Notice of privacy practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

It applies to the health information CorePhia creates or receives about you as a patient: in the intake, your chart, the patient portal, and our messages with you.

• We are required by law to keep your health information private and to give you this notice of our legal duties and privacy practices.
• We must follow the notice that is currently in effect.
• We must tell you if a breach occurs that may have compromised the privacy or security of your information.
• We will not use or share your information other than as described here unless you tell us in writing that we can. You can change your mind at any time by telling us in writing.

For treatment. Your providers, dietitian, and care staff use your information to evaluate you, build your plan, prescribe when appropriate, and follow up. We may share it with a pharmacy that fills a prescription or with another health professional who treats you.

For payment. CorePhia is cash pay. We use the information needed to bill you for your membership. We do not send your information to a health insurer.

For health care operations. We use information to run the program, for example to check the quality of care, train staff, keep records, and keep our systems secure. We may share it with companies that provide services to us, such as our database and hosting provider.

To contact you. We may contact you about appointments, follow-ups, and your care by phone, email, or the patient portal. Notification emails do not contain health details.

We may share your information in these situations, only as the law allows and only as much as needed:

• When a law requires it.
• For public health activities, such as reporting adverse reactions to medications or preventing disease.
• To report suspected abuse, neglect, or domestic violence to the proper authorities.
• For health oversight activities, such as audits and inspections by government agencies.
• In response to a court order, subpoena, or other lawful process.
• To law enforcement officials, in limited circumstances.
• To prevent a serious and imminent threat to someone's health or safety.
• To coroners, medical examiners, and funeral directors, and for organ and tissue donation.
• For workers' compensation claims, and for special government functions such as military or national security, as the law provides.
• For research, only when the law's privacy protections are met.

We will never sell your health information or use it for marketing without your written permission. We will not publish your story, photos, or results without your written permission. Any other use or disclosure not described in this notice also needs your written permission, which you may take back in writing at any time, except for actions already taken.

• See and get a copy of your record. Ask us, and we will give you a copy, electronic or paper, usually within 30 days. We may charge a reasonable, cost-based fee.
• Ask us to correct your record if you think it is wrong or incomplete. We may say no, but we will tell you why in writing within 60 days.
• Ask us to contact you in a certain way, for example only by email or at a different phone number. We will agree to reasonable requests.
• Ask us to limit what we use or share. We are not required to agree, except that if you pay for a service in full yourself, you can ask us not to share that information with your health insurer, and we will agree unless a law requires us to share it.
• Get a list of the times we shared your information in the six years before you ask, other than for treatment, payment, operations, and certain other disclosures. One list a year is free.
• Get a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Choose someone to act for you, such as a legal guardian or someone with medical power of attorney. We will check that the person has this authority before we act.

To use any of these rights, write to info@corephia.com or call +1 (850) 454-6700.

If you believe your privacy rights have been violated, you can complain to us at info@corephia.com or +1 (850) 454-6700. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints or by calling 1-877-696-6775. We will not retaliate against you for filing a complaint.

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on this page, and we will tell current patients through the portal or by email. The date at the top shows when it took effect.