Our Commitment to Your Privacy
Step By Step Pediatrics is committed to protecting the privacy of your child's health information. This Notice of Privacy Practices describes how we may use and disclose protected health information (PHI) about your child and how you can access this information. We are required by law to maintain the privacy of PHI and to provide you with this notice.
How We Use and Disclose Health Information
We may use and disclose your child's health information for the following purposes:
- Treatment: To provide, coordinate, or manage your child's healthcare and related services.
- Payment: To bill and collect payment from you, your insurance plan, or other sources.
- Healthcare Operations: For quality assessment, staff training, and practice management activities.
- Legal Requirements: When required by federal, state, or local law, including public health reporting.
Your Rights
As a parent or legal guardian, you have the following rights regarding your child's health information:
- The right to request and receive a copy of your child's medical records.
- The right to request corrections to inaccurate or incomplete information.
- The right to request restrictions on how we use or disclose your child's information.
- The right to receive an accounting of disclosures we have made.
- The right to receive this notice in paper form upon request.
Website Information We Collect
This website does not collect personal information unless you voluntarily contact us via email or phone. We do not use tracking cookies, third-party advertising, or analytics platforms that share your data.
Email Communications
If you contact us by email, we will use your email address only to respond to your inquiry or to process a records request. You may opt out of non-essential communications at any time by replying to any email with "Unsubscribe" in the subject line.
Data Security
Medical records requests and delivery are handled through a HIPAA-compliant system using encryption, identity verification, and secure single-use download links. We have signed a Business Associate Agreement (BAA) with our cloud infrastructure provider (Amazon Web Services) and maintain administrative, physical, and technical safeguards in accordance with the HIPAA Security Rule.
Third-Party Service Providers
We work with a limited number of trusted third-party service providers to operate this system, including our secure cloud infrastructure provider (Amazon Web Services) and our identity verification provider. Each provider that may handle protected health information has signed a Business Associate Agreement with our practice and is contractually bound to HIPAA's privacy and security requirements. We do not sell or share your information with third parties for marketing purposes.
Data Retention
Medical records and related information are retained in accordance with Colorado state law and our practice's record retention policy. Records will continue to be securely retained and made available to authorized guardians through the period required by law, even in the event of practice closure.
Contact Us
To exercise your privacy rights or to file a complaint, please contact our practice:
Step By Step Pediatrics
3035 S Parker Rd, Suite 555, Aurora, CO 80014
Phone: (303) 338-5437
Email: support@step-by-step-pediatrics.com
This notice is effective as of June 2026 and complies with the Health Insurance Portability and Accountability Act (HIPAA), 45 C.F.R. Parts 160 and 164, and 42 C.F.R. Part 2. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr.
