Notice of Privacy Practices
Effective September 28, 2026
This notice describes how medical information about you may be used and disclosed and how you can get access to it. Please review it carefully.
On this page
Our responsibilities
The affiliated medical groups and clinicians who provide care through our platform are required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy and security of your protected health information (PHI), provide you with this notice, follow its terms, and notify you promptly if a breach occurs that may have compromised your information.
Your treating medical group provides its complete Notice of Privacy Practices before or during intake in the secure patient portal. This summary is provided for your convenience.
How your information may be used and disclosed
Other uses, including most marketing and any sale of PHI, require your written authorization, which you may revoke at any time.
- Treatment: to evaluate, diagnose, prescribe, and coordinate your care, including with pharmacies.
- Payment: to bill and collect payment for services.
- Health care operations: to run the practice, improve quality, and train staff.
- As required by law, for public health and safety, health oversight, legal proceedings, and law enforcement in limited circumstances.
Your rights
- Get an electronic or paper copy of your medical record.
- Ask us to correct your medical record.
- Request confidential communications, such as a different address or method.
- Ask us to limit what we use or share, including restricting disclosures to a health plan when you pay in full out of pocket.
- Get a list of those with whom we have shared your information.
- Get a paper copy of this notice.
- Choose someone to act for you, such as a personal representative.
Complaints
If you believe your rights have been violated, you may contact us using the details below or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.
Privacy officer contact
- Email: [privacy@yourdomain.com]
- Phone: [Toll-free privacy request number]
- Mail: [Legal entity name, e.g. AllpointeRX, LLC], Attn: Privacy, [Company mailing address]