Privacy Policy

Privacy Policy for Diablo Infectious Diseases

Effective Date: December 26, 2025

Diablo Infectious Diseases (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), the Telephone Consumer Protection Act (TCPA), and applicable state and federal laws.

1. Information We Collect

We may collect the following categories of information:

• Personal Identifiers: name, address, phone number, email address, date of birth

• Protected Health Information (PHI): medical history, diagnoses, treatment information, test results

• Insurance Information: policy numbers, payer details

• Payment Information: billing and payment records

• Communication Preferences: consent for SMS, email, or phone communications

Sources of Information

We collect information:

• Directly from you or your authorized representative

• From healthcare providers involved in your care

• From insurance providers and payers

• Through patient portals, forms, and communication systems

2. How We Use Your Information

We use your information to:

• Provide medical care and treatment

• Schedule and manage appointments

• Communicate with you regarding your care

• Process billing and insurance claims

• Send appointment reminders and health-related notifications

• Improve our services and patient experience

• Comply with legal, regulatory, and reporting requirements

3. How We Share Your Information

We do not sell or rent your personal information and have not sold personal information in the past 12 months.

We may share your information with:

• Healthcare providers involved in your treatment

• Laboratories, pharmacies, and specialists

• Insurance companies and payment processors

• Third-party service providers that assist with healthcare operations, billing, or communications (including messaging platforms)

• Government authorities when required by law

All disclosures are made in compliance with HIPAA and applicable California law.

4. Your Rights Under HIPAA

You have the right to:

• Access and obtain a copy of your medical records

• Request corrections to inaccurate or incomplete information

• Request restrictions on certain uses or disclosures of your information

• Request confidential communications (such as alternative contact methods)

• Receive a paper copy of this Privacy Policy

• File a complaint if you believe your privacy rights have been violated

You may file a complaint with us or with the U.S. Department of Health and Human Services. Filing a complaint will not affect your care.

5. Your Rights Under California Law (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect, use, and disclose

• Access a copy of the personal information we maintain about you

• Request deletion of personal information, subject to legal exceptions

• Correct inaccurate personal information

• Limit the use or disclosure of sensitive personal information

• Opt out of the sale or sharing of personal information (if applicable)

How to Submit a CCPA Request

You may submit a verifiable consumer request by:

• Calling (925) 463-1318

• Emailing mail@diabloid.com

We will respond to verified requests within 45 days, as required by law.

6. Messaging and Communication Consent (A2P / TCPA)

By providing your phone number or email address, you provide express consent to receive automated and manual communications from Diablo Infectious Diseases, including appointment reminders, care notifications, and billing messages. These messages may include protected health information.

• Message frequency may vary

• Message and data rates may apply

• Consent is not a condition of receiving healthcare services

• You may opt out at any time by following the opt-out instructions in the message or by contacting us directly

We may use third-party service providers to deliver communications, all of whom are required to comply with HIPAA, TCPA, and applicable privacy laws.

7. Security Measures

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. However, no electronic transmission or storage system can be guaranteed to be 100% secure.

8. Children and Minors’ Privacy

We may provide healthcare services to minors in accordance with California and federal law. When applicable, personal and health information of minors is collected and used with the consent of a parent or legal guardian, except where minor consent is permitted or required by law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated effective date.

10. Contact Information / Privacy Officer

If you have questions, wish to exercise your rights, or need further information regarding this Privacy Policy, please contact:

Privacy Policy Officer:
Malena Salcedo
Diablo Infectious Diseases
13851 East 14th Street, Suite 308
San Leandro, CA 94578
Phone: (925) 463-1318
Email: mail@diabloid.com