Data Security Policy
Our Approach
Miss Caerus Wellness uses administrative, technical, and organizational safeguards designed to protect the information in our care. This policy describes safeguards that are implemented; it does not claim measures that are not in place.
Website Safeguards
This website is served over encrypted connections (HTTPS/TLS). It applies a strict content-security policy and does not run third-party advertising or cross-site trackers. Website forms are designed to minimize the data collected and ask that you not submit protected health information. Basic anti-abuse protections guard the forms.
Clinical Information Systems
Our clinical record system is operated under administrative, technical, and physical safeguards. Implemented controls include role-based access controls, multi-factor authentication for staff accounts, encryption of system backups, and audit logging of access to records. Access to protected health information is limited to workforce members who need it to perform their duties.
Vendors and Business Associate Agreements
Where a vendor handles protected health information on our behalf, we engage that vendor under the written agreement required by law before it handles such information.
Incident Response
We maintain procedures to identify, contain, and respond to suspected security incidents, and to provide any notifications required by law in the event of a breach of unsecured protected health information.
Your Role
Please help protect your information: keep your account credentials private, use a secure connection, and avoid sending sensitive health details through unsecured channels such as standard email or website forms.
Limitations
No method of transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
Contact Us
Questions about this policy can be directed to Miss Caerus Wellness through our Contact page. Please do not include medical or other sensitive health information in a website message.
Vendor Business Associate Agreements and the operational status of the clinical system should be confirmed by the Practice before relying on this statement.
Last updated: October 16, 2026. This policy is provided for general information and does not constitute legal advice.