Last Updated 7/14/2026
Privacy Policy
Effective Date: June 30, 2026
One Community Health (“OCH,” “we,” “us,” or “our”) respects your privacy. This Website Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit OneCommunityHealth.org (the “Website”).
Important: This Website Privacy Policy governs Website interactions only. It does not govern Protected Health Information (PHI). PHI is governed by our Notice of Privacy Practices (NPP), which explains how we use and disclose PHI and your rights under HIPAA. Our NPP is posted and available online as required.
Medical Disclaimer
If you are experiencing a medical emergency, call 911 immediately. Website content is for informational purposes only and is not medical advice, diagnosis, treatment, or recommendations. Visiting the Website does not create a provider–patient relationship.
Scope of this Policy
This policy applies to information collected through this Website, including information you send via Website forms. It does not apply to:
• Information collected offline or on websites/apps we do not control; or
• Information you provide directly to third parties outside this Website.
PHI is excluded from this Website policy and is governed by our NPP, which is the legally required notice describing PHI uses/disclosures and your rights.
Protected Health Information (PHI)
This website is not intended for submitting Protected Health Information (PHI) throughgeneral contact forms or email. PHI includes personal health details that can identify you and are protected by law.
When PHI is needed for care or official purposes, One Community Health uses approved, secure systems designed to meet HIPAA requirements. Marketing and communication tools are used only for limited, appropriate information and follow privacy and security standards.
One Community Health works with trusted partners that are required to protect PHI and follow all applicable privacy laws.
Limitation on PHI via the Website
Do not include medical details or PHI in general Website contact forms, newsletter signups, or routine inquiries. PHI submitted through nonsecure channels may be deleted or redirected to our secure system.
Governing Policy for PHI
PHI collected through JotForm or any other HIPAA secure mechanism is governed by our NPP, not this Website policy.
View our NPP at: Notice of Privacy Practices
Platform and Essential Cookies (WordPress)
Our Website is built on WordPress. WordPress may use strictly necessary or functional cookies to support basic operations such as session integrity, security, and core functionality. These cookies are not used for advertising or cross site tracking.
Analytics (Privacy Preserving; No IP Identification)
We use internal, privacy focused analytics to understand general Website performance and improve user experience. We do not use IP addresses to identify any visitor, and analytics are configured to avoid storing full IP addresses through truncation, hashing, or similar safeguards. All analytics data is aggregated and nonpersonal.
No Third Party Tagging or Ad Tech
We do not use third‑party tracking or advertising tools on this website. This approach helps protect user privacy and ensures that health‑related information is not shared with external vendors for marketing or tracking purposes. Avoiding these tools reduces the risk of unauthorized disclosure and supports compliance with healthcare privacy standards.
Email Collection & Communications
If you subscribe to our email list, we collect your email address via a HIPAA Compliant digital and email marketing platform and use it only for marketing communications such as educational or event driven newsletters. You can unsubscribe at any time using the link in our emails.
SMS and/or RCS Text Messages
We collect mobile phone numbers through MyChart to communicate with patients via SMS and/or RCS text messages for purposes such as appointment reminders, billing notifications, care coordination, and other healthcare-related communications.
Your privacy is a priority. We do not sell mobile phone numbers or share them with third parties or affiliates for marketing or promotional purposes. We use your mobile phone number only for the communications you have authorized and will not use it for unrelated marketing without your express written consent.
By opting in to text messages, you agree that OCHIN and its Affiliate Clinics may send automated SMS messages to the mobile number provided regarding your care, appointments, MyChart account, billing, prescriptions, and related services. You understand that text messages may contain protected health information (PHI), are not encrypted, and may be viewed or intercepted by unauthorized parties. Confidentiality cannot be guaranteed, and carriers are not responsible for delayed or undelivered messages. Your consent remains in effect until you change your communication preferences. Consent to receive text messages is voluntary and is not required to access MyChart or receive care.
Message and data rates may apply. Message frequency varies. You can text ‘STOP’ at any time to opt out. Text ‘HELP’ for help.
Payment Processing
If the Website links you to Zeffy LLC, a third-party payment processor, that processor handles your donation payment under its own privacy policy. We do not receive full payment card details through the Website.
Information Collected Automatically
When you visit the Website, limited technical information may be collected automatically, including pages visited, timestamps, browser type, and device type. We use this information to operate, secure, and improve the Website. We do not use this information to build advertising profiles.
We do not use online tracking technologies in a manner that would disclose PHI to third parties.
How We Use Website Information
We use Website collected information to:
• Operate, secure, troubleshoot, and improve the Website;
• Respond to your non PHI inquiries;
• Send marketing emails (only if you opt in);
• Comply with law, enforce policies, and protect rights and safety.
We do not sell personal information or use behavioral advertising.
How We Share Website Information
We may share limited Website information with:
• Service providers acting under our instructions for hosting, security, or email delivery;
• Affiliates assisting with compliance or operations;
Security
We employ reasonable administrative, technical, and physical safeguards to protect information collected through the Website, such as encryption in transit and access control practices. Internet transmission cannot be guaranteed as fully secure; use our HIPAA secure forms for PHI.
HIPAA requires that covered entities protect PHI and provide an NPP describing rights, uses, disclosures, and legal duties. Website safeguards complement, but do not replace, those obligations.
Data Retention
We retain Website collected information only as long as necessary to fulfill the purposes described, meet legal requirements, or resolve disputes. When no longer required, information is deleted or deidentified.
Your Choices
• Marketing emails: unsubscribe anytime using the link in our messages.
• Cookies: manage essential cookies through your browser settings, understanding that disabling essential cookies may limit functionality.
• Website inquiries: you may request deletion of information by contacting us.
Children’s Privacy
The Website is not intended for children under 13, and we do not knowingly collect information from children under 13. If you believe such information has been submitted, contact us and we will delete it.
“Do Not Track” (DNT)
Browsers may send DNT signals. Because no industry standard exists, we do not respond to DNT signals. You may still control cookies via your browser settings.
International Users
The Website is directed to users located in the United States. If you are located outside of the United States and choose to use the Website or provide your information to us, you should be aware that we may transfer your information to the United States and process it there. The privacy laws in the United States may not be as protective as those in your jurisdiction. Your consent to this notice followed by your submission of information to us through or in connection with the Website represents your agreement to the transfer of your information to the United States.
Changes to This Policy
We may update this policy periodically. Updated versions will be posted with a new Effective Date. Continued use of the Website after an update constitutes acceptance of the revised policy.
Contact Us
Website Privacy Questions: [email protected]
General Feedback: [email protected]
PHI & HIPAA (NPP): Please refer to our NPP for PHI related rights and contact information.