HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

This Notice of Privacy Practices applies to the protected health information ("PHI") created or received by HerTide Health PLLC (the professional medical practice that provides your clinical care), BoomRx (the pharmacy that compounds and dispenses your medication), and HerTide Health (the technology platform that supports your care) in the course of providing you care. We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and related regulations to maintain the privacy of your PHI, to provide you with this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

How We May Use and Disclose Your PHI

We may use and disclose your PHI without your separate authorization for the following purposes:

• Treatment. We share your information with the physicians, pharmacists, and laboratories involved in your care so they can evaluate you, prescribe, compound, dispense, and coordinate your treatment.
• Payment. We use and disclose your information to bill and collect payment for the services you receive, including processing your payment method and, where applicable, coordinating with a health plan.
• Health Care Operations. We use your information for quality assessment, clinician review, training, compliance, and general administration of our services.
• Business Associates. We may share your PHI with vendors who perform services on our behalf (such as our platform, cloud hosting, and payment processors) under written agreements that require them to protect your information.
• As Required by Law. We will disclose PHI when required to do so by federal, state, or local law, including for public health activities, or in response to a valid legal process.

Uses and Disclosures That Require Your Authorization

Most uses and disclosures not described in this notice will be made only with your written authorization. This includes most uses and disclosures for marketing purposes, disclosures that constitute a sale of PHI, and, in most cases, any disclosure of psychotherapy notes. You may revoke an authorization in writing at any time, and we will stop the future uses and disclosures it permitted, except to the extent we have already relied on it.

Your Rights Regarding Your PHI

• Right to Access. You may inspect and request a copy of the PHI we hold about you, in the form and format you request when readily producible.
• Right to Amend. You may request that we correct PHI you believe is inaccurate or incomplete. We may deny the request in certain circumstances and will explain why in writing.
• Right to an Accounting of Disclosures. You may request a list of certain disclosures of your PHI that we made outside of treatment, payment, and health care operations.
• Right to Request Restrictions. You may request that we limit how we use or disclose your PHI. We are not always required to agree, except that we will honor a request to restrict disclosure to a health plan for an item or service you paid for out of pocket in full.
• Right to Confidential Communications. You may request that we contact you in a specific way or at a specific location.
• Right to Notification of a Breach. You have the right to be notified in the event of a breach of your unsecured PHI.
• Right to a Paper Copy. You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.

Our Duties

We are required to maintain the privacy of your PHI, provide this notice of our duties and privacy practices, and abide by the terms of the notice currently in effect. We reserve the right to change this notice and to make the revised notice effective for PHI we already hold as well as information we receive in the future. If we make a material change, we will post the updated notice on hertide.expand.health and make it available on request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact Our Privacy Officer