HIPAA Notice of Privacy Practices

1. Our Commitment to HIPAA Compliance

TotalCare is committed to protecting the privacy and security of your health information. We are required by law to:

Maintain the privacy and security of your Protected Health Information (PHI)
Provide you with this Notice of our legal duties and privacy practices
Follow the terms of the Notice currently in effect
Notify you if we are unable to agree to a requested restriction on how we use or disclose your PHI
Accommodate reasonable requests you may have to communicate health information by alternative means or at alternative locations

Important Website Note:

TotalCare.us (this website) does NOT collect, transmit, or store any Protected Health Information. This website is for informational purposes only. All patient medical records, health information, and clinical data are maintained in separate, secure, HIPAA-compliant systems accessible only to authorized healthcare personnel.

2. What is Protected Health Information (PHI)?

Protected Health Information includes any information about you that:

Relates to your past, present, or future physical or mental health condition
Relates to the provision of healthcare services to you
Relates to past, present, or future payment for healthcare services
Identifies you or could reasonably be used to identify you

Examples of PHI Include:

• Medical history and diagnoses
• Test and laboratory results
• Prescriptions and medications
• Treatment plans and notes

• Insurance information
• Social Security number
• Medical record numbers
• Billing records

3. How We May Use and Disclose Your PHI

We may use and disclose your PHI for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes consultations between healthcare providers.

Example: Your doctor shares your medical history with a specialist we refer you to for consultation.

Payment

We may use and disclose your PHI to obtain payment for services we provide to you, including billing and collection activities.

Example: We submit a claim to your health insurance company with information about your diagnosis and treatment.

Healthcare Operations

We may use and disclose your PHI for our healthcare operations, including quality assessment, training, and business management.

Example: We review patient records to evaluate the performance and qualifications of our healthcare providers.

Other Uses Without Your Authorization:

Required by Law: When required by federal, state, or local law
Public Health Activities: To prevent or control disease, injury, or disability
Health Oversight: For health oversight activities authorized by law
Legal Proceedings: In response to court orders or subpoenas
Law Enforcement: For law enforcement purposes as required by law
Serious Threat: To prevent a serious threat to health or safety
Workers' Compensation: As authorized by workers' compensation laws

⚠️ Your Authorization Required:

We will obtain your written authorization before using or disclosing your PHI for purposes other than treatment, payment, healthcare operations, or when otherwise required or permitted by law. You may revoke your authorization in writing at any time.

4. Your Rights as a Patient

You have the following rights regarding your Protected Health Information:

✓ Right to Access

You have the right to inspect and obtain a copy of your medical records and billing records. We may charge a reasonable fee for copying costs.

✓ Right to Amend

If you believe your health information is incorrect or incomplete, you have the right to request an amendment as long as we maintain the information.

✓ Right to an Accounting of Disclosures

You have the right to receive an accounting of certain disclosures of your PHI made by us during the six years prior to your request.

✓ Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request, except in certain limited circumstances.

✓ Right to Confidential Communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location (e.g., at home instead of work).

✓ Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

✓ Right to Notification of a Breach

You have the right to be notified if your unsecured PHI is breached.

5. How to Exercise Your Rights

To exercise any of your rights described in this Notice, please visit our contact page.

We will respond to your request within 30 days. If we need additional time, we will notify you in writing of the reason for the delay and when you can expect a response.

6. How to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with TotalCare or with the U.S. Department of Health and Human Services (HHS).

File a Complaint with TotalCare:

Please visit our contact page to submit a written complaint to our Privacy Officer. You will not be retaliated against for filing a complaint.

File a Complaint with HHS:

Online: HHS Office for Civil Rights Complaint Portal

Mail:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201

Phone: 1-877-696-6775

✓ No Retaliation: You will not be penalized or retaliated against for filing a complaint.

7. Our Security Measures

TotalCare implements comprehensive administrative, physical, and technical safeguards to protect your PHI:

🔐

Administrative Safeguards

• Staff training
• Security policies
• Risk assessments
• Access controls

🏢

Physical Safeguards

• Secure facilities
• Locked file rooms
• Visitor controls
• Equipment security

💻

Technical Safeguards

• Encryption
• Firewalls
• Secure backups
• Audit controls

8. Changes to This Notice

We reserve the right to change this Notice at any time. The revised Notice will be effective for all PHI we maintain, including information created or received before the change.

When we make material changes to this Notice, we will:

Post the new Notice in our facilities and on our website
Make copies available upon request
Update the "Effective Date" at the top of the Notice

9. Additional Resources

For more information about HIPAA and your privacy rights:

Acknowledgment of Receipt

By receiving services from TotalCare, you acknowledge that you have been provided with a copy of this Notice of Privacy Practices and have been given an opportunity to review it. If you have questions about this Notice, please visit our contact page.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.