Notice of Privacy Practices

Florida Myo LLC ("we," "us," or "our") is committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information ("PHI") to carry out treatment, payment, and health care operations, and for other purposes permitted or required by law. It also describes your rights regarding your PHI.

We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health (HITECH) Act, to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of the Notice currently in effect.

1. How We May Use and Disclose Your Health Information

The following categories describe the ways we may use and disclose your PHI. Not every use or disclosure in a category will be listed, but all of the ways we are permitted to use and disclose information will fall within one of the categories.

2. Uses and Disclosures Required or Permitted by Law (Without Your Authorization)

We may use or disclose your PHI without your written authorization in the following circumstances:

• As required by law — when required by federal, state, or local law.
• Public health activities — to report disease, injury, or vital statistics to public health authorities.
• Health oversight activities — to government agencies for audits, investigations, inspections, and licensure.
• Judicial and administrative proceedings — in response to a court order, subpoena, or other lawful process.
• Law enforcement — to law enforcement officials for limited purposes permitted by law.
• Coroners, medical examiners, and funeral directors — as necessary to carry out their duties.
• Organ and tissue donation — to organizations involved in procurement, banking, or transplantation.
• Research — under certain conditions with appropriate protections for your privacy.
• Serious threats to health or safety — to prevent or lessen a serious and imminent threat.
• Workers compensation — as authorized by and to the extent necessary to comply with workers compensation laws.
• Military and veterans activities — if you are a member of the armed forces, as required by military command authorities.
• National security and intelligence — for authorized national security activities.

3. Uses and Disclosures Requiring Your Written Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes.
• Uses and disclosures of PHI for marketing purposes.
• Disclosures that constitute a sale of PHI.
• Any other use or disclosure not described in this Notice.

You may revoke any authorization you have given us at any time, in writing, except to the extent that we have already taken action in reliance on your authorization.

4. Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to us using the contact information at the end of this Notice.

5. Our Duties

• We are required by law to maintain the privacy and security of your PHI.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

6. Electronic Health Records and Health Information Exchanges

We use electronic health records and may participate in health information exchanges (HIEs) to facilitate the sharing of your health information with other health care providers involved in your care. You have the right to opt out of having your information shared through an HIE. Please contact us if you wish to exercise this right.

7. Changes to This Notice

We reserve the right to change this Notice at any time. We reserve the right to make the revised or changed Notice effective for PHI we already have about you as well as any information we receive in the future. We will post a copy of the current Notice on our website. The Notice will contain the effective date on the first page.

8. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS). To file a complaint with HHS, visit www.hhs.gov/hipaa/filing-a-complaint.

We will not retaliate against you for filing a complaint. All complaints must be submitted in writing.

9. Practice Management Software

We use SimplePractice, a HIPAA-compliant practice management platform, to manage scheduling, billing, and clinical records. SimplePractice acts as a Business Associate under HIPAA and is bound by a Business Associate Agreement to protect your PHI. For more information about SimplePractice's privacy practices, please visit https://www.simplepractice.com/privacy/.