HIPAA Notice of Privacy Practices

Our Commitment to Your Privacy

Innovative Physical Therapy Institute is committed to protecting the privacy of your health information. As a healthcare provider, we are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations to maintain the privacy of your protected health information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. This Notice applies to all records of your care generated or maintained by our practice, whether created by our staff or received from other healthcare providers.

How We May Use and Disclose Your Health Information

The following categories describe the ways we may use and disclose your protected health information without your written authorization:

For Treatment

We may use your health information to provide, coordinate, or manage your physical therapy care. This includes sharing information with other healthcare providers involved in your care, such as your physician, specialist, or other therapist, to ensure continuity and quality of treatment. As a mobile concierge practice, your treatment may occur in various settings (your home, office, gym, or other location), and your health information will be securely maintained regardless of the treatment location.

For Payment

As a cash-based (private-pay) practice, we do not bill insurance companies directly. However, we may use your health information to create superbills or receipts that you may submit to your insurance company for potential reimbursement. We may also use your information to process payments, send invoices, and manage your account.

For Healthcare Operations

We may use your health information for activities necessary to operate our practice, including quality assessment and improvement, reviewing the competence of our staff, conducting training programs, accreditation activities, compliance reviews, and business planning.

As Required by Law

We may disclose your health information when required to do so by federal, state, or local law, including reporting requirements for communicable diseases, abuse or neglect, and other public health activities.

Public Health Activities

We may disclose your health information for public health activities, including preventing or controlling disease, injury, or disability; reporting births and deaths; reporting adverse reactions to medications or products; and notifying individuals who may have been exposed to a disease or condition.

Health Oversight Activities

We may disclose your health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and Administrative Proceedings

We may disclose your health information in response to a court or administrative order, subpoena, discovery request, or other lawful process.

To Avert a Serious Threat to Health or Safety

We may use and disclose your health information when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Workers' Compensation

We may disclose your health information as authorized by and to the extent necessary to comply with workers' compensation laws and other similar programs.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your health information for purposes other than those described above, including:

• Marketing purposes
• Sale of your health information
• Most uses and disclosures of psychotherapy notes (if applicable)
• Any other uses and disclosures not described in this Notice

You may revoke your authorization at any time by submitting a written request to our office. Revocation will not affect any disclosures we have already made in reliance on your prior authorization.

Your Rights Regarding Your Health Information

You have the following rights with respect to your protected health information:

Right to Access

You have the right to inspect and obtain a copy of your health information maintained by our practice. To request access, submit a written request to our office. We may charge a reasonable fee for copying and mailing your records.

Right to Request Amendment

You have the right to request that we amend your health information if you believe it is incorrect or incomplete. Submit your request in writing, including the reason for the amendment. We may deny your request under certain circumstances, and we will provide you with a written explanation if we do.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your health information. This accounting will not include disclosures made for treatment, payment, or healthcare operations, or disclosures made with your authorization.

Right to Request Restrictions

You have the right to request that we restrict certain uses and disclosures of your health information. We are not required to agree to your request, except in cases where you pay for services out of pocket in full and request that we not disclose information to a health plan for payment or healthcare operations purposes.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your health information in a specific way or at a specific location. For example, you may request that we contact you only by mail or at a specific phone number.

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice upon request, even if you have agreed to receive it electronically.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information
• We are required to provide you with this Notice of our legal duties and privacy practices
• We are required to abide by the terms of this Notice currently in effect
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your health information
• We will not use or disclose your health information without your authorization, except as described in this Notice

Mobile Concierge Practice Considerations

As a mobile concierge physical therapy practice, we take additional precautions to protect your health information:

• All electronic devices used in the delivery of care are encrypted and password-protected
• Health records are maintained in a secure, HIPAA-compliant electronic health record system
• Physical documents containing health information are securely transported and stored
• Our therapists are trained in HIPAA compliance and the unique privacy considerations of providing care in non-traditional settings
• We take reasonable steps to ensure privacy during treatment sessions conducted in your home or other locations

Changes to This Notice

We reserve the right to change the terms of this Notice and to make the new provisions effective for all protected health information that we maintain. If we make material changes to this Notice, we will post the revised Notice on our website and make it available at our practice. You may request a copy of the current Notice at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our practice or with the Secretary of the U.S. Department of Health and Human Services. You will not be penalized or retaliated against for filing a complaint.

To file a complaint with the U.S. Department of Health and Human Services, visit www.hhs.gov/hipaa/filing-a-complaint or call (800) 368-1019.

Contact Us

For questions about this Notice or to exercise any of your rights, please contact our Privacy Officer: