Privacy Policy

1. Who We Are

This Privacy Policy applies to Vish Medical, the medical practice of Dr. Arpana Pillay, located in Central Florida and accessible at https://vishmed.com. Dr. Pillay is an Internal Medicine physician providing primary care, weight loss, urgent care, and telehealth services. As a healthcare provider, Vish Medical is a Covered Entity under HIPAA and is committed to maintaining the privacy and security of your health information.

2. Information We Collect

When you use the contact form on this website, we collect:

• Full name
• Email address
• Phone number (optional)
• Message content you provide

We do not collect sensitive health information (Protected Health Information / PHI) through this website's contact form. Clinical health information is collected separately through our HIPAA-compliant patient management systems.

3. How We Use Your Information

Information submitted through our contact form is used solely to:

• Respond to your inquiry
• Schedule appointments at your request
• Provide information about our services

4. How Your Information Is Transmitted

Contact form submissions are transmitted via encrypted email using Google Workspace SMTP over TLS (Transport Layer Security). Contact form data is not stored in a database.It is delivered directly to the practice's secure inbox and is retained only as long as necessary to respond to your inquiry.

5. We Do Not Sell Your Information

Vish Medical does not sell, rent, trade, or otherwise share your personal information or health information with third parties for marketing or commercial purposes. Period.

6. HIPAA Notice of Privacy Practices

As a HIPAA Covered Entity, Vish Medical maintains strict policies governing the use and disclosure of Protected Health Information (PHI). Your PHI may be used or disclosed for:

• Treatment — sharing information with other healthcare providers involved in your care
• Payment — submitting claims to your insurance company
• Healthcare Operations — quality improvement, compliance, and administrative activities

Other uses of your PHI require your written authorization. You have the right to revoke any authorization you have given us. For other disclosures required by law (such as public health reporting), we will comply with applicable regulations.

7. Your Rights

Under HIPAA, you have the right to:

• Access and obtain a copy of your health records
• Request corrections to your records
• Receive an accounting of disclosures of your PHI
• Request restrictions on certain uses or disclosures
• Receive confidential communications in an alternative way or location
• File a complaint if you believe your privacy rights have been violated

8. Cookies & Analytics

This website may use Google Analytics (GA4) to understand how visitors interact with the site. GA4 collects anonymized usage data such as page views, session duration, and traffic sources. No personally identifiable information is sent to Google Analytics. You can opt out of GA4 tracking by using the Google Analytics Opt-out Browser Add-on.

9. Contact Us About Privacy

If you have questions about this Privacy Policy or wish to exercise your HIPAA rights, please contact us: