Notice of Privacy Practices

Effective Date: June 16, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the HITECH Act and the HIPAA Omnibus Rule, requires us to protect the privacy of your health information. This Notice explains how we may use and disclose your protected health information (PHI), our legal duties, and your rights regarding that information. We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, to notify you following a breach of unsecured PHI, and to abide by the terms of the Notice currently in effect.

How We May Use and Disclose Your Health Information

Without your specific written authorization, we are permitted to use and disclose your health care records for the purposes of treatment, payment, and health care operations:

• Treatment means providing, coordinating, or managing your health care. For example, our nephrologists may share information with your primary care physician, a hospital, a dialysis center, an imaging facility, or a laboratory involved in your kidney and hypertension care.
• Payment means activities such as billing and collecting payment for services, verifying insurance coverage, and obtaining prior authorization. For example, we may disclose information to your health plan to obtain reimbursement for a procedure or laboratory test.
• Health Care Operations means the business activities of running our practice, such as quality assessment, staff training, accreditation, and care coordination across our locations.

Other Uses and Disclosures That Do Not Require Your Authorization

We may use or disclose your health information without your authorization in the following circumstances, subject to applicable law:

• To family members, friends, or others involved in your care or payment, to the extent necessary, unless you object;
• To remind you of appointments and to provide messages at the phone numbers or addresses you provide;
• For public health activities, such as reporting disease, vital statistics, or adverse events to authorities permitted by law;
• For health oversight activities, including audits and investigations;
• For judicial and administrative proceedings, including in response to a subpoena or court order;
• To law enforcement officials as permitted or required by law;
• To report suspected abuse, neglect, or domestic violence;
• To coroners, medical examiners, and funeral directors as authorized by law;
• For organ and tissue donation purposes;
• To avert a serious threat to health or safety;
• For specialized government functions, including military, national security, and correctional purposes;
• For workers' compensation as authorized by law; and
• As otherwise required by law.

Text Messages. With your consent, we may send text (SMS) messages to the mobile number you provide for appointment reminders, scheduling, notifications that test results are ready to discuss, billing, and other communications related to your care. We do not send promotional or marketing texts. Standard message and data rates may apply, and message frequency varies. You may opt out at any time by replying STOP, opt back in by replying START, and reply HELP for assistance. Opting out of text messages will not affect your ability to receive care or to be contacted by phone or mail.

Uses and Disclosures That Require Your Written Authorization

The following uses and disclosures will be made only with your written authorization:

• Most uses and disclosures of psychotherapy notes (if any);
• Uses and disclosures for marketing purposes; and
• Disclosures that constitute a sale of protected health information.

Other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already taken action in reliance on it.

Your Rights Regarding Your Health Information

You have the following rights, which you may exercise by submitting a written request to our Privacy Officer at the address listed below:

• Right to request restrictions. You may request restrictions on certain uses and disclosures. We are not required to agree, except that we will comply with a request to restrict disclosure to a health plan for a service you paid for in full out of pocket, where the disclosure is for payment or health care operations and is not otherwise required by law.
• Right to confidential communications. You may request that we communicate with you by alternative means or at an alternative location.
• Right to access and copy. You may inspect and obtain a copy of your health information, including an electronic copy of records maintained electronically. A reasonable, cost-based fee may apply.
• Right to amend. You may request an amendment to your health information. We may deny the request in certain circumstances.
• Right to an accounting of disclosures. You may request a list of certain disclosures we have made of your health information.
• Right to breach notification. You have the right to be notified following a breach of your unsecured protected health information.
• Right to a paper copy. You have the right to obtain a paper copy of this Notice upon request, even if you agreed to receive it electronically.

Our Duties and Changes to This Notice

We are required by law to maintain the privacy of your PHI, to provide this Notice of our legal duties and privacy practices, and to notify affected individuals following a breach of unsecured PHI. We reserve the right to change the terms of this Notice and to make the revised Notice effective for all PHI we maintain. Any revised Notice will be posted at our offices and on our website, and copies will be available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a written complaint with our Privacy Officer at the address below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201. We will not retaliate against you for filing a complaint.

Contact, Privacy Officer

Our Locations

This Notice applies to all locations of Kidney Hypertension Clinic: