Notice of Privacy Practices

This Notice applies to Med Grade Fit, PLLC d/b/a Unleashed Medical, its workforce, and health care operations conducted under the Unleashed Medical name. In this Notice, "health information" means protected health information maintained by us in connection with your care.

1. Your rights

Get an electronic or paper copy of your medical record

You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you. We will usually provide a copy or summary within 30 days after receiving a valid request. We may charge a reasonable, cost-based fee as permitted by law.

Ask us to correct your medical record

You may ask us to correct health information that you believe is incorrect or incomplete. We may deny the request, but we will explain the reason in writing, generally within 60 days.

Request confidential communications

You may ask us to contact you in a specific way, such as at a particular telephone number or email address, or to send mail to a different address. We will agree to reasonable requests.

Ask us to limit what we use or disclose

You may ask us not to use or disclose certain information for treatment, payment, or health care operations. We are not generally required to agree if the restriction could affect care or operations. If we agree, we may still disclose the information for emergency treatment or as otherwise permitted by law.

If you pay in full out of pocket for a health care item or service, you may ask us not to disclose information about that item or service to your health plan for payment or health care operations. We will agree unless a law requires the disclosure.

Get an accounting of disclosures

You may request a list of certain disclosures of your health information made during the six years before your request. The list will not include all disclosures, including many disclosures for treatment, payment, health care operations, or disclosures you authorized. One accounting in a 12-month period is free; a reasonable cost-based fee may apply to additional requests.

Get a copy of this Notice

You may request a paper or electronic copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose someone to act for you

If a person has legal authority to act as your personal representative, such as under a valid medical power of attorney or guardianship, that person may exercise your privacy rights. We will verify the person's authority before acting.

Request access through another person or destination

You may ask us in a signed written request to send a copy of your health information to a person or entity you designate, as permitted by law.

2. Your choices

For certain disclosures, you may tell us your preference. You may ask us to:

• Share relevant information with family, close friends, caregivers, or others involved in your care or payment for care.
• Share information in a disaster-relief situation.

If you cannot tell us your preference, we may share relevant information when we believe it is in your best interest or when needed to lessen a serious and imminent threat to health or safety.

We will obtain your written authorization before using or disclosing PHI for purposes that require authorization, including:

• Most marketing uses of PHI.
• Sale of PHI. We do not sell PHI.
• Most uses or disclosures of psychotherapy notes, if we maintain them.

We do not maintain a hospital directory and do not use PHI for fundraising.

3. How we typically use or disclose health information

Treatment

We may use and disclose health information to provide, coordinate, or manage your care. For example, we may communicate with laboratories, pharmacies, other treating professionals, or consultants involved in your care.

Payment

We may use and disclose health information to bill you, process payment, collect amounts due, or respond to payment-related requests. If you ask us to assist with reimbursement or benefits, we may disclose information as authorized or permitted by law.

Health care operations

We may use and disclose information to run the practice, improve quality, train staff, conduct compliance activities, manage records, audit services, contact you, and support business operations. Business associates that handle PHI for us must protect it as required by law and contract.

Appointment reminders and treatment alternatives

We may contact you about appointments, laboratory monitoring, refills, care coordination, treatment alternatives, and health-related services that may be relevant to you.

Public health and safety

We may disclose health information for legally permitted public-health and safety activities, including disease prevention, product recalls, adverse-event reporting, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to health or safety.

Research

We may use or disclose information for research only when the requirements of applicable law are satisfied, such as with your authorization, an approved waiver, or de-identified information.

Required by law and health oversight

We may disclose information when federal or state law requires it, including to the U.S. Department of Health and Human Services to demonstrate compliance, licensing boards, health oversight agencies, or other authorized government bodies.

Workers' compensation, law enforcement, and government functions

We may disclose information as authorized for workers' compensation, certain law-enforcement purposes, military and veterans activities, national security, protective services, correctional institutions, and other special government functions.

Medical examiners, funeral directors, and organ donation

We may disclose information to coroners, medical examiners, funeral directors, and organ-procurement organizations as permitted by law.

Lawsuits and legal proceedings

We may disclose information in response to a court or administrative order, subpoena, discovery request, or other lawful process when legal requirements are met.

Additional legal protections

Certain information, including some mental-health, HIV/AIDS, genetic, sexually transmitted infection, and substance-use-disorder information, may receive additional protection under federal or Florida law. We will obtain authorization or follow additional procedures when those laws require it.

4. Substance use disorder patient records

To the extent we create, receive, or maintain substance use disorder patient records protected by 42 C.F.R. Part 2, we will follow the additional federal confidentiality requirements that apply to those records.

We will not use or disclose Part 2 records in civil, criminal, administrative, or legislative investigations or proceedings against you unless you provide written consent or a court order and subpoena satisfy applicable law. Any fundraising communication using Part 2 information would require advance clear notice and an opportunity to opt out; Unleashed Medical does not use PHI for fundraising.

5. Our responsibilities

• We are required by law to maintain the privacy and security of PHI.
• We will notify you as required if a breach may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in the Notice currently in effect.
• We will not use or disclose PHI other than as described in this Notice unless you authorize us in writing or another law permits or requires the use or disclosure.
• You may revoke a written authorization at any time in writing, except to the extent we already relied on it.
• We will use reasonable safeguards for email, text, telehealth, portal, and other electronic communication. Because standard email and SMS may not be fully secure, we may redirect sensitive matters to a secure communication method.

6. Changes to this Notice

We may change this Notice and make the revised terms apply to health information we already have and information we receive in the future. The current Notice will be available on our website and upon request. The effective date appears at the top.

7. Questions, requests, and complaints

You may contact our Privacy Officer to ask a question, exercise a right, or file a complaint. We will not retaliate against you for filing a complaint.