NOTICE OF PRIVACY PRACTICES

Dry Days Health PC
Effective Date: 22/08/2025

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

This Notice of Privacy Practices (the "Notice") describes how Dry Days Health PC ("we" or "our") may use and disclose your protected health information to carry out treatment, payment, or business operations and for other purposes that are permitted or required by law. We engage in electronic standard transactions and thus are regulated by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing privacy regulations ("Privacy Rule") as a "Covered Entity."

"Protected health information" or "PHI" is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical health or condition, treatment, or payment for health care services. This Notice also describes your rights to access and control your protected health information.

Uses and Disclosures of Protected Health Information:

Your protected health information may be used and disclosed by our health care providers, our staff, and others outside of our office that are involved in your care and treatment for the purpose of providing health care services to you, to support our business operations, to obtain payment for your care, and for any other use authorized or required by law.

Treatment

We will use and disclose your protected health information to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party.
For example: Your protected health information may be provided to a health care provider to whom you have been referred to ensure the necessary information is accessible to diagnose or treat you.

Payment

Your protected health information may be used to bill or obtain payment for your health care services. This may include certain activities that your health insurance plan may undertake before it approves or pays for your services, such as: making a determination of eligibility or coverage for insurance benefits and reviewing services provided to you for medical necessity.

Health Care Operations

We may use or disclose, as needed, your protected health information in order to support the business activities of this office. These activities include, but are not limited to:

• Improving quality of care
  
  
• Providing information about treatment alternatives or other health-related benefits and services
  
  
• Developing, maintaining, and supporting computer systems
  
  
• Legal services
  
  
• Conducting audits and compliance programs, including fraud, waste, and abuse investigations
  
  

Uses and Disclosures That Do Not Require Your Authorization:

We may use or disclose your protected health information in the following situations without your authorization. These include:

• As required by law
  
  
• For public health purposes
  
  
• For health care oversight purposes
  
  
• For abuse or neglect reporting
  
  
• Pursuant to Food and Drug Administration requirements
  
  
• In connection with legal proceedings
  
  
• For law enforcement purposes
  
  
• To coroners, funeral directors, and organ donation agencies
  
  
• For certain research purposes
  
  
• For certain criminal activities
  
  
• For military activity and national security purposes
  
  
• For workers' compensation reporting
  
  
• Related to inmate or custodial reporting
  
  

Under the law, we must also make certain disclosures:

• To you upon your request
  
  
• When required by the Secretary of the U.S. Department of Health and Human Services to investigate or determine our compliance with HIPAA
  
  

Note: State laws may further restrict these disclosures.

Uses and Disclosures That Require Your Authorization:

Other permitted and required uses and disclosures will be made only with your consent, authorization, or opportunity to object, unless permitted or required by law.

Without your authorization:

• We are prohibited from using or disclosing your PHI for marketing purposes
  
  
• We may not sell your PHI
  
  
• Your PHI will not be used for fundraising
  
  

If you provide us with written authorization, you may revoke it at any time in writing, except to the extent that we have already relied on the use or disclosure.

Your Rights With Respect to Your Protected Health Information:

You have the right to:

•  Inspect and copy your medical record
  
  
• Request an amendment to your record
  
  
• Request restrictions on how your PHI is used or disclosed. Your request must be in writing and state the specific restriction requested and to whom you want the restriction to apply.
  
  
  
  • We are not required to agree to all requested restrictions
    
    
  • However, we must agree if the request involves a disclosure to a health plan for payment or operations, and you paid out-of-pocket in full
    
    
• Request confidential communications by alternative means or at alternative locations.  We will comply with all reasonable requests submitted in writing which specify how or where you wish to receive these communications.
  
  
• Receive an accounting of disclosures (with certain exceptions)
  
  
• Receive a paper copy of this Notice, even if you have agreed to receive it electronically
  
  

Revisions to This Notice:

We reserve the right to revise this Notice and to make the revised Notice effective for PHI we already have about you, as well as any information we receive in the future. A current copy of this Notice will always be available on our website. Any material changes will also be prominently posted.

You have the right to object to or withdraw your consent, as described in this Notice.

Breach of Health Information:

We will notify you if a reportable breach of your unsecured protected health information is discovered. Notification will be made no later than 60 days from the breach discovery and will include:

• A brief description of how the breach occurred
  
  
• The PHI involved
  
  
• Contact information for questions or further information
  
  

Complaints:

If you believe your privacy rights have been violated, you may file a complaint with:

HIPAA Privacy Officer

privacy@drydays.health 

Or with the U.S. Department of Health and Human Services:
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for filing a complaint.

Questions?

If you have questions about this Notice, please contact us at:
443 303 8972 and ask to speak with our HIPAA Privacy Officer.

‍