HIPAA Notice

PHI refers to individually identifiable health information created or received in the course of providing healthcare. Our clinical services and health records are handled in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and related state law.

We use administrative, technical, and physical safeguards designed to protect PHI, including access controls, encryption for data in transit and at rest where reasonable, workforce training, and vendor Business Associate Agreements.

We use and disclose PHI to provide treatment, obtain payment, and support healthcare operations, and as otherwise permitted or required by law. We do not sell PHI. Marketing communications that require authorization are not sent without your consent.

Information you send through the public website contact form is not treated as PHI. Please do not include sensitive medical details in web forms. Once you become a patient, communications through your patient portal or secure messaging are handled as PHI under HIPAA.

Under HIPAA, you have rights including access to and copies of your records, requests for amendments, an accounting of disclosures, and requests for confidential communications. See our Notice of Privacy Practices for the full explanation of your rights and how to exercise them.

Questions or concerns about PHI can be directed to our practice through the contact form. If you believe your rights have been violated, you may file a complaint with our practice or with the U.S. Department of Health and Human Services, Office for Civil Rights.