Privacy Policy & HIPAA Notice of Privacy Practices

Effective Date: 6.15.24

Last Updated: 3.1.25

Our Commitment to Privacy

Red Lion Clinic is committed to protecting your privacy and safeguarding your health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). This Notice of Privacy Practices explains how we collect, use, disclose, and protect your Protected Health Information (PHI) and your rights regarding your health information.

1. Your Rights Regarding Your Health Information

Under HIPAA, you have the right to:Access Your Medical Records – You may request electronic or paper copies of your health records. We will provide them within 30 days of your request (a reasonable fee may apply).Request Corrections – If you believe any of your health information is incorrect, you may request a correction. We will respond within 60 days and notify you if we deny the request.Request Confidential Communications – You can ask us to contact you in a specific way (e.g., home phone, office phone, email) or send mail to an alternate address.Restrict Sharing of Your PHI – You may request that we limit how we use or share your PHI. We will honor all reasonable requests, unless sharing is required by law or necessary for your treatment.Obtain a List of Disclosures – You can request an accounting of PHI disclosures (excluding those for treatment, payment, or healthcare operations) from the past six years.Designate a Representative – If you have a legal guardian or power of attorney, that person can act on your behalf regarding your PHI.File a Complaint – If you believe your privacy rights have been violated, you can:

Contact our Privacy Officer (details below)File a complaint with the U.S. Department of Health & Human Services (HHS) (we will not retaliate for filing a complaint)

HHS Complaint Info:

Office for Civil Rights – U.S. Department of Health & Human Services

200 Independence Avenue, S.W. Washington, D.C. 20201

Phone: 1-877-696-6775

Website: www.hhs.gov/ocr/privacy/hipaa/complaints

2. How We Use & Share Your Health Information

We may use and share your PHI for the following reasons:For Treatment – We use your PHI to coordinate your care with doctors, nurses, and pharmacies. (Example: A provider consulting with a specialist about your condition.)For Payment – We use your PHI for billing and payment processing (e.g., insurance claims, credit card transactions).For Healthcare Operations – We use PHI for administrative purposes, improving services, and ensuring regulatory compliance.For Public Health & Safety – We may disclose PHI to:

Prevent diseaseReport adverse medication reactionsComply with product recallsReport suspected abuse or neglect

As Required by Law – We will share PHI when required by state or federal law, including compliance audits.For Workers’ Compensation & Law Enforcement – We may disclose PHI for work-related injuries, law enforcement investigations, or court orders/subpoenas.With Your Authorization – In cases where HIPAA requires your consent, such as for marketing or selling PHI, we will obtain your written permission first.We Will NOT Share Your PHI Without Your Consent for:

Marketing purposesSelling your informationMost psychotherapy notes

3. Our Responsibilities to Protect Your PHI

We are legally required to:Keep your PHI private & secure

Notify you of any data breach that affects your PHI

Follow this Notice of Privacy PracticesWe will not use or share your PHI except as described in this policy unless you give us written permission. If you grant permission, you can revoke it at any time by notifying us in writing.

4. How We Secure Your Information

Encryption & Secure Storage – We use HIPAA-compliant servers and encryption to protect PHI.

Restricted Access – Only authorized healthcare providers & staff can access your records. Multi-Factor Authentication (MFA) – Extra security layers to prevent unauthorized access.

5. HIPAA Compliance & Business Associates

We work with third-party service providers (e.g., cloud storage, billing processors) who are contractually required to maintain HIPAA compliance through Business Associate Agreements (BAA).

6. Cookies & Tracking Technologies

Our website may use cookies and tracking technologies to:

Improve site functionality & security

Monitor user experience & website trafficYou can manage cookie preferences in your browser settings.

7. Changes to This Privacy Policy

We may update this policy to comply with new laws & regulations. If we make significant changes, we will:

Post the updated policy on our website

Update the "Effective Date" at the top of this policy

8. Contact Information for Privacy Concerns

If you have questions, concerns, or complaints about this Privacy Policy or how your PHI is handled, you may contact our Privacy Officer: Privacy Officer Contact Information:

Red Lion Clinic – Privacy Department

Email: [email protected]

Phone:623-254-4948

Mailing Address: 141 N 6th St Show Low AZ 85901