Notice of Privacy Practices

Our Commitment

Prime MD Plus and Divya Javvaji, M.D. (“we,” “us,” or “our”) are committed to protecting the privacy of your Protected Health Information (“PHI”). We are required by law to maintain the privacy of your PHI, provide you this Notice of our legal duties and privacy practices, notify you following a breach of unsecured PHI, and follow the terms of the Notice currently in effect.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI, without your written authorization, for the following purposes:

• Treatment: To provide, coordinate, or manage your health care, including sharing information with other providers involved in your care.
• Payment: To bill and obtain payment from you, insurers, or other payers, including verifying coverage and eligibility.
• Health Care Operations: For quality assessment, staff review, business management, and other operations of our practice.
• Appointment Reminders & Communications: To contact you by phone, mail, email, or text (SMS) with reminders, results notifications, and information about treatment alternatives or health-related services. See the section on text messaging below.
• As Required by Law: To comply with federal, state, or local law, and for public health, safety, oversight, judicial, and law-enforcement purposes as permitted by HIPAA.
• Other Permitted Purposes: As permitted by HIPAA, we may also use or disclose PHI to family members or friends involved in your care (with your agreement or, when appropriate, in your best interest), to business associates who perform services for us under written agreements, for research under approved protocols, to coroners, medical examiners, and funeral directors, for organ and tissue donation, for workers’ compensation, and for certain military, veterans, and national-security purposes.

Text (SMS) Messaging

If you provide your mobile number and opt in, we may send appointment reminders, confirmations, review requests, and other care- related messages by text. Standard SMS is not encrypted, so we limit texts to the minimum necessary information. Message frequency varies and message and data rates may apply. You may reply STOP to opt out at any time; opting out will not affect your care. Your mobile opt-in and consent data will not be shared with third parties for marketing purposes.

Uses and Disclosures Requiring Your Written Authorization

Other uses and disclosures — including most uses of psychotherapy notes, uses for marketing, and the sale of PHI — will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

Special Protections for Substance Use Disorder and Other Sensitive Information

Certain information — such as substance use disorder treatment records (42 CFR Part 2), HIV/AIDS information, and mental health information — may receive additional protection under federal and Texas law, and may require your specific consent or authorization before disclosure. Substance use disorder treatment records protected by 42 CFR Part 2 will not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written consent or a court order.

Texas Notice Regarding Electronic Disclosure of Health Information

Texas law requires us to notify you that your PHI may be subject to electronic disclosure. Under the Texas Medical Records Privacy Act, we will not electronically disclose your PHI without your separate authorization, except for disclosures made for treatment, payment, or health care operations, or as otherwise permitted or required by law.

Your Rights Regarding Your Health Information

• Request restrictions on certain uses and disclosures (we will accommodate a request to restrict disclosure to a health plan for services you paid for in full out of pocket);
• Request to receive communications by alternative means or at an alternative location (for example, a specific phone number);
• Inspect and obtain a copy of your PHI, including an electronic copy of electronic records;
• Request an amendment to your PHI;
• Receive an accounting of certain disclosures;
• Receive a paper copy of this Notice, even if you agreed to receive it electronically; and
• Be notified in the event of a breach of your unsecured PHI.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as information we receive in the future. The current Notice will be posted in our office and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our office or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact

Nadelya Kinnon, Practice Manager (Privacy Officer), Prime MD Plus — Divya Javvaji, M.D., 452 TX-121, Suite 130, Coppell, TX 75019. Phone: 972-393-1699. Email: staff@primemdplus.com.