Now Accepting Patients
Privacy
This page is the public privacy policy for nortonderm.com, the ModMed patient portal, and Concierge membership. ModMed handles the patient portal and medical payments. Concierge access is a separate signup, and Stripe handles that membership. It is the Policy URL registered with ModMed for the Norton Dermatology Concierge Portal. It is not a substitute for the HIPAA Notice of Privacy Practices you may receive in the office.
Norton Dermatology & Wellness PLLC is a physician-led practice in Morgantown, West Virginia. Laura Clark, Operations Manager, is the Compliance and Privacy Officer. Questions about this policy may be directed to 6000 Coombs Farm Drive, Suite 102, Morgantown, WV 26508, telephone 304-381-1437, or drnorton@nortonderm.com.
We collect what you give us to book a visit, pay a medical statement, sign up for Concierge, complete forms, or message the practice — and what your physician records for care. The ModMed patient portal uses the account you create there for your chart, visits, and medical payments. Concierge membership is a separate signup on this site. We do not ask for a medical record number or Social Security number as a website login. Veloura photographs are taken in the medical office. They cannot be uploaded on this public website, and they cannot be downloaded from it.
Personal data is used to provide care, schedule visits, operate the ModMed patient portal, enroll you in Concierge when you sign up, and bill medical care as required. EMA remains the legal chart. This website is not a second medical record. Medical payments are handled in ModMed. Concierge membership fees are handled by Stripe. We do not sell, rent, or trade personal data. We do not use your chart for advertising or to build a public mailing list. Texts about Shop products or the Veloura program are sent only if you check that box.
If you opt in, Norton Dermatology & Wellness PLLC may text you about this practice only. You can opt in or opt out on the web form at nortonderm.com/sms, by scanning the QR code on that page and submitting the form, by texting START or JOIN to 304-381-1437, or on the communication consent form. Text STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to opt out. Text HELP or INFO for help. For a dated visit, that is one reminder about one week before the visit and one reminder about one day before the visit. You may also receive a reply when you text the practice. Message frequency varies. Message and data rates may apply. Consent to receive texts is not a condition of treatment.
We do not share, sell, rent, or provide your mobile phone number, SMS opt-in, or messaging consent to third parties, affiliates, or lead generators for marketing or promotional purposes. We do not transfer that consent to another business. A telephone or messaging vendor may deliver a text you consented to receive from this practice. That delivery is not a sale of your number and is not permission for the vendor to market to you.
Clinical and operational records this application writes — data files, service payloads, and agent memories — are encrypted at rest with AES-256-GCM. Connections to ModMed, Stripe, and Twilio use HTTPS. Card numbers are not collected on this website. Medical payments are taken in the ModMed patient portal. If a patient signs up for Concierge access, that membership fee is taken on Stripe’s hosted Checkout page.
We share information with vendors who perform services for the practice when the law permits it and appropriate contracts are in place. ModMed EMA is the chart of record and handles the patient portal and medical payments. Stripe handles Concierge membership Checkout after you sign up. Certified FHIR access, when you authorize it, follows the scopes you approve at ModMed. Chart data in that product dataset may not appear in real time. This sharing does not include your mobile phone number or messaging consent for marketing or promotional purposes.
Patients may request a paper copy of our Notice of Privacy Practices at the office or by contacting Laura Clark, Operations Manager, the Compliance and Privacy Officer. You may complain to the practice without retaliation. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.
We may update this website policy when our practices change. The current version is the page published at /privacy. Material changes to how we handle protected health information are also reflected in the Notice of Privacy Practices then in effect.