HIPAA Notice of Privacy Practices

Effective Date: 1/22/2026

This Notice of Privacy Practices describes how medical information about you may be used and disclosed by EverPhase and how you can access this information.

Please review this Notice carefully.

Our Legal Duty

EverPhase Health is required by law to:

    •    Maintain the privacy of your protected health information (“PHI”)

    •    Provide you with this Notice explaining our legal duties and privacy practices

    •    Follow the terms of this Notice currently in effect

Protected health information includes information that identifies you and relates to your physical or mental health, medical care, or payment for healthcare services.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI without your written authorization for the following purposes:

1. Treatment

We may use and share your PHI to provide, coordinate, or manage your healthcare. This may include communication with other healthcare providers involved in your care.

2. Payment

We may use and disclose your PHI for billing and payment purposes, including eligibility verification, billing services, and payment processing.

3. Healthcare Operations

We may use your PHI for healthcare operations such as:

    •    Quality assessment and improvement

    •    Care coordination

    •    Licensing and credentialing

    •    Business management and administrative activities

Other Permitted Uses and Disclosures

We may also disclose your PHI:

    •    When required by federal or state law

    •    For public health activities

    •    For health oversight activities

    •    For law enforcement purposes as required by law

    •    To avert a serious threat to health or safety

    •    For workers’ compensation or similar programs

Uses and Disclosures Requiring Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice.

You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Telehealth & Electronic Communications

EverPhase Health provides services via telehealth and electronic platforms.

    •    We use secure systems to communicate and store medical information.

    •    You acknowledge that electronic communications carry some risk, despite safeguards.

    •    Do not send medical information through standard email or website contact forms.

    •    All medical communication should occur through the secure patient portal.

Your Rights Regarding Your Health Information

You have the right to:

Access

Request to inspect or obtain a copy of your medical records.

Amend

Request corrections to your medical records if you believe information is incorrect or incomplete.

Accounting of Disclosures

Request a list of certain disclosures of your PHI.

Request Restrictions

Ask us to limit how we use or disclose your PHI. We are not required to agree, except as required by law.

Confidential Communications

Request that we communicate with you in a specific way or at a specific location.

Paper Copy

Request a paper copy of this Notice, even if you have received it electronically.

Breach Notification

You will be notified as required by law if a breach of your unsecured protected health information occurs.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

EverPhase Health

Email: [insert compliance or business email]

Or with the U.S. Department of Health and Human Services:

    •    www.hhs.gov/ocr

    •    1-800-368-1019

You will not be retaliated against for filing a complaint.

Changes to This Notice

We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. Updated Notices will be posted on our website and available upon request.

Contact Information

If you have questions about this Notice or your privacy rights, contact:

EverPhase Health

Email: everphasehealth@gmail.com

Website: https://www.everphasehealth.com