Notice of Privacy Practices

Notice of Privacy Practices (2026 Compliant Version)

This notice describes how your medical information may be used and disclosed, and how you can access this information. Please review it carefully.

Our Commitment to Your Privacy

At our office, we are committed to providing care with respect, dignity, and confidentiality. Protecting your personal and health information is an essential part of our relationship with you.

We are required by law to:

Maintain the privacy of your protected health information (PHI)
Provide you with this Notice of our legal duties and privacy practices
Abide by the terms of this Notice currently in effect

This notice will remain in effect until it is revised or replaced due to changes in law or practice policy.

How We Collect and Use Your Information

We collect personal and health information in the following ways:

• Information you provide directly to us

• Information received from other healthcare providers

• Information received from third-party payers

This information is used for purposes of:

• Treatment – Coordinating and providing your care

• Payment – Processing your payments or generating superbills for insurance reimbursement (we do not bill insurance directly)

• Healthcare Operations – Internal administrative

Your Health Information May Be Used or Disclosed For:

• Treatment purposes (e.g., referrals, coordination with other providers)

• Payment (e.g., generating superbills upon request)

• Operations, such as administrative

• When required by law (e.g., subpoenas, public health reporting)

We may also disclose information to prevent a serious threat to health or safety when permitted by law.

Substance Use Disorder (SUD) Information

If your records include information related to substance use disorder (SUD) diagnosis, treatment, or referral, that information may be protected under federal law (42 CFR Part 2) in addition to HIPAA.

Such information:

May not be disclosed without your written authorization, except as permitted by law
Is subject to strict limitations on redisclosure
Cannot be further disclosed by recipients unless permitted by law

If applicable, we will comply with these additional federal protections.

Marketing and Communications

We do not use your information for marketing purposes without your written authorization.

We may send appointment reminders or practice updates via phone, text, or email. By providing your contact information, you consent to receive these communications. You may request alternative communication methods in writing.

Your Rights as a Patient

You have the right to:

Access, review, or request copies of your health records (with a written request)
Request an electronic copy of your records when available
Request a list of disclosures made about your health information
Request restrictions on how your information is used or disclosed
Request confidential communications (e.g., contact you at a specific number)
Request an amendment to your records if you believe they are incorrect
Receive a paper copy of this Notice at any time

We may deny certain requests as permitted by law.

Breach Notification

If a breach occurs that compromises the privacy or security of your protected health information, you will be notified as required by law.

Questions or Concerns

If you have questions about this Notice or believe your privacy rights have been violated, you may contact:
Root Acupuncture
Sandy Root
Phone: (305) 777-2334
Email: sandy@root-acupuncture.com

You may also file a complaint with the U.S. Department of Health and Human Services:

Office for Civil Rights (OCR)
https://www.hhs.gov/ocr/privacy/hipaa/complaints/
1-800-368-1019