NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date of this Notice: February 6, 2026

We respect our legal obligation to keep health information that identifies you private. We are obligated by law to give you notice of our privacy practices. This Notice describes how we protect your health information and what rights you have regarding it.

TREATMENT, PAYMENT, AND HEALTH CARE OPERATIONS

The most common reason why we use or disclose your health information is for treatment, payment, or health care operations.

Treatment: Examples include setting up an appointment, performing physical examinations, diagnosing illnesses, prescribing medications and faxing them to pharmacies, or referring you to a specialist or hospital for further diagnostic testing.

Payment: Examples include asking about your health insurance plan or other sources of payment; preparing and sending claims to your insurance provider; and collecting unpaid amounts.

Health Care Operations: These are administrative functions necessary to run our medical office. Examples include financial audits, internal quality assurance, personnel decisions, and business planning.

We routinely use your health information inside our office for these purposes without any special permission. If we need to disclose your health information outside of our office for these reasons, we usually will not ask you for special written permission.

Special Protections for Substance Use Disorder (SUD) Records

For patients receiving treatment for substance use disorders, federal law (42 CFR Part 2) provides additional protections beyond standard health information privacy.

  • Heightened Confidentiality: We will not disclose records identifying you as receiving substance use disorder treatment in civil, criminal, administrative, or legislative proceedings without your written consent or a specialized court order.
  • Single Consent for TPO: You may provide a single written consent allowing us to use and disclose your SUD records for treatment, payment, and healthcare operations.
  • Right to Revoke: You may revoke your consent at any time in writing, except where we have already taken action based on your previous authorization.
  • Accounting of Disclosures: You have the right to request a list of disclosures of your SUD records made for treatment, payment, or healthcare operations for the three years prior to your request.
  • Prohibition on Redisclosure: Recipients of your SUD records are generally prohibited from sharing that information further unless you provide written consent or the law allows it.

We routinely use your health information inside our office for these purposes without any special permission. If we need to disclose your health information outside of our office for these reasons, we usually will not ask you for special written permission.

USES AND DISCLOSURES FOR OTHER REASONS WITHOUT PERMISSION

In certain limited situations, the law allows or requires us to use or disclose your health information without your permission. These situations may include:

  • When required by federal or state law
  • Public health reporting, such as contagious disease tracking
  • Reporting adverse drug reactions to the Food and Drug Administration
  • Reporting suspected abuse, neglect, or domestic violence
  • Health oversight activities such as licensing, audits, or investigations
  • Judicial or administrative proceedings in response to subpoenas or court orders
  • Law enforcement investigations
  • Medical examiners identifying deceased individuals or determining causes of death
  • Funeral directors performing burial arrangements
  • Organ or tissue donation organizations
  • Medical or public health research
  • Preventing serious threats to health or safety
  • Certain government functions such as national security or military activities
  • Workers’ compensation programs
  • Disclosure of de-identified health information
  • Incidental disclosures related to permitted uses
  • Business associates who help us operate our medical services and agree to protect your health information

Unless you object, we may also share relevant information with family members or friends involved in your medical care.

NOTIFICATION OF DATA BREACHES

We are required by law to maintain the privacy and security of your protected health information.
If a data breach occurs involving your unsecured health information, we will notify you promptly. Notification will be sent by first-class mail or email (if you have agreed to electronic communication). The notice will describe:

  • What happened
  • The types of information involved
  • Steps we are taking to investigate and mitigate the issue
  • Steps you may take to protect yourself

APPOINTMENT REMINDERS

We may contact you to remind you about upcoming medical appointments or to notify you that it is time to schedule routine care. We may also inform you about medical services that may benefit your health.

Unless you request otherwise, we may send appointment reminders by phone, voicemail, mail, email, or text message.

TELEHEALTH / VIRTUAL VISITS AND ELECTRONIC COMMUNICATIONS

Our clinic may provide telehealth or virtual medical visits using secure video platforms, patient portals, email, or text messaging.

Technology vendors may assist us in delivering these services. These vendors may receive limited protected health information necessary to provide the service and are required to protect your information.

You may request that we communicate with you in a confidential way using a preferred phone number, mailing address, email address, or secure patient portal.

Electronic communication carries certain risks, including possible interception or misdelivery. If you choose to communicate through unencrypted email or text messages, you acknowledge and accept these risks.

OTHER USES AND DISCLOSURES

We will not use or disclose your health information for other purposes unless you provide written authorization.

Sometimes we may request authorization from you to share your information. Other times, you may request that we send your information to another provider or organization.

You may revoke your authorization at any time in writing unless we have already relied on it.

Uses and Disclosures Requiring Your Authorization

Certain uses of your health information require written authorization, including:

  • Marketing communications
  • Sale of protected health information
  • Other disclosures not described in this Notice
  • You may revoke authorization at any time in writing.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

The law gives you many rights regarding your health information. You can:

  • Right to Request Restrictions
    You may ask us to restrict how we use or disclose your health information for treatment, payment, or operations. While we are not required to agree, we will honor any restrictions we accept.
  • Right to Confidential Communications
    You may request that we communicate with you using a specific phone number, mailing address, or email address.
  • Right to Access Your Medical Records
    You may request copies of your health information. In most cases, we will provide access within 30 days. Reasonable copying fees may apply.
  • Right to Request Amendments
    If you believe information in your record is incorrect or incomplete, you may request a correction. If we deny the request, you may submit a written statement of disagreement.
  • Right to an Accounting of Disclosures
    You may request a list of disclosures of your health information made during the previous six years.
  • Right to Receive Copies of This Notice
    You may request a paper copy of this Notice at any time.
  • Right to Restrict Insurance Disclosure
    If you pay for a medical service out of pocket in full, you may request that we not share that information with your insurance company.

OUR NOTICE OF PRIVACY PRACTICES

We are required to follow the terms of this Notice. However, we reserve the right to change our privacy practices at any time as allowed by law.

If we update this Notice, the revised version will apply to all health information we maintain. The updated notice will be posted in our clinic and on our website.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not retaliate against you for filing a complaint.

You may submit complaints in writing, by phone, or in person to the clinic contact person listed at the beginning of this Notice.

FOR MORE INFORMATION

If you have questions about our privacy practices, please contact the office using the contact information provided on our website or at our clinic.