HEROHOUSE™
PEDIATRICS
  • How It Works
  • What We Help With
  • Behavioral Health
  • Pricing
  • About
  • Blog
  • FAQ
  • Schedule a Visit
  • Get Started
  • Español
Home / Privacy Policy

Privacy Policy

Effective Date: January 1, 2026  ·  Last Updated: March 1, 2026

HeroHouse™ Pediatrics is committed to protecting the privacy of our patients, families, and website visitors. We comply with HIPAA and applicable laws governing the use and protection of health information.

On This Page
  • Who We Are
  • Protected Health Information
  • Information We Collect
  • How We Use Your Information
  • How We Share Information
  • Electronic Communication
  • SMS / Text Message Communications
  • Telehealth Platform Security
  • Images and Media
  • Cookies & Tracking
  • Data Retention
  • Your HIPAA Rights
  • Children's Privacy
  • Changes to This Policy
  • Contact Us
HIPAA Notice: HeroHouse™ Pediatrics is a HIPAA-covered entity. This Privacy Policy addresses general data practices. A separate Notice of Privacy Practices governing Protected Health Information is available upon request and provided at enrollment. To request a copy, email info@herohousepediatrics.com.

1. Who We Are

HeroHouse™ Pediatrics is a pediatric telehealth practice operated by Jesse Jones, MSN, APRN, CPNP-PC, a board-certified Pediatric Nurse Practitioner licensed in the state of Indiana. We provide virtual pediatric healthcare services to families throughout Indiana.

Contact: info@herohousepediatrics.com  |  herohousepediatrics.com  |  Indiana, United States

2. Protected Health Information (PHI)

Protected Health Information (PHI) includes any individually identifiable health information related to patient care. PHI must be accessed, used, disclosed, and stored only as necessary to provide care and operate the practice.

Minimum Necessary Access: Access to patient medical records is limited to the minimum necessary to perform clinical, operational, or administrative duties. Providers and staff may only access records when there is a legitimate need related to patient care, documentation, billing, quality assurance, or authorized operations. Accessing records without a legitimate purpose — including curiosity-based access or access to records of family members or acquaintances — is prohibited.

For solo-provider operations, the provider is responsible for ensuring access occurs only when appropriate and that all access is purpose-driven and documented as required.

3. Information We Collect

Information You Provide Directly

  • Contact information: Name, email address, phone number, and mailing address
  • Patient information: Child's name, date of birth, gender, medical history, medications, allergies, and weight as reported during registration or visits
  • Account and membership information: Login credentials and selected membership or service plan
  • Payment information: Billing details processed through our secure payment processor (we do not store full card numbers)
  • Clinical communications: Messages, symptom reports, and images submitted through approved secure platforms
  • Caregiver and proxy information: Identity and authority of individuals authorized to participate in telehealth visits on behalf of the patient

Information Collected Automatically

  • Browser type, operating system, IP address, and device identifiers
  • Pages visited, time on site, and interaction data for operational and quality purposes
  • Cookies used for essential site functionality (see Cookies section)

Information From Third Parties

  • Clinical records or information received from our EHR platform (DrChrono) in connection with patient care
  • Payment confirmation information from our payment processor

4. How We Use Your Information

We use the information we collect to:

  • Provide, document, and manage telehealth visits and care services
  • Conduct pre-visit triage screening to determine whether telehealth is appropriate
  • Communicate with caregivers regarding appointments, care instructions, and follow-up
  • Process payments and manage membership or subscription accounts
  • Perform weight verification and support safe, weight-based medication dosing
  • Comply with HIPAA, mandatory reporting laws (including child abuse and neglect reporting), and other applicable regulations
  • Support quality assurance, chart audit, and clinical improvement activities
  • Respond to complaints, grievances, and feedback through official channels
  • Protect the safety and security of patients and the practice

We will not use your information for purposes materially different from those described above without your consent.

5. How We Share Information

We do not sell your personal information. We may share information only in these circumstances:

  • Treatment, payment, and healthcare operations: As permitted under HIPAA, information may be shared with other providers involved in care, for billing, or for quality and operational purposes.
  • Service providers: Trusted vendors (such as our EHR, payment processor, and telehealth platform) who operate under Business Associate Agreements and are contractually required to protect health information.
  • Mandatory reporting: When required by law, including reporting of suspected child abuse or neglect to the appropriate child protective services authority based on the child's physical location. Mandatory reporting obligations apply regardless of telehealth limitations.
  • Emergency situations: When immediate safety concerns require disclosure to emergency services or other appropriate parties.
  • Legal requirements: When required by court order, subpoena, or government regulation.
  • With your consent: For any other purpose with your explicit written authorization.

6. Electronic Communication

Approved communication methods include secure patient portals, encrypted messaging platforms, and secure email where appropriate. Unsecured communication methods are not used for PHI unless explicitly permitted by law and acknowledged by the caregiver.

Important limitations: Electronic messaging is intended for non-urgent matters only and must not be used for emergencies or time-sensitive clinical concerns. Messages are monitored during normal business hours. Immediate responses are not guaranteed. Caregivers are responsible for seeking in-person or emergency care when conditions require it.

Social media and public online platforms are not appropriate channels for medical communication. HeroHouse Pediatrics cannot discuss individual patient care in public forums.

6A. SMS / Text Message Communications

HeroHouse Pediatrics sends SMS (text message) communications to families who have an established care relationship with the practice. These messages are sent to the mobile phone number provided on the signed patient intake paperwork or otherwise authorized by the caregiver during scheduling.

What we send: Appointment confirmations and reminders, pre-visit triage screening reminders, appointment cancellation or rescheduling notices, post-visit follow-up, and other care-related administrative communications. We do not send marketing, promotional, or solicitation messages through SMS.

How you opt in: By providing your mobile phone number on signed patient intake documents or verbally during scheduling, you authorize HeroHouse Pediatrics LLC to send the SMS communications described above. SMS consent is separate from treatment consent — declining SMS does not affect your access to care, and you may continue to receive communications by email, phone, or secure portal.

How to opt out: You can stop receiving SMS messages from HeroHouse Pediatrics at any time by replying STOP to any message. You can also reply HELP for help, or contact us at info@herohousepediatrics.com to manage your communication preferences. After opting out, you will receive one final confirmation message acknowledging the opt-out, after which no further SMS will be sent from the practice unless you re-enroll.

Message frequency & costs: Message frequency varies based on your appointments and care needs — typically 1–4 messages per month per active patient family. Message and data rates may apply per your mobile carrier plan. HeroHouse Pediatrics does not charge for SMS communications.

Privacy of SMS content: SMS is not a secure channel and is not used to transmit detailed Protected Health Information (PHI). Messages are limited to appointment logistics, screening reminders, and brief administrative notifications. Sensitive clinical information is communicated through secure channels (patient portal, encrypted email, or telehealth visit).

For SMS-related questions or to update your phone number on file, email info@herohousepediatrics.com.

7. Telehealth Platform Security

Telehealth visits are conducted using secure, HIPAA-compliant platforms. Providers use secure devices, protect access credentials, log out when not in use, and avoid public or unsecured environments. Caregivers are responsible for participating from a private setting. HeroHouse Pediatrics is not responsible for privacy breaches resulting from caregiver-controlled environments or devices.

Reasonable safeguards are used to protect all electronic communications, but no method of electronic transmission is 100% secure. By using our telehealth services, you acknowledge and accept the inherent risks of electronic communication.

8. Images and Media

Images or videos shared for clinical assessment through approved secure platforms become part of the medical record when retained. These must be submitted only through approved secure channels — not through email, text message, or social media. Images submitted through unauthorized channels will not be used for clinical purposes and cannot be guaranteed to be secure or retained appropriately.

9. Cookies & Tracking

Our website uses essential cookies necessary for basic functionality. We may use analytics tools to understand site usage patterns; these do not collect personally identifiable health information. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, though disabling them may affect site functionality.

10. Data Retention

Medical records are retained in accordance with Indiana state law and applicable federal regulations. For pediatric patients, records are generally retained until the patient reaches adulthood plus the applicable statutory period. Non-clinical personal data is retained as necessary for operational, legal, and compliance purposes. You may request deletion of non-clinical data by contacting us, subject to legal retention obligations.

11. Your HIPAA Rights

As a patient or caregiver of a patient at HeroHouse Pediatrics, you have the following rights regarding Protected Health Information:

  • Right to access: Request a copy of your child's medical records
  • Right to amend: Request corrections to inaccurate or incomplete records
  • Right to an accounting of disclosures: Request a list of certain disclosures of PHI
  • Right to request restrictions: Request limitations on certain uses and disclosures (we may not be required to agree)
  • Right to confidential communications: Request how we communicate with you
  • Right to a copy of this notice: Request our full HIPAA Notice of Privacy Practices at any time
  • Right to file a complaint: File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr if you believe your privacy rights have been violated

To exercise any of these rights, contact us at info@herohousepediatrics.com. We will respond within 30 days.

12. Children's Privacy

Our services are designed for pediatric patients whose parents or legal guardians provide consent and manage all accounts. We do not collect personal information directly from minor patients. All accounts for minors are managed by a parent or legal guardian with legal authority to consent to medical care. This includes authorized proxies who have a signed Proxy Authorization Form on file.

If you believe we have collected information from a minor without appropriate parental consent, please contact us immediately at info@herohousepediatrics.com.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Updated policies will be posted with a revised effective date. For material changes, we will provide advance notice to enrolled patients. Continued use of our services constitutes acceptance of the updated policy.

14. Contact Us

HeroHouse™ Pediatrics — Privacy Officer
Email: info@herohousepediatrics.com
Website: herohousepediatrics.com
Indiana, United States

To file a complaint with the federal government: U.S. Department of Health and Human Services Office for Civil Rights — hhs.gov/ocr. We will not retaliate against you for filing a complaint.

HIPAA-compliant via DrChrono Indiana Board of Nursing — License #71014086A Secure payments via Stripe PNCB-Certified PNP-PC Founded 2026 · Plainfield, IN
HEROHOUSE™
PEDIATRICS

Calm, unrushed pediatric care for Indiana families — built on clinical judgment, honest guidance, and respect for your time.

Clinician-owned by Jesse Jones, MSN, APRN, CPNP-PC

NPI #1154265304
Facebook Instagram

Navigate

  • How It Works
  • What We Help With
  • Behavioral Health
  • Pricing
  • About
  • FAQ

Resources

  • Blog
  • Newsroom
  • Where We Practice
  • When Telehealth Isn't Enough
  • Privacy Policy
  • Terms of Service

Enroll

  • Get Started
  • Schedule a Visit

© 2026 HeroHouse Pediatrics. All rights reserved.

HeroHouse Pediatrics is not an emergency service. If your child is experiencing a medical emergency, call 911 or go to the nearest emergency department. This website is for informational purposes only and does not constitute medical advice.