Notice of Privacy Practices

Who this notice covers

This notice applies to the clinical services of Privée Miami LLC, doing business as Casa Privée, at 1395 Brickell Avenue, Suite 200, Miami, Florida 33131, including its authorized Florida services delivered off-site or remotely. In this notice, "we," "us," and "our" mean this provider and the clinicians, contractors, trainees, and other authorized personnel acting on its behalf in handling your health information.

This notice covers identifiable information about your health, treatment, and payment for care, whether spoken, written, photographed, or stored electronically. Independently operating providers may have their own notices. A shared clinic name, location, or management team does not by itself authorize unrestricted sharing of records between organizations.

Our responsibilities

We are required by law to protect the privacy of your protected health information, give you this notice of our legal duties and privacy practices, and follow the notice currently in effect. We maintain appropriate safeguards and limit access and disclosures as the law requires. We will notify you without unreasonable delay, and within the applicable legal deadline, if a breach of unsecured protected health information requires notice to you.

Other uses and disclosures not described in this notice will be made only with your written authorization. When another law provides greater confidentiality protection, we follow that law.

Your privacy contact

For questions, requests concerning your records, or privacy complaints, contact:

Please tell us if you need help understanding this notice or submitting a request. You may ask for a paper copy at any time, even if you previously accepted an electronic copy.

Your rights concerning your health information

See or obtain your records

You may ask to inspect or receive an electronic or paper copy of the medical, billing, and other records used to make decisions about you. Send your request to the Privacy Officer. We generally act within 30 days; if a lawful extension is necessary, we will explain the reason and completion date in writing. We provide the requested format if readily producible, or agree on another format with you. Any copying fee will be reasonable, cost based, and allowed by law. Unpaid treatment bills will not prevent access. Some limited exclusions apply, including separately maintained psychotherapy notes. If access is denied, we will explain the reason and any right to review.

Request a correction

If you believe information in your records is inaccurate or incomplete, submit a written amendment request explaining why. We generally respond within 60 days, subject to a lawful extension with written notice. If we deny the request, we will explain why and how you may submit a statement of disagreement for the record.

Choose how we contact you

You may request reasonable confidential communications, such as calling a particular number or mailing information to another address. Tell the Privacy Officer your preferred method and location. We will accommodate reasonable requests without requiring you to explain the reason.

Request limits on use or disclosure

You may ask us to restrict information used or shared for treatment, payment, or health care operations, or shared with people involved in your care. We generally do not have to agree, but will follow restrictions we accept, subject to legally permitted exceptions such as emergency treatment. If you pay in full out of pocket for a particular item or service, we must honor your request not to disclose information relating solely to that item or service to your health plan for payment or health care operations, unless disclosure is required by law. Tell us before we submit a claim.

Receive an accounting of disclosures

You may request a list of certain disclosures made during the preceding six years, identifying the recipient, date, information disclosed, and purpose. HIPAA generally excludes disclosures for treatment, payment, and operations, disclosures to you or made with your authorization, and certain other disclosures. One accounting in a 12-month period is free. We will tell you in advance about any permitted charge for another accounting and allow you to change or withdraw the request.

Use an authorized representative

A person legally authorized to act for you may exercise relevant rights on your behalf. We verify that authority and follow applicable rules for minors and for situations involving abuse, neglect, or endangerment. Being a relative or paying for care does not automatically provide access to all records.

Complain without retaliation

You may complain to our Privacy Officer or to the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/hipaa/filing-a-complaint/index.html, by calling 1-877-696-6775, or by writing to 200 Independence Avenue SW, Washington, DC 20201. We will not retaliate against you for making a complaint.

How we may use and share your information

The permissions below apply only when all legal conditions are met. The additional protections described in the next section may require consent or limit disclosure even when HIPAA would otherwise permit it.

Treatment

We may use your information to evaluate, plan, provide, and coordinate care, including with laboratories, pharmacies, and other treating professionals. For example, we may share your medication list with a physician involved in your treatment to avoid an interaction. We may contact you about appointments, treatment alternatives, and relevant health services.

Payment

We may use information to prepare bills, collect payment, and verify coverage or obtain payment from an insurer where applicable. For example, a claim may identify the treatment you received. We obtain any authorization required by Florida law or other applicable law and honor required restrictions for fully self-paid care.

Health care operations

We may use information to manage clinical services, review quality and safety, assess professional qualifications, train authorized clinical personnel, and perform necessary administrative functions. For example, an authorized quality reviewer may examine a record to assess care. Service providers such as record-system or billing vendors receive information only as legally permitted and under required confidentiality agreements.

People involved in your care and disaster relief

Where permitted, we may share relevant information with a person you identify as involved in your care or payment, or with disaster-relief organizations. We give you an opportunity to agree or object and obtain written consent where required. If you cannot express a preference, we may make a limited disclosure in your best interests only where the law permits.

Public health and safety

We may report disease, adverse reactions, product problems, or suspected abuse, neglect, or domestic violence to authorized recipients when legally permitted or required. We may disclose information to help prevent or lessen a serious and imminent threat when the applicable legal conditions are satisfied.

Oversight and legal requirements

We may provide information for lawful licensing reviews, audits, inspections, investigations, and other health oversight, and to HHS to evaluate privacy compliance. We may disclose information when required by law, for workers' compensation as authorized, or for permitted law-enforcement, military, national-security, protective-service, or correctional purposes. A request from an official does not by itself authorize disclosure.

Court and administrative proceedings

We may respond to a valid court order or other lawful process only after satisfying applicable requirements, including notice, protective measures, consent, or additional court authorization where required. The stricter rules for substance use disorder records are described below.

Donation and deceased persons

Where permitted, we may share information with organ and tissue procurement organizations, coroners, medical examiners, and funeral directors for their legally authorized functions.

Research

We may use or disclose information for research with your authorization or when a specific legal exception applies. HIPAA may permit an approved waiver, but that does not override stricter Florida requirements. Where Florida law requires permission or protection of identity, we obtain permission or use information that protects your identity.

Additional protections and your choices

Florida confidentiality protections

Florida law generally limits disclosure of medical records and discussion of your condition outside you, your legal representative, and providers involved in your care unless you give written authorization or a statutory exception applies. HIV test information has additional restrictions: a general release alone may be insufficient, and disclosure is limited to authorized recipients or specific legal exceptions. Mental health records subject to Florida's mental health confidentiality law also have special consent and disclosure rules. We apply these protections wherever they govern your records.

Substance use disorder records

Some substance use disorder records are protected by 42 CFR Part 2. When we hold such records, we apply those protections in addition to HIPAA. Part 2 programs generally need your written consent for treatment, payment, and health care operations disclosures outside applicable exceptions; you may give a single consent for future disclosures for those purposes. If we receive Part 2 records under that consent as a HIPAA-covered provider, we may redisclose them as HIPAA permits, subject to Part 2's continuing restrictions. An ordinary treatment disclosure permission does not eliminate those restrictions.

Part 2 records, and testimony describing them, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your specific written consent or a qualifying Part 2 court order issued after you or the record holder receives notice and an opportunity to be heard. A court order authorizing disclosure must also be accompanied by a subpoena or other legal mandate compelling disclosure. A subpoena alone is insufficient.

Psychotherapy notes

Most uses and disclosures of separately maintained psychotherapy notes require your specific written authorization, apart from narrow exceptions permitted by law. These notes are different from ordinary medical records of diagnoses, medications, and treatment plans.

Marketing and public use

Uses and disclosures for marketing that require authorization under HIPAA, and sales of protected health information, require your written authorization. Identifiable photographs, testimonials, recordings, or patient stories for advertising, social media, or public presentations require a separate appropriate written authorization. Receiving treatment does not itself authorize publicity.

Fundraising

If we conduct legally permitted fundraising using your information, you may opt out through the method stated in the communication or by contacting the Privacy Officer. Your choice will not affect treatment or payment.

Revoking permission

You may revoke a written authorization by writing to the Privacy Officer, except to the extent we have already relied on it and other limited exceptions allowed by law. Revocation does not undo disclosures already made.

Changes to this notice

We reserve the right to change our privacy practices and this notice as allowed by law and to apply revised practices to information we already hold and information received later. A revised notice will show its effective date and be available at our office, on our website, and upon request.