HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Pledge Regarding Your Health Information

Ovella Health is committed to protecting the privacy of your protected health information (PHI). We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and abide by the terms of the Notice currently in effect.

How We May Use and Disclose Your Health Information

For Treatment. We may use and disclose your PHI to provide, coordinate, or manage your healthcare. For example, we may share your medical information with another provider involved in your care, such as a specialist or laboratory.

For Payment. We may use and disclose your PHI to bill and collect payment for the services we provide. Ovella Health is a direct-pay practice; if you use insurance for reimbursement independently, we may provide a superbill containing your PHI at your request.

For Healthcare Operations. We may use and disclose your PHI for our internal operations, including quality improvement, staff training, credentialing, and administrative activities.

To Business Associates. We may share PHI with third-party vendors who perform services on our behalf (for example, our electronic health record platform, telehealth platform, or secure messaging service). All business associates are required by HIPAA to safeguard your PHI under a written Business Associate Agreement.

As Required by Law. We will disclose your PHI when required to do so by federal, state, or local law — including for public health activities, abuse or neglect reporting, health oversight, judicial proceedings, law enforcement, and to avert a serious threat to health or safety.

With Your Written Authorization. Any other use or disclosure of your PHI not described above will be made only with your written authorization. You may revoke that authorization at any time, in writing, except to the extent we have already acted in reliance on it.

Your Rights Regarding Your Health Information

• Right to inspect and copy your PHI in our designated record set.
• Right to request an amendment if you believe information in your record is incorrect or incomplete.
• Right to an accounting of disclosures we have made of your PHI, subject to legal exceptions.
• Right to request restrictions on certain uses or disclosures of your PHI.
• Right to request confidential communications by alternative means or at alternative locations.
• Right to a paper or electronic copy of this Notice at any time.
• Right to be notified following a breach of unsecured PHI.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you, as well as any information we receive in the future. The current Notice is always available at www.ovellahealth.com and upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with Ovella Health or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact — Privacy Officers

Ovella Health’s HIPAA Privacy Officers are Kelly Baxter, MD and Kelsey Sherman, MD. Direct privacy questions, requests, and complaints to:

Ovella Health — Attn: Privacy Officer
1914 Thomes Ave, Ste 2, #5831
Cheyenne, WY 82001
admin@ovellahealth.com