Notice of Privacy Practices

Healthy Weight Healthy You, PLLC

Effective August 26, 2026

H

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Healthy Weight Healthy You, PLLC (the Practice, we, us, or our) is committed to protecting the privacy of your protected health information (PHI). PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition, health care services, or payment for health care services.

The Notice explains how we may use or disclose your PHI, your rights concerning the information, and our legal duties. We are required by law to maintain the privacy and security of your PHI, provide you with this Notice of our legal duties and privacy practices, and notify you if a breach occurs involving unsecured PHI.

1.- Our Uses and Disclosures of Your PHI‍

We may use or disclose your PHI without your written authorization for the following purposes:

‍Treatment

We may use or disclose your PHI to provide, coordinate, or manage your health care and related services. For example, a physician may review your medical history, laboratory results, or information you provide in a consultation to develop or adjust your treatment plan. We may also disclose relevant PHI to another health care provider involved in your care.

‍Payment

We may use or disclose your PHI to bill for and collect payment for services we provide. For example, we may use information about the services you received to process payment, respond to payment questions, or work with a payment processor or billing service acting on our behalf.

Health Care Operations‍
We may use or disclose your PHI for our health care operations, including quality assessment, care
coordination, training, compliance activities, audits, and business planning. For example, we may review patient records to assess the quality and effectiveness of our services.

‍Other Uses and Disclosures Permitted or Required by Law

We may use or disclose your PHI when permitted or required by law, including for public-health activities; health oversight; reporting abuse, neglect, or domestic violence; judicial or administrative proceedings; certain law-enforcement purposes; averting a serious threat to health or safety; workers' compensation; military and veterans' activities; national-security activities; and as otherwise required by law.

‍
2.- Uses and Disclosures That Require Your Written Authorization

‍
Except as described in this Notice or otherwise permitted or required by law, we will obtain your written authorization before using or disclosing your PHI. In particular, we will obtain your written authorization for most uses or disclosures of psychotherapy notes, for marketing uses or disclosures of PHI, and for disclosures that constitute a sale of PHI, unless an exception under applicable law applies.

You may revoke an authorization in writing at any time. Your revocation will not affect uses or disclosures already made in reliance on your authorization before we received the revocation.

‍
3.- Your Rights Regarding Your PHI

‍
You have the following rights, subject to applicable law:

‍
Right to Inspect and Receive a Copy

You may request to inspect or receive a copy of PHI that we maintain about you in a designated record set. You may request an electronic copy when the information is maintained electronically. We may charge a reasonable, cost-based fee where permitted by law.

‍Right to Request an Amendment

If you believe that PHI we maintain about you is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, but we will provide a written explanation if we do.

‍Right to an Accounting of Disclosures‍

You may request a list of certain disclosures of your PHI that we have made, subject to legal exceptions and limitations.

‍Right to Request Restrictions‍
You may request restrictions on our use or disclosure of your PHI for treatment, payment, or health care operations. We are not required to agree to every request. We must honor a request not to disclose PHI to a health plan for payment or health care operations if: the disclosure is not otherwise required by law; and the PHI relates solely to a health care item or service for which you have paid us in full out of pocket.

‍Right to Request Confidential Communications‍
You may request that we contact you in a particular way or at a particular location. For example, you may ask that we contact you only by email, only by telephone, or at a specified mailing address. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
‍

4.- Our Responsibilities

‍
We are required to follow the terms of the Notice currently in effect. We reserve the right to change our privacy practices and this Notice as permitted by law. If we make a material change, the revised Notice will apply to PHI we already maintain and to PHI we receive in the future. A current copy will be available on our website, at our service locations, and upon request.

‍
We will not use or disclose your PHI in a manner inconsistent with this Notice.

‍
5.- Telehealth, Website, and Electronic Communications

‍The Practice may provide services through telehealth and may use electronic systems to communicate with you, schedule appointments, manage patient records, process payments, and deliver care. We use and disclose PHI through these systems only as permitted by applicable law and with appropriate safeguards.
‍‍

Website inquiries: Our public website is not intended for the submission of detailed medical information unless the relevant form or portal is specifically designated as secure for that purpose. Please do not submit diagnoses, symptoms, medications, laboratory results, insurance information, or other sensitive health information through a general website contact form. Use the Practice's designated secure patient portal or contact the Practice directly for clinical communications.

Electronic communications: If you choose to communicate with us by email, text message, telephone, or another electronic method, those communications may carry privacy or security risks depending on the method used. We will use reasonable safeguards and will honor reasonable requests for confidential communications.

‍‍

6.- Business Associates

We may share PHI with third parties that perform services for us, such as technology vendors, telehealth providers, billing providers, scheduling services, secure communications providers, and other service providers. When required by HIPAA, those providers must agree in writing to protect PHI and use it only as permitted by law and by their agreement with us.

‍‍

7.- Complaints and Questions

If you believe that your privacy rights have been violated, you may file a complaint with the Practice or
with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

‍
To ask questions about this Notice, exercise your privacy rights, or submit a complaint to the Practice,
contact healthyweighthealthyyou2@gmail.com.

‍
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, through its complaint portal or by mail. Current complaint information is available at
https://www.hhs.gov/ocr/complaints/.

‍‍

8.- Acknowledgment of Receipt

If provided separately at the time of service, the Practice may ask you to acknowledge receipt of this
Notice. Your decision not to sign an acknowledgment will not affect your treatment or eligibility for
services.