HealthSpark

"For example, we may communicate with individuals involved in your care or payment for that care, such as family or guardians and send appointment reminders. All other uses and disclosures, not previously described, may only be done with your written authorization. We will also obtain your authorization before we: Use or disclose your health information for marketing purposes;"

" This Notice of Privacy Practices ("Notice") explains how HealthSpark Inc., HealthSpark Medical Group West PC, HealthSpark Medical Group PA (including its assumed name, HealthSpark Medical Group PC), and their licensed clinicians and business partners (collectively, "HealthSpark," "we," "our," or "us") may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and conduct health‑care operations, as well as other uses permitted or required by law. It also describes your rights to access and control your PHI. HealthSpark operates as an organized health‑care arrangement. All covered entities and workforce members within HealthSpark agree to follow the terms of this Notice and may share PHI with one another for treatment, payment, and health‑care‑operations purposes. This Notice applies to the technology-enabled and in-person physical therapy services provided by HealthSpark."

" Privacy & Security. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy and security of your PHI. Notice. We must give you this Notice and follow the terms currently in effect. Breach Notification. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI. Changes to This Notice. We may change this Notice at any time. Revised Notices apply to all PHI we maintain and will be posted on our website and made available upon request. Where any other state law provides greater privacy protection than HIPAA, we will follow that state law."

" We sometimes rely on third-party service providers—such as secure cloud-hosting platforms, claims-clearinghouses, electronic-prescription networks, telehealth infrastructure vendors, and analytics partners—to support our treatment, payment, and health-care-operations activities. These companies, known under HIPAA as Business Associates, may receive, create, or maintain your protected health information on our behalf only after signing a Business Associate Agreement (BAA) that contractually requires them to: (a) use or disclose PHI solely as permitted by us or as required by law; (b) implement appropriate administrative, physical, and technical safeguards to protect the information; (c) report any suspected or confirmed privacy or security breach to HealthSpark without unreasonable delay; and (d) ensure that any of their subcontractors who handle PHI are bound by the same protections. We share the minimum necessary information for them to perform their duties, and we monitor their compliance as part of our ongoing privacy-and-security program. We may also use and disclose your health information to: Comply with federal, state or local laws that require disclosure. Assist in public health activities such as tracking diseases or medical devices. Inform authorities to protect victims of abuse or neglect. Comply with federal and state health oversight activities such as fraud investigations. Respond to law enforcement officials or to judicial orders, subpoenas or other processes. "

" You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights:"

" You have the right to: Get an electronic or paper copy of your medical record. Ask us to correct your record if you believe it is incomplete or inaccurate. Request confidential communications (e.g., alternative address or phone). Ask us to limit what we use or share—we may deny most requests, but we must grant a restriction on disclosures to a health plan if you pay in full out‑of‑pocket, unless disclosure is required by law. Receive a list of certain disclosures we made in the six years prior to your request. Choose a representative to act on your behalf (e.g., medical power of attorney). Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. File a complaint without retaliation if you feel we have violated your rights (see "Complaints" below). To exercise any right listed above, email contact@joinhealthspark.com or mail a signed request to the Privacy Officer at the address below."