Notice of Privacy Practices (HIPAA)

We are required by law to keep your PHI private, to give you this notice of our duties and practices, to follow the notice currently in effect, and to notify you if a breach of your unsecured PHI occurs.

Treatment (sharing with the clinicians and pharmacies caring for you); payment (billing and refunds); healthcare operations (quality and safety programs); and uses required or permitted by law, including public-health reporting, health-authority oversight, judicial and administrative proceedings, law-enforcement requests meeting legal standards, serious-threat prevention, workers' compensation, and research approved under privacy safeguards.

Marketing uses of your PHI, any sale of PHI, and most other uses not described in this notice happen only with your written authorization, which you may revoke at any time (revocation does not undo disclosures already made). Specially protected categories — such as mental-health, substance-use, HIV/STI, and genetic information — receive additional protections under federal and state law and are shared only as those laws allow.

You may: inspect and receive a copy of your records (electronic where we hold them electronically; reasonable cost-based fee may apply); request corrections; receive an accounting of certain disclosures from the past six years; request additional restrictions (we must honor a restriction on disclosing to your health plan when you have paid for the item in full out of pocket); request confidential communications by reasonable alternative means; and receive a paper copy of this notice on request.

If you believe your privacy rights were violated, contact our Privacy Officer (privacy@medabol.example) or file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will never retaliate against you for filing a complaint.

We may revise this notice and apply revisions to PHI we already hold; the current version is always posted here with its effective date.