HIPAA Notice

Important: Primara is a digital marketing agency — not a healthcare provider, health plan, or healthcare clearinghouse. We are not a HIPAA Covered Entity. This notice describes our role as a potential Business Associate to our medical practice clients and our commitment to handling any protected health information responsibly.

1. Who We Are

Primara is an independent digital marketing agency based in West Palm Beach, Florida. We provide services including Google Business Profile optimization, local SEO, website design, and review generation exclusively to independent medical practices.

As a marketing agency that works with healthcare providers, we may qualify as a Business Associate under HIPAA when our services involve access to Protected Health Information (PHI) on behalf of a Covered Entity client.

2. This Website Does Not Collect PHI

The forms and contact channels on primara365.com are for business inquiries from medical practice owners and administrators — not from patients. We do not collect, store, or process patient medical records, diagnoses, treatment information, insurance data, or any other Protected Health Information through this website.

If you are a patient of a medical practice Primara serves, please contact your healthcare provider directly for any matters relating to your medical records or health information.

3. Business Associate Obligations

When Primara's services require access to PHI on behalf of a medical practice client, we fulfill our obligations as a Business Associate, including:

• Entering into a Business Associate Agreement (BAA) with the Covered Entity before any PHI is accessed or used.
• Using and disclosing PHI only as permitted by the BAA and applicable law.
• Implementing appropriate administrative, physical, and technical safeguards to protect PHI from unauthorized use or disclosure.
• Reporting any known breach or suspected breach of unsecured PHI to the Covered Entity without unreasonable delay.
• Ensuring any subcontractors who may access PHI agree to the same restrictions and conditions.
• Making PHI available for access, amendment, and accounting of disclosures as required by HIPAA.
• Returning or destroying PHI upon termination of the service agreement, where feasible.

4. Minimum Necessary Standard

Primara adheres to the HIPAA minimum necessary standard. We access, use, and disclose only the minimum amount of PHI necessary to accomplish the permitted purpose. Our marketing services are generally designed to not require access to individual patient health records.

5. Security Safeguards

To the extent our work involves PHI, we implement reasonable safeguards including:

• Encrypted communications for any PHI transmitted electronically.
• Access controls limiting PHI to only those team members who need it.
• Secure handling and disposal of any physical materials containing PHI.
• Staff awareness of HIPAA obligations and confidentiality requirements.

6. Our Marketing Services and HIPAA

Primara's marketing services — such as managing a practice's Google Business Profile, responding to public reviews, creating website content, and running local SEO — typically do not require access to individual patient records. Where client-specific work does involve patient data (for example, managing a HIPAA-compliant patient review solicitation program), we operate under a fully executed BAA with that client.

Primara does not use patient health information for marketing purposes without a valid patient authorization as required by HIPAA.

7. Requesting a Business Associate Agreement

If you are a medical practice engaging Primara for services that may involve PHI, please request a Business Associate Agreement before our engagement begins. We are prepared to execute a BAA and can provide our standard agreement upon request.

8. Updates to This Notice

We may update this HIPAA Notice as our services or applicable law changes. The effective date at the top of this page will reflect the most recent revision.

9. Contact Us

For HIPAA-related questions, to request a Business Associate Agreement, or to report a concern, please contact us:

This notice does not constitute legal advice. Medical practices should consult qualified HIPAA legal counsel for compliance guidance specific to their situation.