HIPAA Compliance & Notice of Privacy Practices

Effective Date: April 13, 2026

This Notice of Privacy Practices describes how medical information about you may be used and disclosed, and how you can access this information. Please review it carefully.

1. How We May Use and Disclose Your PHI

PrimeCare VIP may use and disclose your Protected Health Information for the following purposes:

Treatment

We use your PHI to provide, coordinate, and manage your healthcare. This includes sharing information with other healthcare providers involved in your care, such as specialists, labs, or hospitals — with your consent.

Payment

We may use your PHI to process membership payments and coordinate benefits. As a concierge practice, we operate outside traditional insurance billing; however, we may provide documentation for HSA/FSA reimbursement at your request.

Healthcare Operations

We may use your PHI for quality improvement, training, compliance auditing, and administrative operations necessary to run our practice.

As Required by Law

We may disclose PHI when required by federal, state, or local law, including Florida Department of Health reporting requirements for communicable diseases, abuse, neglect, or public health threats.

2. Your Rights Under HIPAA

As a member, you have the following rights regarding your health information:

• Right to Access: You may request copies of your medical records. We will provide them within 30 days of your request.
• Right to Amend: You may request corrections to your medical records if you believe they contain errors.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions: You may request that we limit how we use or disclose your PHI, though we are not required to agree to all requests.
• Right to Confidential Communications: You may request that we communicate with you at a specific address or phone number.
• Right to a Paper Copy: You may request a paper copy of this Notice at any time.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint (see Section 6 below).

3. Our Responsibilities

• Maintain the privacy of your PHI as required by law
• Provide you with this Notice of our legal duties and privacy practices
• Notify you in the event of a breach of your unsecured PHI
• Follow the terms of this Notice currently in effect
• Obtain your written authorization before using your PHI for marketing purposes or selling your information

4. Information Security Measures

PrimeCare VIP implements comprehensive safeguards to protect your PHI, including:

• Administrative safeguards: Staff training on HIPAA compliance, access controls, and privacy policies
• Physical safeguards: Secure storage of paper records and controlled access to facilities
• Technical safeguards: Encrypted electronic health records, secure messaging, password protection, and audit trails
• Mobile Medical Office security: Secure, locked transport of any physical records or specimens; encrypted mobile devices used during house calls

5. Business Associates

We may share your PHI with trusted third-party vendors ("Business Associates") who perform services on our behalf, such as electronic health record providers, lab services, and billing platforms. All Business Associates are required to sign a Business Associate Agreement (BAA) that obligates them to protect your PHI in accordance with HIPAA.

6. How to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint. You will not be penalized or retaliated against for filing a complaint.

7. Changes to This Notice

We reserve the right to change this Notice of Privacy Practices at any time. Any revised Notice will be effective for all PHI we maintain. The current Notice will always be available on our website and upon request at our practice.

8. Contact Our Privacy Officer

For questions about this Notice or our privacy practices, contact: