HIPAA
PRIVACY NOTICE

Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• Treatment. To provide, coordinate, or manage your healthcare and related services, including communicating with other providers involved in your care.
• Payment. To obtain payment for services provided to you, including billing and collection activities.
• Healthcare operations. Quality assessment, improvement activities, case management, accreditation, licensing, credentialing, medical reviews, audits, and legal services.
• As required by law. When federal, state, or local law requires disclosure.
• Public health and safety. To prevent or control disease, injury, or disability, report adverse reactions to medications or product problems, and notify persons who may have been exposed to a communicable disease.
• Health oversight activities. Audits, investigations, inspections, and licensure activities authorized by law.
• Judicial and administrative proceedings. In response to a court or administrative order, subpoena, discovery request, or other lawful process.
• Law enforcement. To report certain wounds or injuries, or to comply with a court order, warrant, or other legal process.
• Research. Where the research is approved by an institutional review board and privacy protections are in place.
• Organ and tissue donation. To organizations handling procurement, transplantation, or donation.
• Workers’ compensation. For programs providing benefits for work-related injuries or illnesses.
• Military, veterans, and inmates. As required by military authorities, or to a correctional institution or law enforcement official having custody of you.

Your Rights Regarding PHI

• Inspect and copy. You may inspect and copy the PHI we maintain, with certain exceptions. A reasonable fee may apply for copying, mailing, or supplies.
• Amend. You may request an amendment if you believe your PHI is incorrect or incomplete. We may deny the request if the information is accurate and complete, or if we did not create it.
• Accounting of disclosures. You may request an accounting of disclosures made in the past six years, excluding disclosures for treatment, payment, healthcare operations, and certain others.
• Request restrictions. You may request restrictions on our use or disclosure of your PHI. We are not required to agree, but we will consider each request.
• Confidential communications. You may request that we contact you in a certain way or at a certain location.
• Paper copy. You may receive a paper copy of this Notice even if you agreed to receive it electronically.
• Breach notification. You will be notified if we discover a breach of your unsecured PHI.

To exercise any of these rights, submit a written request to our Privacy Officer using the contact details below.

Transmission of PHI

We are committed to protecting the privacy of your PHI and ensure that electronic transmissions comply with the HIPAA Privacy Rule (45 CFR 164). This includes the use of Secure Socket Layer (SSL) or equivalent technology and adherence to applicable security standards for online transmission of PHI.

Record Retention and Former Patients

We retain patient medical records for a minimum of seven (7) years following your last date of service, or longer where federal or state law, a contractual obligation, or a legal hold requires it.

If you are no longer a patient, your PHI remains securely archived with administrative, technical, and physical safeguards in place, and access is limited to authorized personnel. We do not sell former patients' PHI or use it for unrelated marketing. Once the retention period ends and no legal hold applies, records are securely destroyed or permanently de-identified.

Changes to This Notice

We reserve the right to change this Notice. A revised Notice will apply to PHI we already hold as well as information we receive in the future. The current Notice is posted on our website with its effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

State-Specific Rights

Certain states provide privacy protections in addition to HIPAA. Examples include:

• California. Access to PHI in a readily usable electronic format, restrictions on disclosures to health plans where you paid out of pocket in full, protections under the Confidentiality of Medical Information Act (CMIA), limits on marketing and sale of PHI, and minors’ rights regarding sensitive services.
• New York. Additional protections for HIV-related information, mental health records, and genetic testing results, with written consent required before disclosure.
• Texas. The Texas Medical Privacy Act, including consent requirements for certain disclosures, additional safeguards for electronic PHI, and specific PHI destruction requirements.
• Florida. Additional protections for mental health records, HIV/AIDS-related information, and substance use treatment records.
• Illinois and Massachusetts. Additional protections for mental health records, HIV/AIDS-related information, and genetic testing results, plus state-specific security and notification requirements.

If you reside in another state, consult your state’s privacy laws or contact our Privacy Officer for more information about your rights.

Contact Our Privacy Officer

FaroRx
7901 4th St N, Ste 300, St. Petersburg, FL 33702
Phone: (617) 631-8775
Email: info@farorx.com
farorx.com