Nomad Health Direct Primary Care · Miami Beach, Florida
← Back to Nomad Health

Privacy Policy

Effective July 23, 2026 · Last updated September 30, 2026

Who we are: Nora Bassam Khoury, MD, PLLC, a Florida professional limited liability company doing business as Nomad Health ("Nomad Health," "we," "us," "our").
What this covers: https://mynomadhealth.com and the applications served from it — our public website, online enrollment, and the patient portal (together, the "Services").

Version: 2.0
Contact: info@mynomadhealth.com · Tel (305) 680-0566 · 400 Arthur Godfrey Rd, Suite 200-01, Miami Beach, FL 33140
Privacy Officer: Steven A. Pino, Director of Clinical Operations

1. Overview

This Privacy Policy describes the information we collect through the Services, how we use it, when we share it, and the choices you have. We may update this Policy from time to time; the current version is always posted at https://mynomadhealth.com/privacy.

If you are our patient, your medical information is protected health information ("PHI") and is governed first by our Notice of Privacy Practices (the "Notice"), available at https://mynomadhealth.com/notice-of-privacy-practices. Where this Policy and the Notice differ about PHI, the Notice controls. This Policy adds what the Notice does not cover: the website, online accounts, payments, and information from people who are not yet patients.

We do not sell, rent, or license your information — identifiable or de-identified — and we do not use it for advertising.

2. Information You Provide to Us

Interest list. If you ask to be contacted when a membership opens, we collect your name, email address, phone number, the plan you are interested in, and how you heard about us. We use this only to contact you about membership.

Enrollment. When you join online, we collect your name, date of birth, sex, email address, mobile phone number, and how you heard about us, and we ask you to accept the agreements that apply to the plan you chose. This information creates your patient record and your portal account; your email address becomes your portal sign-in.

Patient portal. Through the portal you can view your own record and complete our intake and consent forms. Depending on the form, you may provide contact and demographic details, an emergency contact, your preferred pharmacy and other providers, your medical history, your medications and allergies, insurance information, and your electronic signature. Completed forms become part of your medical record. You may also send messages to our care team, join a video visit, and, if you choose, take a photo of yourself or your identification for your record.

Payments. Membership fees and service fees are paid through our payment processor, Helcim, in a secure payment form that Helcim provides. We never see or store your full card number. We receive confirmation that a payment was made, the amount, and what it was for. Recurring membership fees are charged to the card you provided, on the schedule you agreed to at checkout.

3. Information We Collect Automatically

When you use the Services, we receive standard technical information from your device and browser, such as your IP address, browser and device type, the pages you request, and the date and time of your visit. We use this information to keep the Services secure, to prevent abuse, and to fix problems.

Cookies and similar technologies. The patient portal uses only what is strictly necessary to keep you signed in during your visit; it does not use advertising or tracking cookies. Our public website uses a standard analytics service (Google Analytics) on a small number of pages so we can understand how many people visit and which pages they read. Advertising features are turned off. You may block or delete cookies in your browser; the portal will still work.

Do Not Track. We do not track you across other websites, so there is nothing for a browser "Do Not Track" signal to change.

4. Device Features and Notifications

Notifications. If you turn on notifications, the portal can alert your device that something is waiting for you, such as a message or a form. The alert itself never contains your name, your record number, or any medical information; you sign in to the portal to see what it is. You can turn notifications off at any time in your device or browser settings.

Camera and microphone. During a video visit, and when you take a photo for your record, the portal uses your camera and microphone only after your browser asks you for permission. Video visits are not recorded, and no audio or video from a visit is stored by us or by anyone on our behalf.

Location. The Services do not collect your device's location.

5. How We Use Information

We use the information described above to:

  • provide your medical care and operate the practice, as described in the Notice;
  • create and manage your portal account and communicate with you about your care, appointments, membership, and billing;
  • schedule and manage appointments and video visits;
  • process payments and keep billing records;
  • contact interest-list members about membership;
  • keep the Services secure and working properly; and
  • meet our legal obligations.

Telephone and text messages. By giving us your phone number you agree that we may call or text you about your care, appointments, and membership. Message and data rates may apply. Reply STOP to any text to stop receiving texts, or tell us by email or phone.

6. How We Share Information

We share information only as described here.

  • Service providers. Companies that help us run the Services — our software and hosting providers, our payment processor, our fax and email delivery services, and our notification service — receive only what they need to do their work for us and may not use it for their own purposes. Any provider that handles PHI on our behalf signs a Business Associate Agreement with us, as HIPAA requires. Our software is developed and operated for us by Brickell Bay Group LLC under such an agreement.
  • Your care. When your provider orders a test, an imaging study, or a prescription, the laboratory, imaging center, or pharmacy involved receives the information needed to carry out that order, as the Notice describes. Outside laboratories and imaging centers may bill your insurance for their own services.
  • Legal requirements. We may disclose information when the law requires it, to respond to lawful requests, or to protect the rights and safety of our patients, the public, or the practice, subject to the protections the Notice and Florida law give your medical records.
  • A change in the practice. If the practice is sold, merged, or reorganized, patient records are transferred as HIPAA and Florida medical-records law require.

7. How We Protect Your Information

We use administrative, technical, and physical safeguards to protect the information we hold, including encryption of information in transit and at rest, access limited to the members of our workforce who need it, logging of access to patient records, and security monitoring. Our workforce is trained on privacy and security and is bound by confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; if a breach affects your information, we will notify you as HIPAA and Florida law require.

8. How Long We Keep Information

Medical records are kept for at least seven years from your last visit, and longer where Florida or federal law requires (for example, records of minors). Interest-list information is kept only until we have contacted you about membership or you ask us to remove it. Technical and security records are kept for as long as our security program requires, and billing records for as long as tax and accounting rules require.

9. Children

The Services are intended for adults. A parent or legal guardian enrolls and manages the care of a minor patient, completes and signs the minor's forms, and is the person we communicate with about the minor's care. We do not knowingly collect information from a child online without a parent or guardian.

10. Your Choices and Rights

  • Your medical record. Your rights to see, obtain a copy of, correct, and control your PHI are described in the Notice. Contact our Privacy Officer to exercise them.
  • Communications. You may opt out of interest-list contact at any time, stop text messages by replying STOP, and turn notifications off in your device or browser settings.
  • Cookies. You may block or delete cookies in your browser.
  • Analytics. You may opt out of Google Analytics with Google's browser add-on.

11. Your Responsibilities

Your portal account is yours alone. Keep your password confidential: anyone who has it can see your record and act as you. Tell us right away at info@mynomadhealth.com if you think someone else has used your account. The portal does not offer shared or proxy accounts; a parent or legal guardian manages a minor's care as described in Section 9. Once information has been sent to a laboratory, imaging center, pharmacy, or other provider at your request or for your care, we cannot retrieve it from them.

12. Links to Other Websites

The Services may link to websites we do not operate, such as our payment processor's site or health-education resources. Those sites have their own privacy practices, and this Policy does not apply to them.

13. Accessibility

We want everyone to be able to use the Services. If you have difficulty using any part of them, contact us at info@mynomadhealth.com and we will provide the information or service you need another way.

14. Changes to This Policy

We may change this Policy at any time. The current version and its date are posted at https://mynomadhealth.com/privacy. If a change materially affects how we use information we already hold, we will tell you through the portal or by email before it takes effect.

15. Contact Us

Questions about your medical information, or requests to exercise your rights, go to our Privacy Officer: Steven A. Pino, Director of Clinical Operations, Nomad Health, 400 Arthur Godfrey Rd, Suite 200-01, Miami Beach, FL 33140, info@mynomadhealth.com, (305) 680-0566. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights; we will never retaliate against you for doing so.