HIPAA Notice of Privacy Practices

Holy City Med LLC ("we," "us," or "our") is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. This Notice applies to all records of your care generated by our practice.

1. What Is Protected Health Information

Protected Health Information (PHI) is information that identifies you and relates to your past, present, or future physical or mental health, the care you receive, or payment for that care. Examples include your name, contact details, medical history, diagnoses, treatment records, and billing information.

2. How We May Use and Disclose Your PHI

Treatment

We use and share your PHI to provide, coordinate, and manage your care, including with other providers, specialists, labs, and pharmacies involved in your treatment.

Payment

We use and share your PHI to bill and collect payment for the care you receive, including with your health plan or payment processors where applicable.

Healthcare Operations

We use your PHI to run our practice, improve care quality, train staff, and conduct administrative activities.

Appointment Reminders and Communications

We may use your PHI to contact you with appointment reminders and information about treatment options or health-related services, including by phone, text, or email where you have provided contact information and, where required, consent.

As Required or Permitted by Law

We may disclose your PHI when required by federal, state, or local law, and for public-health activities, health oversight, legal proceedings, law enforcement, and to avert a serious threat to health or safety, as permitted by HIPAA.

3. Uses and Disclosures That Require Your Authorization

Most uses and disclosures of psychotherapy notes, uses and disclosures for marketing, and any sale of PHI require your written authorization. Other uses not described in this Notice will be made only with your written authorization, which you may revoke at any time in writing.

4. Your Rights Regarding Your PHI

• Right to access: You may inspect and request a copy of your medical and billing records.
• Right to amend: You may request that we correct PHI you believe is incorrect or incomplete.
• Right to an accounting of disclosures: You may request a list of certain disclosures we have made.
• Right to request restrictions: You may request limits on how we use or share your PHI.
• Right to confidential communications: You may ask us to contact you in a specific way or at a specific location.
• Right to a paper copy: You may request a paper copy of this Notice at any time.

To exercise any of these rights, contact us using the information below.

5. Our Responsibilities

We are required by law to maintain the privacy and security of your PHI, to notify you if a breach affects your PHI, and to follow the terms of this Notice. We will not use or share your information other than as described here unless you tell us we can in writing.

6. Changes to This Notice

We may change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available upon request, in our offices, and on our website. The "Last updated" date at the top reflects the current version.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue SW, Washington, D.C. 20201, or at www.hhs.gov/ocr. We will not retaliate against you for filing a complaint.

8. Contact for Privacy Matters

To exercise your rights, ask questions, or file a complaint, contact our Privacy Officer: