Notice of Privacy Practices

Who this Notice covers and how it differs from our website Privacy Policy

This Notice of Privacy Practices is issued by RegenHairSolutions LLC dba ElevateMD and the board-certified, U.S.-licensed physicians who provide care through it (the ElevateMD Clinical Team). It governs protected health information (PHI) created or received as part of your clinical relationship with us — for example, the intake, clinical records, and communications maintained on our HIPAA-aware patient record platform.

This Notice is separate from our website Privacy Policy. The website Privacy Policy covers general information collected when you browse our site (such as cookies, analytics, and marketing data) and is governed by consumer-privacy laws, not HIPAA. Where information is regulated as PHI, this Notice controls.

Our duties regarding your health information

We are required by law to maintain the privacy and security of your PHI, to provide you with this Notice of our legal duties and privacy practices, to notify you following a breach of unsecured PHI, and to follow the terms of the Notice currently in effect.

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as information we receive in the future. We will post the current Notice on our website with its effective date and make it available to you on request.

How we may use and disclose your PHI without your authorization

We may use and disclose your PHI for the following purposes without separate authorization:

• Treatment — to provide, coordinate, and manage your care. For example, the ElevateMD Clinical Team reviews your intake to make clinical decisions, and we share information with a prescribing or dispensing pharmacy to fill a prescription.
• Payment — to obtain payment for services. For example, we use billing information to process your payment for care or medications. ElevateMD is a cash-pay practice and does not bill insurance.
• Health care operations — to run our practice and improve care quality, such as internal quality review, training, and administrative functions.
• Business associates — to vendors who perform services for us (such as our patient-record and communications platforms) under written agreements requiring them to protect your PHI.
• As required by law — when federal, state, or local law requires the use or disclosure.
• Public health and safety — to prevent or reduce a serious threat to health or safety, or for public-health activities permitted by law.
• Health oversight, legal, and government functions — for oversight activities, judicial or administrative proceedings, law-enforcement purposes, and other government functions, as permitted by law.

Uses and disclosures that require your written authorization

Most uses and disclosures not described above will be made only with your written authorization. This includes most uses and disclosures of psychotherapy notes (if any), uses and disclosures for marketing, and any sale of PHI. If you authorize a use or disclosure, you may revoke that authorization in writing at any time, except to the extent we have already acted in reliance on it.

Substance use disorder records

ElevateMD provides longevity and wellness-oriented care and does not operate a federally assisted substance use disorder (SUD) treatment program. As a result, we do not create or maintain records that are subject to the federal confidentiality regulations for SUD patient records (42 CFR Part 2). If that ever changes, we will update this Notice and apply the additional protections those regulations require.

Your rights regarding your health information

You have the following rights with respect to your PHI:

• Right to access and obtain a copy — you may inspect and obtain a copy of your PHI in our designated record set, including an electronic copy where we maintain it electronically.
• Right to amend — you may request that we amend PHI you believe is incorrect or incomplete; we may deny the request in certain circumstances and will explain why.
• Right to an accounting of disclosures — you may request a list of certain disclosures we made of your PHI.
• Right to request restrictions — you may request limits on how we use or disclose your PHI for treatment, payment, or operations. We will consider your request but are not required to agree, except that we must agree to restrict disclosure to a health plan when you have paid for an item or service in full out of pocket and the disclosure is for payment or operations.
• Right to request confidential communications — you may ask us to communicate with you in a specific way or at a specific location.
• Right to a paper copy of this Notice — you may request a paper copy at any time, even if you agreed to receive it electronically.
• Right to be notified of a breach — you have the right to be notified following a breach of your unsecured PHI.
• Right to choose someone to act for you — if you have a legal guardian or have given someone medical power of attorney, that person may exercise your rights.

How to exercise your rights

To exercise any of these rights, contact us at [email protected] or (786) 574-2428, or write to us at the address below. We may ask you to make certain requests in writing and to verify your identity before we act.

How to file a complaint

If you believe your privacy rights have been violated, you may file a complaint with us at [email protected] or by writing to us at the address below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR), by mail to 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or online at www.hhs.gov/ocr/privacy/hipaa/complaints.

We will not retaliate against you for filing a complaint.

Privacy Officer, contact, and effective date

You may contact our Privacy Officer with any question about this Notice or about how we handle your PHI by emailing [email protected] with the subject line “Privacy Officer,” or by writing to us at the address below.

RegenHairSolutions LLC dba ElevateMD · Attn: Privacy Officer · 8051 N. Tamiami Trail, Suite E6, Sarasota, FL 34243 · [email protected] · (786) 574-2428.

This Notice is effective as of the date shown above. If we revise it, the updated Notice will be posted on our website with a new effective date.