Privacy Policy



We believe in your right to keep your health information private and sage. HIPAA, the Health Insurance Portability and Accountability Act, is a federal law that became effective on February 17, 2010. Under HIPAA, we must provide you with a copy of our Notice of Privacy Practices. We reserve the right to change our privacy practices provided law permits the changes. Before we make a significant change, this Notice will be amended to reflect the changes and we will make the new Notice available upon request. We reserve the right to make any changes in our privacy practices and the new terms of our Notice effective for all health information maintained, created, and/or received by us before the date changes were made.

We will keep your health information confidential, using it only for the following purposes: 

Treatment: While we are providing you with health care services, we may share your protected health information (PHI) including electronic protected health information (ePHI) with other health care providers, business associates and their subcontractors or individuals who are involved in your treatment, billing, administrative support, or data analysis. These business associates and subcontractors through signed contracts are required by Federal law to protect your health information. We have established “minimum necessary” or “need to know” standards that limit various staff members’ access to your health information according to their primary job functions. Everyone on our staff is required to sign a confidentiality statement.

Disclosure: We may disclose and/or share protected health information (PHI) including electronic disclosure with other health care professionals who provide treatment and/or service to you. These professionals will have a privacy and confidentiality policy like this one. Health information about you may also be disclosed to your family, friends, and/or other persons you choose to involve in your healthcare, only if you agree that we may do so. If an individual is deceased, you may disclose PHI to a family member or individual involved in care or payment prior to death. Psychotherapy notes will not be used or disclosed without your written authorization. Genetic Information Nondiscrimination Act (GINA) prohibits health plans from using or disclosing genetic written authorization. Uses and disclosures not described in this notice will be made only with your signed authorization.

Right to an Accounting of Disclosures: You have the right to request an “accounting of disclosures” of your protected information if the disclosure was made for purposes other than providing services, payment, and/or business operations. In light of the increasing use of Electronic Medical Record technology (EMR), the HITECH Act allows you the right to request a copy of your health information in electronic form if we store your information electronically. Disclosures can be made available for a period of 6 years prior to your request and for electronic health information 3 years prior to the date on which the accounting is requested. If for some reason we aren’t capable of an electronic format, a readable hardcopy will be provided. To request this list or accounting of disclosures, you must submit your request in writing to our Privacy Officer. Lists, if requested, will be $.15 for each page and the staff time charged will be $25 per hour including the time required to locate and copy your health information. Please contact our Privacy Officer for an explanation of our fee structure.

Right to Request Restriction of PHI: if you pay in full out of pocket for your treatment, you can instruct us not to share information about your treatment with your health plan, if the request is not required by law. The Omnibus Rule restricts provider’s refusal or an individual’s request not to disclose PHI.

Non-routine Disclosures: You have the right to receive a list of non-routine disclosures we have made of your health care information. You can request non-routine disclosures.

Emergencies: We may use or disclosure health information to notify or assist in the notification of a family member or anyone responsible for your care, in case of emergency involving your care call me your location, your general condition or death. if at all possible, we will provide you with an opportunity to object to this use but disclosure. Under emergency conditions or if you are incapacitated, we will use our professional judgment to disclose only that information directly relevant to your care. We will also use our professional judgment to make reasonable inferences if your best interest by allowing someone to pick up filled prescriptions, x-rays or other similar forms of health information and/or supplies unless you have advised us otherwise. 

Healthcare Operations: We will use and disclosure health information to keep our practice operable. examples of personnel who may have access to this information include, but are not limited to, our medical record staff, insurance operations, healthcare clearinghouses and individuals performing similar activities.

Required By Law: We may use or disclose your health information when we are required to do so by law, (court or administrative orders, subpoena, discovery requests or other lawful purposes). We will use and disclosure information when requested by national security, intelligence and other state and federal officials and/or if you’re an inmate or otherwise under the custody of law enforcement. 

National Security: The health information of Armed Forces personnel maybe disclosed to military authorities under certain circumstances. If the information is required for lawful intelligence, counterintelligence, or other national security activities, we may disclose it to authorize federal officials. 

Abuse or Neglect: we may disclose your health information to the appropriate authorities if we reasonably believe that you are a possible victim of abuse, neglect, or domestic violence or the possible victim of other crimes. this information will be disclosed only to the extent necessary to prevent a serious threat to your health or safety or that of others. 

Public Health Responsibilities: we will disclose your healthcare information to report problems with products, reactions to medications, product recalls, disease/infection exposure and to prevent and control disease, injury and/or disability.

Marketing Health-Related Services: we will not use your health information for marketing purposes unless we have your written authorization to do so. No authorization is required of communication is made face-to-face for promotional gifts.

Sale of PHI: we are prohibited to disclose PHI without an authorization if it constitutes remuneration (getting paid in exchange for PHI). sale of PHII does not include disclosures for public health, certain research purposes, treatment and payment, and for any other purpose permitted by the privacy rule, we’re the only we need a ration received is “A reasonable cost-based fee” to cover the cost to prepare and transmit the PHI for such purpose or a fee otherwise expressly permitted by law. Corporate transactions (ie: sale, transfer, merger, consolidation) are also excluded from the definition of “sale.” 

Appointment Reminders: we may use your health records to remind you of recommended services, treatment, or scheduled appointments.

Access: Upon written request, you have the right to inspect copies of your health information (and that of an individual for who you are a legal guardian). We will provide access to health information in a form/format requested by you. There will be some limited exceptions. If you wish to examine your health information, you will need to complete and submit an appropriate request form. You may also request access by sending us a letter to the address at the end of this notice. Once approved, an appointment can be made to review your records. Copies, if requested, will be $.15 for each page and the staff time charged will be $20 per hour including the time required to copy your health information. If you want the copies mailed to you, postage will also be charged. Access to your health information in electronic form if (readily producible) may be obtained with your request. If for some reason, we are not capable of an electronic format, a readable hard copy will be provided. If you prefer a summary or explanation of your health information, we will provide it for a fee. Please contact our privacy officer for an explanation of our fee structure. 

Amendment: You have the right to amend your healthcare information, if you feel it is inaccurate or incomplete. Your request may be in writing and must any include an explanation of why the information should be amended. Under certain circumstances, your request be denied. 

Breach Notification Requirements: It is because any acquisition, access, use or disclosure of PHI not permitted under the regulations is considered a breach. We are required to complete a risk assessment, and if necessary, inform HHS and take other steps required by law. You will be notified of the situation and any steps you should take to protect yourself against harm due to the breach.

Changes to This Notice: We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for health information we already have about you, as well as any information we receive in the future. We will make a copy of the current Notice of Privacy easily available and accessible to patients.

Complaints: If you believe your privacy rights have been violated, you may file a complaint with the GrayHawk Health (GHH). To file a complaint with GHH, contact the CEO at 267-768-4719 or in writing at the address listed below. All complaints should be submitted within 180 days of when you knew or should have known of the suspected violation.

640 Lee Rd
Suite 102
Chesterbrook PA 19087