Notice of Privacy Practices

This notice applies to the health information held about you in Clinical Pathweaver by the massage therapy practice that treats you. Your practice decides what goes in your record and is responsible for it; we hold and protect that information on their behalf, under contract.

How we handle information as a company — including what our mobile app collects and which service providers we use — is set out separately in our Privacy Policy.

1. How your health information may be used and disclosed

Without your written authorization

Your practice may use and disclose your health information to:

• Treat you. To provide, coordinate and manage your care — for example, sharing your treatment notes with another provider involved in your care.
• Get paid. To bill and collect payment for your care, including submitting claims to your insurer and confirming coverage.
• Run the practice. For its own administration — scheduling, quality review, training, licensing, audits and business management.

Other permitted or required disclosures

The law also permits or requires disclosure without your authorization in specific situations, including: when required by law; for public health activities; to report suspected abuse, neglect or domestic violence; for health oversight activities; in response to a court order, subpoena or other lawful process; for law enforcement purposes; to coroners, medical examiners and funeral directors; for organ donation; for research approved under the applicable rules; to avert a serious threat to health or safety; for specialised government functions including military and national security; and for workers' compensation claims.

Your practice may also contact you about appointments and treatment alternatives. You control whether those reminders reach you by email, text message or push notification, separately for each practice, in your notification settings.

Only with your written authorization

Your written authorization is required before your health information is used or disclosed for marketing, before any sale of your health information, and for psychotherapy notes where any are held. Most other uses and disclosures not described in this notice also require your authorization. You may revoke an authorization in writing at any time, except to the extent it has already been acted on.

2. Your rights

You have the right to:

• Inspect and get a copy of your record. Your appointments, visit history, payments and profile are in the portal and the app, and you can download a complete copy of your record from your profile. You may also ask your practice directly, including for a paper copy.
• Ask us to correct your record if you believe it is wrong or incomplete. You can update your own contact details in the portal; for anything in your treatment record, ask your practice. Your practice may deny the request in certain cases and will tell you why in writing.
• Get a list of disclosures. You may request an accounting of certain disclosures of your health information. Every access to your health information is recorded, including who, when and why.
• Ask for a restriction on how your information is used or disclosed for treatment, payment or practice operations. Your practice is not required to agree, except that it must agree to withhold information from your health plan about care you paid for in full yourself.
• Ask to be contacted a different way — a different address or phone number, for example. Reasonable requests will be accommodated.
• Get a paper copy of this notice, even if you agreed to receive it electronically.
• Be told if your information is breached. You will be notified if a breach compromises the privacy or security of your health information.
• Choose someone to act for you. A person with legal authority to make health care decisions for you may exercise these rights on your behalf.

To exercise any of these rights, contact your practice, or contact us and we will put you in touch with them.

3. Our duties

• We are required by law to keep your health information private and secure.
• We are required to give you notice of our legal duties and privacy practices — this notice.
• We are required to follow the terms of the notice currently in effect.
• We are required to notify you if a breach compromises your information.
• How long each kind of information is kept is published on our retention schedule, generated from the rules the system applies.

We may change this notice. A change applies to information we already hold as well as to information we receive afterwards. The current notice is always published on this page with its effective date, and where a change is significant we will tell you in the app or by email.

4. How to complain

If you believe your privacy rights have been violated, you may complain to your practice, or contact us.

You may also complain to the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/hipaa/filing-a-complaint, by post to 200 Independence Avenue SW, Washington, D.C. 20201, or by calling 1-877-696-6775.

You will not be retaliated against for making a complaint.

5. Contact

Questions about this notice, or about how your health information is handled, should go to your practice's privacy contact. You can also contact us and we will direct you.