HIPAA Notice of Privacy Practices

1. Introduction

This Notice of Privacy Practices (“Notice”) explains how NRN Management NY LLC (“we,” “us,” or “our”) uses, maintains, and protects your medical information. Although NRN Management NY LLC is not technically a “Covered Entity” under the Health Insurance Portability and Accountability Act (“HIPAA”), NRN Management NY LLC has voluntarily elected to substantially comply with the privacy and security standards established by HIPAA, including the protection of your health information.

This Notice describes how we may use and disclose your protected health information (“PHI”) for purposes of treatment, payment, and health care operations, as well as other circumstances permitted or required by law. It also describes your rights and our obligations regarding the use and disclosure of your PHI.

2. Definition of Protected Health Information

“Protected Health Information” or “PHI” is any information, including demographic data, that identifies you or can reasonably be used to identify you, and that relates to your past, present, or future physical or mental health condition, treatment, or payment for health care services. PHI may include information received or maintained through our telehealth services, coordination with clinicians, pharmacies, vendors, or any affiliated medical groups.

3. Uses and Disclosures of PHI for Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care. This includes communication with clinicians, medical groups, pharmacies, laboratory providers, and other third parties involved in your care. For example, if you are referred to a specialist or if your pharmacy requires clinical information before dispensing your medication, we may share your PHI to ensure safe, effective, and appropriate treatment.

4. Uses and Disclosures of PHI for Payment

We may use and disclose your PHI in order to bill you or obtain payment for products or services you receive. This may include verifying your eligibility with your health plan (if applicable), confirming coverage, reviewing services for medical necessity, obtaining authorizations, and processing payments. PHI may also be disclosed to payment processors or financial intermediaries as needed to facilitate payment transactions.

5. Uses and Disclosures of PHI for Health Care Operations

We may use and disclose your PHI to support business operations, including quality assessment, improvement activities, staff training, auditing, legal review, fraud and abuse detection, compliance efforts, customer service, and development and refinement of systems. These operations are necessary to ensure the continued delivery of safe, efficient, and high-quality care.

6. Uses and Disclosures Permitted Without Your Authorization

We may use or disclose your PHI without your authorization when permitted or required by law. These uses include: disclosures required by federal, state, or local laws; public health reporting; reporting abuse or neglect; health oversight audits; compliance with FDA requirements; responding to subpoenas or court orders; cooperating with law enforcement; funeral and organ donation activities; certain research activities; reporting related to criminal conduct; national security or military activities; workers' compensation processes; correctional institution reporting; and disclosures to the U.S. Department of Health and Human Services as part of a compliance investigation. Additional limitations may apply based on applicable state confidentiality laws.

7. Uses and Disclosures That Require Your Authorization

Other uses and disclosures of your PHI will only occur with your express written authorization unless otherwise permitted by law. We will not use or disclose your PHI for marketing purposes without your explicit authorization, and we will not sell your PHI or use it for fundraising. We will not use or disclose psychotherapy notes without your authorization, except where permitted by law. You may revoke any authorization at any time in writing, except to the extent we have already taken action in reliance on that authorization.

8. Your Right to Request Restrictions

You have the right to request restrictions on the use or disclosure of your PHI. Requests must be submitted in writing, specifying the information to be restricted and the persons to whom the restriction applies. We are not required to agree to requested restrictions, except when the request is to restrict disclosure to a health plan for services paid for in full out-of-pocket. If we agree to a restriction, we will honor it unless required by law to disclose the information.

9. Your Right to Access, Inspect, and Receive Copies of Your PHI

You have the right to request access to the PHI we maintain about you, including the right to inspect or obtain electronic or paper copies. Requests must be submitted in writing. A reasonable cost-based fee may be charged for producing and mailing copies where permitted by law. In rare cases, access to certain information may be denied; if so, you may request that the denial be reviewed.

10. Your Right to Request Confidential Communications

You may request that we communicate with you in a specific way or at a specific location (e.g., using a different mailing address, phone number, or email). We will accommodate all reasonable requests submitted in writing and will not require you to provide a reason for the request.

11. Your Right to Request Amendment of Your PHI

You may request an amendment of PHI you believe is incorrect or incomplete. Requests must be submitted in writing and include the reason for the amendment. We may deny the request if the information is accurate, was not created by us, or is otherwise not permitted to be amended. If denied, you may submit a statement of disagreement; we may prepare a rebuttal and will provide you with a copy.

12. Your Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI, including both paper and electronic disclosures. Disclosures made for treatment, payment, or health care operations are generally excluded unless maintained in an electronic health record. Accountings will be provided in accordance with applicable law.

13. Your Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you have previously agreed to receive electronic communications. A physical copy will be provided upon request.

14. Revisions to This Notice

We reserve the right to revise or update this Notice at any time. Any updated Notice will apply to all existing PHI as well as PHI created after the revision. Updated versions will be posted on our website at www.radiantbodyclinic.com. You are entitled to review the Notice currently in effect at any time.

15. Breach Notification

If we discover a breach of your unsecured PHI, we will notify you as required by law. Notification will be provided without unreasonable delay and no later than 60 days after discovery. The notice will describe the breach, the information involved, steps you should take to protect yourself, actions we are taking to investigate and mitigate harm, and contact information for questions.

16. Complaints

If you believe your privacy rights have been violated, you may submit a complaint to our Privacy Officer at info@radiantbodyclinic.com. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

For questions about this Notice or your rights, contact us at info@radiantbodyclinic.com or visit www.radiantbodyclinic.com.