranteed to be completely secure.

If we discover a breach involving protected information, we will investigate and provide notification when required by applicable law.

19. Record Retention

Medical and business records are retained for the periods required by applicable federal and Oregon law and professional regulations.

Different types of information may be retained for different periods depending on legal, clinical, billing, regulatory, and operational requirements.

When records are no longer required, we use reasonable methods intended to securely destroy or dispose of confidential information.

20. Third-Party Websites

Our website may contain links to third-party websites, healthcare resources, social-media platforms, maps, videos, or other external services.

Once you leave our website, the privacy practices of the third-party website apply.

InterState Medical Group does not control and is not responsible for the privacy practices, security, accuracy, or content of independent third-party websites.

We encourage you to review the privacy policies of websites you visit.

21. Social Media

InterState Medical Group may maintain profiles on social-media platforms.

Information that you voluntarily post publicly on social media should not be considered private.

For your protection, please do not post confidential medical information, diagnostic information, medical-record requests, or other sensitive information publicly on our social-media pages.

Contact our office directly regarding personal healthcare matters.

22. Patient Testimonials and Photographs

We will not intentionally publish identifiable patient medical information, photographs, videos, testimonials containing protected information, or other patient-specific information without appropriate permission when authorization is legally required.

Patients are never required to provide a testimonial, photograph, review, or endorsement as a condition of receiving care.

Public reviews voluntarily posted by patients on independent websites or social-media platforms are controlled by the individual who posted them and the applicable platform.

23. Marketing Communications

We may provide patients or website visitors with information regarding services, educational programs, practice updates, or other healthcare-related information when permitted by law.

Where HIPAA or another law requires authorization for a particular marketing communication, we will obtain the required authorization before using Protected Health Information for that purpose.

You may request to stop receiving optional marketing communications.

Stopping optional marketing communications will not affect your ability to receive healthcare services.

24. Legal and Regulatory Disclosures

We may disclose information when required or permitted by law, including in response to:

• Court orders
• Valid subpoenas
• Regulatory investigations
• Licensing-board inquiries
• Public-health requirements
• Workers’ compensation requirements
• Law-enforcement requests when legally authorized
• Mandatory reporting obligations
• Other lawful governmental requests

As an Oregon chiropractic practice, InterState Medical Group may be required to provide records to the Oregon Board of Chiropractic Examiners when legally requested as part of its regulatory responsibilities.

Such disclosures will be handled according to applicable law.

25. Your Authorization

Certain uses or disclosures of health information require your written authorization.

When authorization is required, we will request it before making the use or disclosure.

You may generally revoke an authorization in writing, except to the extent that action has already been taken in reliance on that authorization or as otherwise provided by law.

26. Privacy Complaints

If you believe your privacy rights have been violated, you may contact InterState Medical Group.

You will not be denied care, discriminated against, or retaliated against for making a good-faith privacy complaint or exercising a privacy right.

You may also have the right to submit a complaint to the appropriate state or federal regulatory agency.

For HIPAA-related complaints, you may contact the:

U.S. Department of Health and Human Services
Office for Civil Rights

Information regarding HIPAA complaints is available through the U.S. Department of Health and Human Services.

27. Privacy Contact

Questions about this Privacy Policy, our privacy practices, or requests involving your information may be directed to:

Privacy Officer
InterState Medical Group, LLC
Salem, Oregon

Telephone: [INSERT PHONE NUMBER]
Email: [INSERT PRIVACY EMAIL ADDRESS]
Website: www.InterStateMedicalGroup.com

Requests involving medical records should clearly state that the communication concerns a Medical Records Request.

28. HIPAA Notice of Privacy Practices

This Website Privacy Policy is separate from InterState Medical Group’s formal HIPAA Notice of Privacy Practices.

Our Notice of Privacy Practices explains in greater detail:

• How medical information may be used and disclosed
• Your healthcare privacy rights
• Our legal responsibilities
• How to obtain your medical records
• How to request restrictions
• How to request confidential communications
• How to request corrections
• How to obtain an accounting of certain disclosures
• How to file a privacy complaint

[LINK: View InterState Medical Group Notice of Privacy Practices]

A paper copy of our Notice of Privacy Practices is available upon request.

29. Changes to This Privacy Policy

We may update this Privacy Policy when our practices, technology, services, or legal requirements change.

When material changes are made, the updated Privacy Policy will be posted on this website with a revised effective date.

We encourage visitors and patients to review this page periodically.

30. Contact InterState Medical Group

If you have questions concerning this Privacy Policy or the handling of your personal information, please contact us.

InterState Medical Group, LLC
Disc Centers of Salem
Salem, Oregon

Website: www.InterStateMedicalGroup.com
Telephone: 503-339-7351  Fax: 503-575-2417
Privacy Email: info@imgclinics.com

Your Information. Your Privacy. Our Responsibility.