Roots of Health
11003 Northpointe Blvd Suite G, Tomball, TX 77375
Phone: +1 737 208 1455
Email: admin@rootsofhealth.clinic
Effective Date: 01/09/2025
Introduction: Our Commitment to Your Privacy
At Roots of Health, we are committed to protect your Personal Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA).
We are legally required to:
-
- Maintain the privacy and security of your PHI.
-
- Provide you with this notice explaining our legal duties and privacy practices.
-
- Notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.
This notice describes how we may use and disclose your information, and what rights you have as a patient.
1. Uses and Disclosures Permitted Without Authorization
We may use and share your PHI without your written permission in the following ways:
-
- Treatment: To provide, coordinate, or manage your medical care (e.g., sharing information with specialists or pharmacists).
-
- Payment: To bill and obtain payment for the health care services we provide.
- Health Care Operations: For quality improvement, staff training, accreditation, audits, and other necessary business functions.
2. Other Uses and Disclosures Allowed by Law
We may also use or disclose your PHI in the following circumstances:
-
- Legal Requirements: To comply with federal or state laws, such as reporting public health information or suspected abuse.
-
- Public Health and Safety: To help prevent or control disease, injury, or serious threats to health.
-
- Government Oversight: For inspections, audits, or investigations by regulatory agencies.
- Judicial and Administrative Proceedings: In response to court orders, subpoenas, or lawful investigations.
3. Uses and Disclosures Requiring Your Authorization
Any other use or disclosure of your PHI will require your written authorization. Examples include:
-
- Marketing: Most uses of PHI for marketing purposes.
-
- Sale of PHI: We will never sell your PHI without your written permission.
-
- Psychotherapy Notes: These receive special protection and require your authorization, except in limited circumstances.
You may revoke your authorization at any time in writing.
4. Your Rights Regarding Your PHI
As a patient, you have the right to:
-
- Access: Request a copy of your medical records (electronic or paper), which we will provide within 30 days.
-
- Amend: Request corrections to your medical information if you believe it is incomplete or inaccurate.
-
- Restrictions: Request limits on how we use or share your PHI. We are not required to agree unless you request restriction of information to your insurer for services paid in full out of pocket.
-
- Confidential Communications: Request that we contact you in a specific way (e.g., by secure email only).
-
- Accounting of Disclosures: Request a list of certain disclosures of your PHI made over the past six years.
- Copy of This Notice: Request a paper or electronic copy of this notice at any time.
5. How We Protect Your Information
We safeguard your PHI using the standards required by the HIPAA Security Rule:
-
- Administrative Safeguards: Staff training, risk assessments, and confidentiality agreements.
-
- Physical Safeguards: Secure facilities, restricted access, and proper disposal of records.
- Technical Safeguards: Encryption, role-based access controls, secure authentication, and system monitoring.
6. Breach Notification
If a breach occurs that compromises your PHI:
-
- We will notify you within 60 days of discovery.
-
- We will notify the U.S. Department of Health and Human Services (HHS), and if applicable, the media.
- We will explain what happened, what information was involved, and the steps we are taking to protect you.
7. Our Responsibilities
-
- We are required by law to follow the terms of this notice.
-
- We will update this notice as laws or practices change and make the revised version available to you.
-
- We will not use or disclose your PHI for purposes not described here without your written authorization.
- We will maintain Business Associate Agreements (BAAs) with any third parties that handle PHI on our behalf.
8. Questions or Complaints
If you have questions, want to exercise your rights, or believe your privacy rights have been violated, you may contact us at:
-
+1 737 208 1455
You may also file a complaint directly with the U.S. Department of Health and Human Services (HHS).
We will not retaliate against you for filing a complaint.
At Roots of Health, your privacy and the security of your health information are our top priorities.
