HIPAA Notice of Privacy Practices

Our commitment

Holistically Rx, LLC. is required by federal law — the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations at 45 CFR Parts 160 and 164 — to maintain the privacy of your Protected Health Information (PHI). This Notice tells you about our legal duties and privacy practices, your rights with respect to your PHI, and how we use and disclose that information.

What is Protected Health Information (PHI)?

PHI is any individually identifiable health information that we create or receive. This includes details about your medical evaluation, the conditions for which you are seeking care, your medications, and any other health-related information linked to your identity.

How we may use or disclose your PHI

We may use or disclose your PHI in the following ways without your written permission:

Treatment — we use your PHI to provide you with our telemedicine evaluation and treatment services. This includes sharing relevant information with the licensed provider conducting your consultation.

Payment — we may use or disclose your PHI to process payment for our services, which may include sharing necessary information with payment processors.

Healthcare operations — we may use your PHI for internal operations such as quality improvement, training, and ensuring the safety and effectiveness of our services.

Pharmacy and laboratory coordination — with your authorization, we share the required information with licensed US-based pharmacies and partner laboratories to fill prescriptions and process the tests your provider orders. We only share what is specifically required.

As required by law — we may disclose your PHI when we are legally required to do so, including in response to a court order, subpoena, or a lawful request from a public health authority.

To prevent harm — we may disclose your PHI if doing so is necessary to prevent or reduce a serious and imminent threat to your health or safety or to the health or safety of another person.

Uses and disclosures that require your authorization

For certain uses or disclosures of your PHI, we are required to get your written permission first. These include, but are not limited to:

• Sharing your information for marketing purposes.
• Selling your PHI to any party.
• Disclosing your psychotherapy notes (if any).
• Any use or disclosure not covered by this Notice.

You may revoke any authorization you have given us in writing at any time. If you revoke your authorization, we will stop using or disclosing your PHI in that manner, except for disclosures we already made while the authorization was in effect.

Your rights regarding your PHI

Under HIPAA, you have the following rights. To exercise any of these, contact us in writing at Info@holisticallyrx.com:

Right to access your information — you have the right to inspect and obtain a copy of your PHI that we maintain, with certain limited exceptions as permitted by law.

Right to request corrections — if you believe your PHI contains an error or is incomplete, you may request that we amend it. We will respond to your request within 60 days.

Right to an accounting of disclosures — you may request a list of disclosures we have made of your PHI to parties other than those involved in your treatment, payment, or healthcare operations.

Right to request restrictions — you may ask us to restrict how we use or disclose your PHI. While we will make every reasonable effort to honor your request, we are not always legally required to do so.

Right to request confidential communications — you may request that we communicate with you about your PHI in a specific way or at a specific location — for example, by email only or at a particular address.

Right to a copy of this Notice — you have the right to receive a paper copy of this Notice at any time, even if you originally received it electronically. Contact us at Info@holisticallyrx.com to request one.

Our duties

We are required by law to maintain the privacy of your PHI, provide you with this Notice of our privacy practices, and follow the terms of this Notice. We will make reasonable efforts to limit the use and disclosure of your PHI to the minimum amount necessary to accomplish the intended purpose.

Business Associate Agreements — where we engage third parties to perform services that involve your PHI (for example, our telemedicine platform, payment processors, pharmacies, and laboratories), we maintain written Business Associate Agreements (BAAs) that require those parties to safeguard your PHI and to use it only for permitted purposes, consistent with HIPAA.

Changes to this notice

We reserve the right to change the terms of this Notice and to apply the changed terms to PHI we already have on file. If we make changes, we will post the revised Notice on our website and make it available upon request. The effective date of any changes will be listed at the top of this Notice.

How to file a complaint

If you believe we have violated your privacy rights under HIPAA, you have the right to file a complaint. You may file a complaint with us or directly with the U.S. Department of Health and Human Services (HHS). Filing a complaint will not affect the services we provide to you.

Complaint to Holistically Rx — email Info@holisticallyrx.com. We will acknowledge receipt of your complaint and respond within 30 days.

Complaint to HHS — you can file a complaint with the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services. Visit https://www.hhs.gov/ocr for information on how to submit your complaint.

Contact us

If you have questions about this Notice or how we handle your Protected Health Information, reach out to us:

Holistically Rx, LLC. · Privacy contact: Info@holisticallyrx.com · Phone: 660-243-5303 · Headquarters: Oklahoma City, Oklahoma, USA.