Notice of Privacy Practices

How We May Use and Disclose Your Health Information

Treatment. We use and disclose your PHI to provide, coordinate, and manage your medical care, including evaluation by our physician assistant under physician supervision, electronically transmitting prescriptions to the pharmacy you designate, and coordinating with other providers involved in your care.

Payment. We use and disclose your PHI to bill and collect payment for the clinical services we provide (for example, processing your membership or visit fees). We do not dispense medication or bill you for the cost of medication; your pharmacy bills you separately for that.

Health Care Operations. We use and disclose your PHI for operations such as quality assessment and improvement, supervising-physician chart review, training, and general administration of the practice.

Business Associates. We share PHI with vendors who perform services on our behalf — for example, our HIPAA-compliant telehealth and electronic health record platform — under written Business Associate Agreements that require them to safeguard your information.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose your PHI without your authorization when permitted or required by law, including: as required by law; for public health activities; to report abuse, neglect, or domestic violence; for health oversight activities; for judicial and administrative proceedings; for law enforcement purposes; to avert a serious threat to health or safety; for workers’ compensation; and for research, coroners, or other purposes as specifically permitted under 45 C.F.R. Part 164.

Uses and Disclosures That Require Your Written Authorization

Most uses and disclosures of psychotherapy notes (if any), uses and disclosures for marketing purposes, and any sale of PHI require your written authorization. Any other uses and disclosures not described in this Notice will be made only with your written authorization, which you may revoke in writing at any time.

Your Rights Regarding Your Health Information

You have the right to:

• Inspect and copy your PHI in our designated record set, including an electronic copy of records we maintain electronically.
• Request an amendment of PHI you believe is incorrect or incomplete.
• Request an accounting of certain disclosures we have made of your PHI.
• Request restrictions on certain uses and disclosures of your PHI (we are not required to agree, except where required by law).
• Request confidential communications by alternative means or at an alternative location.
• Receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
• Be notified following a breach of your unsecured PHI.

To exercise any of these rights, contact our Privacy Officer using the information below.

Our Duties

We are required by law to maintain the privacy of your PHI, provide this Notice, abide by its terms, and notify you of breaches of unsecured PHI. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as information we receive in the future. The current Notice will be posted on nuumetabolic.com with its effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

U.S. Department of Health and Human Services, Office for Civil Rights — 200 Independence Avenue, S.W., Washington, D.C. 20201 — 1-877-696-6775 — www.hhs.gov/ocr/privacy/hipaa/complaints/

Contact

Privacy Officer, Nuu Medical PLLC
Email: support@nuumetabolic.com
Phone: +1 847-496-0404