Notice of Privacy Practices

Who this notice comes from

Care on Healthfix is delivered by independent, licensed clinicians. Each clinician is responsible for their own records and their own privacy practices; the Company operates the software they use and acts as their business associate, under a written Business Associate Agreement.

That means: your clinician is the covered entity for your care. This notice describes how your health information is handled within the platform.

How your health information may be used and disclosed

For treatment. Your clinician uses your information to provide and coordinate your care, and may share it with other providers involved in treating you.

For payment. To charge for a visit and process payment. Healthfix is private-pay and does not bill insurance, so this is narrower than it would be in a practice that does.

For health care operations. Quality review, credentialing, training, business management, and administration.

Other uses and disclosures permitted or required by law, including:

• as required by law, or to public health authorities;
• to report suspected abuse, neglect, or domestic violence;
• for health oversight activities, judicial and administrative proceedings, and law enforcement purposes as permitted;
• to avert a serious and imminent threat to health or safety;
• for workers’ compensation, organ donation, coroners and funeral directors, research (subject to approval), and specialised government functions;
• to a family member or other person involved in your care, in the limited circumstances the law permits.

Everything else requires your written authorization, which you may revoke in writing at any time. In particular, your written authorization is required for: most uses and disclosures of psychotherapy notes; uses and disclosures for marketing; and any sale of protected health information.

Your rights

You have the right to:

• Inspect and copy your health information, including an electronic copy.
• Request an amendment if you believe it is incorrect or incomplete. The request may be denied in the circumstances the law allows, and you may file a statement of disagreement.
• Receive an accounting of disclosures made in the six years before your request, other than those excluded by law.
• Request restrictions on uses and disclosures. Your clinician is not required to agree, except that they must agree to a request to restrict disclosure to a health plan where you have paid for the service in full out of pocket.
• Request confidential communications by an alternative means or at an alternative location.
• Receive a paper copy of this notice, even if you agreed to receive it electronically.
• Be notified if a breach of your unsecured health information occurs.

To exercise any of these rights, contact your clinician, or contact us through the in-app support form and we will route your request to them.

Complaints

You may complain to your clinician, to us through the in-app support form, or directly to the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint. Office for Civil Rights complaints may be filed at hhs.gov/hipaa/filing-a-complaint.

Our duties

Your clinician is required by law to maintain the privacy of your health information, to give you this notice of their legal duties and privacy practices, and to abide by the terms of the notice currently in effect. They reserve the right to change this notice and to make the new notice effective for all information they maintain. A revised notice will be posted on the platform and provided to you.