1. How We May Use and Disclose Your Health Information

We may use or disclose your PHI without your written authorization for the following purposes:

A. Treatment

We may use and share your information with clinicians, peer support specialists, or other providers involved in your care.
For example, we may discuss your progress and treatment needs with another treating provider.

B. Payment

We may use your information to obtain payment from insurance companies or other payors.
For example, we may provide necessary information to your health plan for reimbursement.

C. Healthcare Operations

We may use your information to run our program, improve services, conduct quality assessments, supervise staff,
and perform administrative activities related to our services and operations.

2. Other Uses and Disclosures Allowed Without Authorization

We may also use or disclose PHI in the following situations without your written authorization, as permitted or required by law:

• When required by law
• Public health reporting, such as reporting certain diseases
• Mandatory reporting of abuse, neglect, or exploitation, including of children, elders, or vulnerable adults
• To prevent or lessen a serious threat to your health or safety or that of others, when consistent with applicable laws
• Judicial or administrative proceedings, such as in response to a court order or lawful subpoena
• Health oversight activities, such as audits, inspections, or investigations
• Coroners, medical examiners, or funeral directors, as necessary for them to carry out their duties
• Specialized government functions, such as military, national security, or law enforcement requests when legally permitted
• Workers’ compensation claims, as authorized by workers’ compensation laws

3. Uses and Disclosures Requiring Your Written Authorization

In all other situations not described in this Notice, we will ask for your written authorization before using or disclosing your PHI.
This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes
• Uses and disclosures of PHI for marketing purposes
• Any sale of your PHI
• Other uses and disclosures not otherwise permitted or required by law

If you provide us with an authorization, you may revoke that authorization at any time by submitting a written request.
Revocation will not affect any uses or disclosures already made in reliance on your authorization.

4. Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI, subject to certain limitations under the law:

A. Right to Access Your Records

You have the right to request to inspect or obtain a copy of your PHI that we maintain, typically in your clinical and billing records.
We will respond to your request within the timeframes required by HIPAA, generally within 30 days.

B. Right to Amend

If you believe that your PHI is incorrect or incomplete, you may request that we amend it.
We may deny your request in certain circumstances, but if we deny it, we will provide a written explanation.

C. Right to Request Restrictions

You may request restrictions on certain uses and disclosures of your PHI.
We are not required to agree to all requested restrictions; however, we must agree to a restriction on disclosure to a health plan
if the disclosure is for payment or healthcare operations (not treatment) and you have paid in full out-of-pocket for the service.

D. Right to Confidential Communications

You may request that we communicate with you about your PHI in a specific way (for example, at a certain phone number or address,
or via email when appropriate). We will accommodate reasonable requests.

E. Right to an Accounting of Disclosures

You have the right to request a list (“accounting”) of certain disclosures we have made of your PHI in the past six (6) years,
excluding disclosures related to treatment, payment, and healthcare operations, and certain other exceptions as defined by law.

F. Right to a Paper or Electronic Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
You may also request an electronic copy.

To exercise any of these rights, please contact us using the contact information listed in Section 9 of this Notice.

5. Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Notify you following a breach of unsecured PHI that may have compromised the privacy or security of your information
• Follow the terms of the Notice currently in effect
• Not use or share your information other than as described here unless you authorize it in writing

If we need to use or disclose your PHI in a manner not described in this Notice, we will first obtain your written authorization.

6. Breach Notification

If a breach occurs involving your unsecured PHI, we will notify you without unreasonable delay and no later than 60 days after discovery of the breach,
as required by law. The notification will include, to the extent possible:

• A brief description of what happened
• The types of information involved
• Any steps you should take to protect yourself
• What we are doing to investigate, mitigate harm, and prevent future breaches

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS).
You will not be retaliated against for filing a complaint.

Complaints to Helping Hearts Recovery

Privacy Officer – Helping Hearts Recovery
Phone: 435-229-8936
Email: helpingheartsrecovery@gmail.com
Address: 1031 South Bluff Street, Saint George, UT 84770

Complaints to the U.S. Department of Health and Human Services

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775

8. Changes to This Notice

We reserve the right to change the terms of this Notice at any time.
Any changes will apply to all PHI we maintain at that time.
When we make significant changes, we will:

• Post the revised Notice on our website; and
• Make the revised Notice available upon request at our office

The revised Notice will have an updated effective date at the top of the first page.

9. Contact Information

If you have any questions about this Notice or your privacy rights, please contact:

Helping Hearts Recovery – Privacy Officer
Phone: 435-229-8936
Email: helpingheartsrecovery@gmail.com
Address: 1031 South Bluff Street, Saint George, UT 84770