This HIPAA Notice of Privacy Practices (“Notice”) describes how your protected health information may be used and disclosed in connection with telehealth consultation services made available through this website, and how you can access that information.
Please review it carefully.
Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, healthcare providers are required to protect the privacy of your protected health information (PHI), provide a notice of their legal duties and privacy practices, and comply with its terms. This Notice applies to protected health information generated in the course of telehealth consultation services made available through this website, including information submitted through questionnaires and similar intake tools.
Protected health information (PHI) is individually identifiable health information that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or the payment for such care.
General personal information and consumer health data collected through our Services outsidethe consultation process, including information relating to purchases of non-prescription products and certain browsing activity, marketing interactions, and other website activity, are governed by our Privacy Notice and Consumer Health Data Privacy Notice, not this Notice.
Any dispensing pharmacy that fills your prescription is an independent provider and will maintain and use your information in accordance with its own privacy practices and applicable law. In addition, medical services are provided by licensed healthcare professionals. These providers may be subject to their own privacy practices and HIPAA obligations.
Capitalized terms not defined herein, have the meanings given to them in our main Privacy Notice.
How We May Use and Disclose Your Health Information
The following describes the ways we may use and disclose your PHI without your written authorization:
- For Treatment. We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes facilitating telehealth consultations with licensed medical providers, supporting treatment planning, and coordinating prescription fulfillment with a dispensing pharmacy when a prescription is issued. For example, the licensed medical provider who conducts your consultation may share your PHI with a pharmacy to fill a prescription. We may also use your PHI to contact you about consultation reminders, treatment alternatives, or other health-related benefits and services.
- For Payment.We may use and disclose your PHI to obtain payment for services we provide to you. For example, we may use PHI to process payments or provide documentation you need to seek reimbursement from your health plan.
- For Health Care Operations.We may use and disclose your PHI for activities that support the operation of our Service and/or the healthcare operations of our contracted medical group, including quality assessment, business management, and compliance activities. For example, we may use PHI to evaluate provider performance or to conduct internal audits.
- As Required by Law.We may use or disclose your PHI when required to do so by federal, state, or local law.
- Public Health Activities.We may disclose your PHI for public health activities, such as reporting adverse reactions to peptide therapies or reporting suspected abuse or neglect.
- Health Oversight Activities.We may disclose your PHI to a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure.
- Judicial and Administrative Proceedings.We may disclose your PHI in response to a court order, administrative order, or subpoena, discovery request, or other lawful process.
- Law Enforcement.We may disclose your PHI to a law enforcement official for purposes such as complying with a court order or subpoena or reporting certain types of injuries or abuse.
- To Avert a Serious Threat to Health or Safety.We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or to the health and safety of the public or another person.
- Coroners, Medical Examiners, and Funeral Directors.We may disclose your PHI to a coroner, medical examiner, or funeral director as necessary for them to carry out their duties.
- Workers’ Compensation.We may disclose your PHI as necessary to comply with workers’ compensation laws.
- Consultation Reminders and Health-Related Communications.We may use your PHI to contact you with consultation reminders, treatment updates, or information about health-related benefits and services.
- Individuals Involved in Your Care.Unless you object, we may disclose relevant PHI to a family member, close personal friend, or other person you identify who is involved in your health care or payment for care.
- Business Associates.We may disclose your PHI to other business associates who perform services on our behalf, such as vendors that support scheduling, communications, and payment processing. Business associates are required by law and contract to protect the privacy of your PHI.
Uses and Disclosures That Require Your Written Authorization
We will not use or disclose your PHI for purposes other than those described in this Notice without your written authorization. Situations that require your written authorization include:
- Most uses and disclosures of psychotherapy notes (if applicable)
- Uses and disclosures for marketing purposes
- Disclosures that constitute a sale of your PHI
- Other uses and disclosures not described in this Notice.
You may revoke your authorization at any time by submitting a written request to privacy@celia-rx.com. Revocation will not affect any uses or disclosures made in reliance on your authorization before we received your revocation.
Your Rights Regarding Your Health Information
You have the following rights with respect to your PHI:
- Right to Access Your Records.You have the right to inspect and obtain a copy of your PHI maintained by Celia (or its providers), including medical records and billing records. To request access, submit a written request to privacy@celia-rx.com. We may charge a reasonable, cost-based fee for copies. In certain limited circumstances, we may deny your request, but you may request a review of the denial.
- Right to Request an Amendment.If you believe that your PHI is incorrect or incomplete, you may request that we amend your records. Submit a request in writing to privacy@celia-rx.com, including the reason for your request. We may deny the request in certain circumstances, such as if the information was not created by us or if we determine the information is accurate and complete.
- Right to an Accounting of Disclosures.You have the right to request a list of certain disclosures we have made of your PHI. This accounting does not include disclosures made for treatment, payment, or health care operations, or disclosures you authorized in writing. To request an accounting, submit a written request to privacy@celia-rx.com. The first accounting within a 12-month period is free; we may charge a reasonable fee for additional requests.
- Right to Request Restrictions.You have the right to request that we limit the use and disclosure of your PHI for treatment, payment, or health care operations. We are not required to agree to your request, except that we must agree to a restriction on disclosure to a health plan if the disclosure is for payment or health care operations purposes and the PHI pertains to a health care item or service for which you have paid out of pocket in full.
- Right to Request Confidential Communications.You have the right to request that we communicate with you about health matters in a specific way or at a specific location. For example, you may ask that we only contact you at a certain phone number or email address. We will accommodate reasonable requests.
- Right to Paper Copy of This Notice.You have the right to obtain a paper copy of this Notice at any time, even if you previously agreed to receive it electronically. Contact us at privacy@celia-rx.com to request a paper copy.
- Right to be Notified of a Breach.You have the right to be notified if your unsecured PHI is breached (see below for more information).
Our Responsibilities
We are required to:
- Maintain the privacy of your PHI and provide you with this Notice of our legal duties and privacy practices;
- Abide by the terms of this Notice;
- Notify you if we are unable to agree to a requested restriction on how your PHI is used or disclosed;
- Maintain reasonable administrative, technical, and physical safeguards to protect the privacy and security of your PHI; and
- Accommodate reasonable requests to communicate with you by alternative means or at alternative locations.
We will not use or disclose your PHI without your written authorization, except as described in this Notice. We will not use or disclose your PHI in ways that are prohibited or for which additional requirements apply under other applicable federal or state laws.
Breach Notification
In the event of a breach of your unsecured PHI, we will notify you as required by law. A breach occurs when there is an impermissible use or disclosure of PHI that compromises the security or privacy of the information. You will be notified without unreasonable delay and no later than sixty (60) days from the date we discover the breach.
The notification will include a description of what happened, the types of information involved, steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and contact information for you to ask questions.
Changes to this Notice
We reserve the right to change the terms of this Notice and to make new provisions effective for all PHI that we maintain, including PHI we created or received before the change. When we make a significant change to this Notice, we will post the revised Notice to our website and notify you by email of the update, if we have your email address on file. The date at the top of this page indicates when the most recent revision took effect.
Contact Information and Complaints
If you have questions about this Notice, would like to exercise any of your rights, or believe your privacy rights have been violated, please contact us at privacy@celia-rx.com. You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/index.html. We will not retaliate against you for filing a complaint. against you for filing a complaint.
