Website Security Statement

---

Effective date: May 6, 2026 

Contact: Diane Blazer, Program Administrator — dianeblazer@chathamhospitalists.com — (912) 819‑8974 — 5354 Reynolds Street, Suite 222, Savannah, GA 31405 

Print: To print this page, use your browser’s Print function (Ctrl/Cmd+P).

This Website Security Statement explains the administrative, technical, and physical safeguards Chatham Hospitalists uses to protect information collected through this website. It describes how we secure data, how long we retain it, how we respond to security incidents, and what you can do to help protect your information. This statement applies only to information collected through this website and does not replace our HIPAA Notice of Privacy Practices for protected health information maintained in clinical systems.

Encryption

• We use HTTPS/TLS encryption to protect data in transit between your browser and our website.
• Sensitive transmissions are encrypted end to end where supported.

Secure Hosting and Infrastructure

• The website is hosted with providers that maintain industry standard physical and network security controls.
• Servers are patched and monitored regularly to reduce vulnerabilities.

Access Controls and Authentication

• Administrative access to site systems is limited to authorized personnel only.
• Access is protected by strong passwords and, where available, multi‑factor authentication.
• Role‑based access limits what staff can view or change.

Data Minimization and Segregation

• We collect only the information necessary to operate the site and respond to inquiries.
• Public website data is kept separate from clinical systems that store protected health information.

Monitoring and Logging

• We maintain logs of system activity to detect and investigate suspicious behavior.
• Logs are retained and reviewed in accordance with our retention policies.

Transmission

• Do not send sensitive health information via unsecured email or public contact forms. If you must share PHI, contact us for secure submission options.

Storage

• Non‑medical website data (form entries, analytics) is stored on secure servers with access controls.
• PHI is not stored on the public website; any PHI submitted through secure clinical channels is stored in clinical systems governed by our HIPAA Notice of Privacy Practices.

Retention

• We retain personal information only as long as necessary for the purpose collected or as required by law.
• Aggregate or de‑identified data may be retained indefinitely for analytics and improvement.

Service providers

• We use third‑party vendors for hosting, analytics, and technical services. Vendors are contractually required to implement appropriate security measures and to process data only on our instructions.

Embedded content and links

• Third‑party content or links may have different security practices. We are not responsible for the security of external sites; review their policies before sharing information.

Incident detection and response

• We maintain an incident response plan to investigate and contain security events.
• When an incident is detected, we take steps to mitigate harm and secure affected systems.

Notification

• If a breach affects your personal information, we will notify you and any required regulators in accordance with applicable law, including HIPAA breach notification rules when PHI is involved. Notifications will include a description of the incident, the information affected, and steps you can take to protect yourself.

• Protect your credentials — use strong, unique passwords and enable multi‑factor authentication where available.
• Avoid sharing PHI via unsecured email or public forms; contact us for secure submission methods.
• Keep software updated — ensure your browser and device software are current to reduce security risks.
• Report concerns — if you suspect a security issue or receive suspicious communications claiming to be from Chatham Hospitalists, contact Diane Blazer immediately.

Security contact Diane Blazer, Program Administrator Email: dianeblazer@chathamhospitalists.com Phone: (912) 819‑8974 Address: 5354 Reynolds Street, Suite 222, Savannah, GA 31405

To report a suspected security incident or to ask about our security practices, contact the security contact above. We will acknowledge receipt and provide next steps.

We may update this Website Security Statement to reflect changes in our practices or legal requirements. The effective date at the top will indicate the most recent revision. Material changes will be posted on this page.