HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. PRYM Wellness is required by law to maintain the privacy of your Protected Health Information (PHI), provide you with notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

We may use and disclose your PHI for the following purposes without your written authorization:

• ●Treatment — To provide, coordinate, or manage your healthcare and related services, including consultations with other providers, referrals, and prescriptions
• ●Payment — To bill and collect payment for services, including verification of insurance coverage and claims processing
• ●Healthcare Operations — To support our business activities including quality improvement, training, compliance auditing, and business planning
• ●Required by Law — When required by federal, state, or local law, including reporting communicable diseases and suspected abuse or neglect
• ●Public Health Activities — To prevent or control disease, injury, or disability, and to report vital statistics
• ●Health Oversight — To health oversight agencies for activities authorized by law, including audits, investigations, and inspections
• ●Judicial Proceedings — In response to a court order, subpoena, or other lawful process
• ●Law Enforcement — To law enforcement officials for specific law enforcement purposes as permitted by law
• ●Serious Threats — To prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described above, including:

• ●Marketing communications (other than face-to-face communications and promotional gifts of nominal value)
• ●Sale of your PHI
• ●Most uses of psychotherapy notes (if applicable)
• ●Any other uses not described in this notice

You have the following rights regarding your Protected Health Information:

• ●Right to Access — You may request copies of your medical records. We may charge a reasonable fee for copying and mailing. We will respond within 30 days.
• ●Right to Amend — You may request corrections to your medical records if you believe they are inaccurate or incomplete. We may deny the request in certain circumstances.
• ●Right to an Accounting of Disclosures — You may request a list of certain disclosures we have made of your PHI for the past six years.
• ●Right to Request Restrictions — You may request restrictions on how we use or disclose your PHI. We are not required to agree to all requests, but we must agree if you pay out-of-pocket in full and request we not disclose to your health plan.
• ●Right to Request Confidential Communications — You may request that we communicate with you in a specific way or at a specific location.
• ●Right to a Paper Copy — You may request a paper copy of this notice at any time.
• ●Right to File a Complaint — You may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. You will not be penalized for filing a complaint.

PRYM Wellness maintains comprehensive safeguards to protect your PHI:

• ●Administrative Safeguards — Privacy officer designation, workforce training, access management policies, incident response procedures
• ●Physical Safeguards — Secure facilities, workstation security, device and media controls
• ●Technical Safeguards — Access controls, audit controls, integrity controls, transmission security (256-bit encryption)
• ●Business Associate Agreements — All vendors who access PHI are bound by HIPAA-compliant agreements

In the event of a breach of unsecured PHI, we will notify you as required by law. Notification will be made without unreasonable delay and no later than 60 days after discovery of the breach. We will also notify the Secretary of HHS and, in certain cases, prominent media outlets as required by law.

We reserve the right to change this notice and make the new provisions effective for all PHI we maintain. If we make material changes, we will post the revised notice on our website and make it available upon request. The effective date of the current notice is listed at the top of this page.

To exercise any of your rights, request information, or file a complaint, contact our Privacy Officer: