Notice of Privacy Practices
Our duties
We are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you following a breach of your unsecured PHI.
How we may use and disclose your PHI without your authorization
- Treatment. To provide, coordinate, and manage your care, including sharing your prescription with the dispensing pharmacy and communicating with you about your treatment.
- Payment. To bill and collect payment for services, including processing your card through our payment processor.
- Health‑care operations. Quality review, training, licensing, compliance, and business management.
- Appointment reminders and treatment alternatives. We may contact you about check‑ins, refills, or options that may be of interest.
- As required by law, including public‑health reporting, reporting adverse drug events to FDA, health‑oversight activities, judicial and administrative proceedings, law enforcement, to avert a serious threat to health or safety, and as otherwise permitted by 45 CFR Part 164.
- Business associates. Vendors that perform services for us (hosting, messaging, payment) under written agreements requiring them to protect your PHI.
Uses that require your written authorization
We will not use or disclose your PHI for marketing, sell your PHI, or share psychotherapy notes without your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
Your rights
- Access. Inspect and obtain a copy of your medical and billing records, in electronic form if you prefer, usually within 30 days. We may charge a reasonable cost‑based fee.
- Amendment. Ask us to correct information you believe is wrong or incomplete. We may deny the request in certain circumstances and will tell you why.
- Accounting of disclosures. Receive a list of certain disclosures made in the past six years.
- Restrictions. Ask us to limit how we use or share your PHI. We are not required to agree, except we must agree not to share information with your health plan about services you paid for in full out of pocket.
- Confidential communications. Ask us to contact you in a specific way or at a specific address.
- Paper copy. Receive a paper copy of this notice on request, even if you agreed to receive it electronically.
- Choose someone to act for you. A person with medical power of attorney or a legal guardian may exercise your rights.
Breach notification
If a breach of your unsecured PHI occurs, we will notify you in writing without unreasonable delay and no later than 60 days after discovery, describing what happened, what information was involved, what we are doing, and what you can do.
Complaints
If you believe your privacy rights have been violated, contact our Privacy Officer at support@getmenova.com, +1 (469) 248‑7520, 1030 N Center Pkwy, Kennewick, WA 99336. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints or 1‑800‑368‑1019. We will not retaliate against you for filing a complaint.
Changes to this notice
We may change this notice and make the new notice apply to PHI we already hold. The current notice is always posted at this address with its effective date.
Menova is a brand of Menova, LLC, which markets the Practice’s services and is not itself a health‑care provider. The Menova Privacy Policy covers getmenova.com; this notice covers your care.