HIPAA Notice of Privacy Practices

Our Commitment to Your Privacy

At VITALI, we understand that your medical information is personal. We are legally required to:

• Maintain the privacy and security of your Protected Health Information (PHI)
• Provide you with this Notice of our legal duties and privacy practices
• Notify you following a breach of unsecured Protected Health Information when required by law
• Follow the terms of this Notice currently in effect

How We May Use and Disclose Your Protected Health Information

Federal law allows us to use and disclose your health information without your written authorization in certain circumstances.

1. For Treatment

We may use and share your medical information to provide, coordinate, or manage your healthcare.

Examples include:

• Reviewing laboratory results
• Developing treatment plans
• Conducting follow-up evaluations
• Coordinating care among physicians, nurses, nurse practitioners, physician assistants, laboratories, pharmacies, imaging centers, and specialists
• Referring you to another healthcare provider
• Communicating with you regarding your care

2. For Payment

We may use and disclose your information to obtain payment for healthcare services.

Examples include:

• Billing insurance companies
• Verifying insurance eligibility
• Processing payments
• Collecting outstanding balances
• Working with financing providers when authorized
• Responding to insurance audits

3. For Healthcare Operations

We may use your information for business operations necessary to run our medical practice.

Examples include:

• Quality improvement
• Staff training
• Compliance audits
• Licensing inspections
• Risk management
• Accreditation
• Business planning
• Medical record reviews
• Customer service

Appointment Reminders

We may contact you regarding upcoming appointments through:

• Telephone
• Voicemail
• Email
• Secure patient portal
• Text message (SMS)

Treatment Alternatives and Health-Related Benefits

We may contact you regarding:

• Alternative treatments
• Follow-up care
• Preventive care recommendations
• Wellness services
• Educational information related to your treatment

Individuals Involved in Your Care

Unless you object, we may disclose relevant medical information to family members, caregivers, or others involved in your healthcare or payment for healthcare.

We may also use professional judgment to determine whether disclosure is in your best interest when you are unable to communicate.

Business Associates

We work with trusted third-party companies that assist us in operating our practice.

Examples include:

• Electronic Medical Record (EMR) providers
• Medical billing companies
• Payment processors
• Laboratory services
• Secure cloud storage providers
• IT service providers
• Appointment scheduling systems
• HIPAA-compliant communication platforms

Public Health Activities

We may disclose your information without your authorization when required by law for public health purposes, including:

• Disease reporting
• FDA-regulated product monitoring
• Adverse event reporting
• Preventing serious threats to public health
• Reporting abuse, neglect, or domestic violence when legally required

Health Oversight Activities

We may disclose information to agencies responsible for healthcare oversight, including:

• Licensing boards
• State medical boards
• Department of Health
• Medicare and Medicaid oversight
• Government investigations
• Audits

Legal Proceedings

We may disclose your information:

• In response to a court order
• In response to a subpoena where legally permitted
• During administrative proceedings
• As otherwise required by law

Law Enforcement

We may disclose information to law enforcement officials when legally required, including:

• Compliance with warrants
• Identifying missing persons
• Reporting certain crimes
• Responding to lawful requests

Coroners, Medical Examiners, and Funeral Directors

We may disclose information to:

• Coroners
• Medical examiners
• Funeral directors

Organ and Tissue Donation

If applicable, we may disclose information to organizations involved in organ procurement and transplantation.

Serious Threat to Health or Safety

We may disclose information if necessary to prevent or lessen a serious and imminent threat to your health or the safety of another person.

Workers' Compensation

We may disclose information as authorized by workers' compensation laws.

Research

Your information may be used for research only when approved through legally required review processes or when permitted under HIPAA.

Whenever possible, identifying information is removed.

Military and National Security

When authorized by law, we may disclose information for military, national security, or correctional institution purposes.

Uses Requiring Your Written Authorization

Except as described in this Notice, we will obtain your written authorization before using or disclosing your Protected Health Information.

Examples include:

• Marketing communications that require authorization
• Sale of Protected Health Information
• Certain psychotherapy notes
• Uses not otherwise permitted by law

Photography and Before-and-After Images

Certain treatments offered by VITALI may involve clinical photography for documentation purposes.

Examples include:

• Hormone optimization progress
• Medical weight management
• Body sculpting
• Cosmetic injectable treatments
• Laser procedures
• Skin rejuvenation

Your Rights Regarding Your Medical Information

You have the following rights regarding your Protected Health Information.

Right to Inspect and Obtain Copies

You have the right to inspect and obtain copies of your medical records, subject to certain legal exceptions.

Reasonable copying fees may apply where permitted by law.

Right to Request Amendments

If you believe information in your medical record is inaccurate or incomplete, you may request an amendment.

We may deny the request if the information:

• Was not created by VITALI
• Is accurate and complete
• Is not part of the designated medical record
• Is otherwise exempt under applicable law

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your information.

Although we are not required to agree to every request, we will comply when legally required.

Right to Confidential Communications

You may request communications through alternative methods or alternative locations.

For example:

• Different mailing address
• Different phone number
• Secure email
• Patient portal

Right to Receive an Accounting of Disclosures

You may request a list of certain disclosures we have made of your Protected Health Information.

This does not include disclosures made for:

• Treatment
• Payment
• Healthcare operations
• Disclosures authorized by you
• Certain other legally exempt disclosures

Right to Receive a Paper Copy of This Notice

You may request a printed copy of this Notice at any time, even if you previously agreed to receive it electronically.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• VITALI Privacy Officer
• Phone: 833-200-1148
• Mailing Address: 500 N. STATE COLLEGE #1100A, ORANGE, CA 92868

Security of Your Information

VITALI maintains administrative, physical, and technical safeguards designed to protect your Protected Health Information from unauthorized access, alteration, disclosure, or destruction.

While no electronic system is completely immune from risk, we continually work to maintain industry-standard security measures and HIPAA-compliant safeguards.

Electronic Communications

Email and text messaging may not always be fully secure despite reasonable safeguards.

By choosing to communicate electronically with VITALI, you acknowledge the potential risks associated with electronic communications.

For sensitive medical discussions, secure patient portals or direct consultation with your provider may be recommended.

Website Forms

Information submitted through appointment request forms, consultation requests, or contact forms may become part of your medical record if you become a patient.

Please avoid submitting highly sensitive medical information through unsecured website forms unless specifically instructed to do so.

Changes to This Notice

VITALI reserves the right to revise this Notice of Privacy Practices at any time.

Updated versions will apply to all Protected Health Information maintained by VITALI and will be posted in our office and on our website.

Contact Information

If you have questions regarding this Notice or your privacy rights, please contact:

• VITALI
• Privacy Officer
• Phone: 833-200-1148
• Address: 500 N. STATE COLLEGE #1100A, ORANGE, CA 92868
• Website: vitaliliving.com