HIPAA Notice
Last updated
1.Who Is Covered by This Notice
This Notice applies to the privacy practices of the independent Affiliated Medical Group and its Clinicians (a HIPAA “covered entity”) that provide medical care to you through the Zepym Health platform. Zepym Health itself is generally a business associate of the Affiliated Medical Group and handles your Protected Health Information (PHI) under a written business-associate agreement that requires it to comply with HIPAA.
2.Uses and Disclosures for Treatment, Payment & Health-Care Operations
Treatment. We may use and disclose your PHI to provide, coordinate, or manage your medical care — including disclosures to Clinicians, Pharmacy Partners, laboratories, and consulting professionals.
Payment. We may use and disclose your PHI to bill and collect payment for services rendered, including to your HSA/FSA administrator at your request.
Health-Care Operations. We may use and disclose PHI for activities such as quality assessment, credentialing, compliance, audits, training, and general administration.
3.Other Uses & Disclosures Permitted Without Your Authorization
HIPAA permits us to use or disclose PHI without your authorization for purposes that include: required-by-law disclosures; public-health activities; reporting victims of abuse, neglect, or domestic violence; health-oversight activities; judicial and administrative proceedings; law-enforcement purposes; coroners, medical examiners, and funeral directors; organ and tissue donation; research with appropriate safeguards; to avert a serious threat to health or safety; specialized government functions; workers’ compensation; and reminders of appointments and treatment alternatives.
4.Uses & Disclosures That Require Your Written Authorization
We will obtain your written authorization before using or disclosing your PHI for: (a) most marketing communications; (b) the sale of PHI; (c) most disclosures of psychotherapy notes; and (d) any other use or disclosure not described in this Notice or otherwise permitted by law. You may revoke an authorization in writing at any time, except to the extent action has already been taken in reliance on it.
5.Your Rights Regarding Your Health Information
Right to inspect and copy. You have the right to inspect and obtain a copy of your PHI in our designated record set, in the form and format you request when readily producible (including electronic copies). Reasonable, cost-based fees may apply.
Right to amend. You may request an amendment to PHI you believe is incorrect or incomplete. We may deny the request in limited circumstances; you may submit a statement of disagreement.
Right to an accounting of disclosures. You may request a list of certain disclosures of your PHI made by us in the six years prior to your request.
Right to request restrictions. You may request restrictions on certain uses or disclosures. We are not required to agree, except that we must agree to restrict disclosure of PHI to a health plan for payment or operations purposes when the PHI relates solely to a service for which you have paid out-of-pocket in full.
Right to confidential communications. You may request that we communicate with you about medical matters in a particular way or at a particular location.
Right to a paper copy. Even if you have received this Notice electronically, you have the right to receive a paper copy upon request.
Right to breach notification. You have the right to be notified of a breach of your unsecured PHI.
To exercise any right, submit a written request to the Privacy Officer (Section 9).
6.Our Duties
We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of the Notice currently in effect. We are required to notify you following a breach of unsecured PHI.
7.Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights at www.hhs.gov/ocr. You will not be retaliated against for filing a complaint.
8.Changes to This Notice
We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you, as well as any PHI we receive in the future. The current Notice will be posted on the Service and available upon request.
9.Privacy Officer & Contact
HIPAA Privacy Officer
WYNTON LLC d/b/a Zepym Health