Privacy Policy

Last Updated: [2.23.26]

1. Who We Are

ARC Dialysis ("ARC Dialysis," "we," "us," or "our") is a privately owned, minority-owned kidney care practice incorporated in the State of Florida. We operate 12 outpatient dialysis centers across Miami-Dade, Broward, Polk, Lee, and Hendry counties. Our corporate office is located at 4960 SW 72nd Ave #208, Miami, FL 33155.

ARC Dialysis is a Covered Entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations (the HIPAA Privacy Rule, 45 CFR Parts 160 and 164). This means we are required by law to maintain the privacy of Protected Health Information (PHI) and to provide patients with notice of our legal duties and privacy practices with respect to PHI.

This Privacy Policy applies to information collected through our website at https://arcdialysis.com and through other digital communications with us. For information about how we handle PHI in the context of medical treatment, please refer to our Notice of Privacy Practices available at your ARC Dialysis center.

2. Information We Collect

We collect different types of information depending on how you interact with our website:

Information You Provide to Us

When you contact us, submit a form, or communicate with our care teams, you may provide:

• Contact information — such as your name, email address, phone number, and mailing address.
• Patient intake information — when you complete our online patient forms, such as demographic information, insurance details, and referring physician information.
• Employment application information — if you apply for a position through our website, you may submit a resume, cover letter, and professional history.
• General inquiries — questions or comments you submit through our contact form or by email.

Please note: We ask that you do not submit sensitive health information (such as diagnoses, lab values, or detailed medical history) through general website contact forms. For clinical matters, please call your ARC Dialysis center directly.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain information about your device and your visit, including:

• IP address and approximate geographic location (city/region level).
• Browser type, version, and operating system.
• Pages you visit, links you click, and time spent on pages.
• Referring URLs (the page from which you arrived at our website).
• Date and time of your visit.
• Device identifiers and mobile device information.

This information is collected through cookies, web beacons, and similar tracking technologies. See Section 6 (Cookies and Tracking Technologies) for more details.

Information from Third Parties

We may receive information about you from third parties, such as referring physicians, hospital systems, or other healthcare providers, when they refer you to our services. This clinical referral information is handled in accordance with our Notice of Privacy Practices and applicable HIPAA regulations.

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Examples
Respond to inquiries	Answering questions about dialysis services, locations, or insurance coverage submitted through our contact form or by phone.
Facilitate patient care	Processing patient intake forms, scheduling consultations, and coordinating with referring physicians.
Operate and improve our website	Analyzing site usage to understand what content is most helpful and to improve navigation and functionality.
Marketing and communications	Sending newsletters, health education resources, or updates about ARC Dialysis services where you have opted in or where permitted by law.
Employment processing	Reviewing and responding to job applications submitted through our Employment Opportunities page.
Legal and compliance	Complying with applicable laws and regulations, responding to legal process, and enforcing our Terms and Conditions.
Security	Detecting and preventing fraud, unauthorized access, or other harmful activities on our website.

4. How We Share Your Information

ARC Dialysis does not sell your personal information to third parties. We do not rent or trade your personal information to marketers. We may share your information in the following limited circumstances:

Service Providers

We work with trusted third-party vendors who help us operate our website and business, such as website hosting providers, analytics platforms, email service providers, and form processing tools. These service providers have access to your information only to perform services on our behalf and are contractually required to protect that information.

Healthcare Coordination

We may share your information with other healthcare providers, hospitals, or specialists involved in your care, consistent with our Notice of Privacy Practices and applicable HIPAA regulations. This includes coordination with referring nephrologists, hospital systems such as Jackson Health System, and other care partners.

Legal Requirements

We may disclose your information when required by law, such as in response to a court order, subpoena, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of ARC Dialysis, our patients, or others.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or similar transaction involving ARC Dialysis, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control that affects your personal information to the extent required by law.

With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so, such as participating in testimonials or press features (shared only with full HIPAA-compliant patient authorization).

5. HIPAA and Protected Health Information

As a HIPAA-covered entity, ARC Dialysis is required to maintain the privacy of your Protected Health Information (PHI) — information that relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for that healthcare, and that can identify you or reasonably be used to identify you.

Our obligations under HIPAA, including how we may use and disclose your PHI for treatment, payment, and healthcare operations — and your rights as a patient with respect to your PHI — are described in detail in our Notice of Privacy Practices. Our Notice of Privacy Practices is available:

• At any of our 12 ARC Dialysis center locations.
• By request — call (305) 448-6261 and we will mail or email a copy to you.
• [Link to Notice of Privacy Practices PDF — add when available]

If you have questions about your rights under HIPAA or how your health information is handled in the context of your medical treatment, please speak with your center's Patient Services coordinator or contact our Privacy Officer at the corporate office address below.

6. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They help the website remember your preferences and allow us to understand how visitors use our site. Similar technologies include web beacons, pixel tags, and local storage.

How We Use Cookies

ARC Dialysis uses the following categories of cookies and tracking tools:

• Strictly Necessary Cookies — Essential to the operation of our website. Without these, the website cannot function properly. These cannot be disabled.
• Analytics and Performance Cookies — We use Google Analytics (currently UA-213823725-1) to collect aggregated, anonymized data about how visitors use our website — such as which pages are visited most frequently and how users navigate the site. This helps us improve the website experience. Google Analytics may set cookies on your device. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.
• Functional Cookies — Remember your preferences, such as language or region, to provide a more personalized experience.
• Third-Party Cookies — Embedded content from third-party providers (such as Google Maps or YouTube) may place their own cookies on your device. These are governed by those providers' privacy policies.

Managing Cookies

Most web browsers allow you to manage cookie preferences through your browser settings. You may be able to set your browser to refuse certain cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org.

7. Third-Party Services

Our website uses and links to third-party services whose privacy practices are governed by their own policies. These include:

• Google Analytics — Website analytics. Google Privacy Policy
• Google Maps — Embedded maps for our location pages. Google Privacy Policy
• YouTube — Patient education and informational video content. Google/YouTube Privacy Policy
• Facebook / Meta — Social media links and potential social sharing functionality. Meta Privacy Policy
• LinkedIn — Social media links. LinkedIn Privacy Policy

We encourage you to review the privacy policies of any third-party services you access through our website. ARC Dialysis is not responsible for the privacy practices of third-party websites or services.

8. Data Security

ARC Dialysis takes reasonable administrative, technical, and physical measures to protect the information we collect from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include:

• Secure Sockets Layer (SSL/TLS) encryption for data transmitted through our website.
• Access controls limiting staff access to personal information to those with a legitimate need.
• Regular review of data collection, storage, and processing practices.
• Physical safeguards at our facilities and those of our service providers.

However, no method of electronic transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at (305) 448-6261 or info@arcdialysis.com.

In the event of a data breach involving unsecured PHI, ARC Dialysis will comply with applicable HIPAA breach notification requirements, including notifying affected individuals and relevant authorities as required by law.

9. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through our website. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete such information.

Pediatric dialysis patients whose care is managed by a parent or guardian should contact their ARC Dialysis center directly. Any personal information collected in connection with pediatric patient care is handled in accordance with HIPAA and applicable state law.

10. Your Rights and Choices

General Website Privacy Rights

With respect to personal information collected through our website, you may have the following rights depending on applicable law:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request that we correct inaccurate or incomplete personal information.
• Deletion — Request that we delete your personal information, subject to certain exceptions (such as legal obligations or ongoing care).
• Opt-Out of Marketing — Unsubscribe from marketing emails by following the unsubscribe instructions in any email we send you, or by contacting us directly.
• Cookie Preferences — Manage cookie settings through your browser as described in Section 6.

HIPAA Patient Rights

If you are an ARC Dialysis patient, you have additional rights with respect to your PHI under HIPAA, including rights to access, amend, and receive an accounting of certain disclosures of your health information. These rights are described fully in our Notice of Privacy Practices, available at your center or upon request.

To exercise any of the rights described above, please contact us using the information in Section 12 (Contact Us) below. We will respond to your request within the time frames required by applicable law.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

For significant changes that affect your rights, we will make reasonable efforts to notify you, such as by posting a notice on our website's homepage. Your continued use of our website after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• ARC Dialysis – Privacy Officer / Corporate Office
• 4960 SW 72nd Ave, Suite 208
• Miami, FL 33155
• Phone: (305) 448-6261
• Fax: (305) 448-6268
• Email: info@arcdialysis.com
• Website: https://arcdialysis.com

For HIPAA-related complaints, you also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints or by calling 1-800-368-1019. We will not retaliate against you for filing a complaint.