Notice of Privacy Practices
Your Information. Your Rights. Our Responsibilities.
Effective Date: January 1, 2025
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Finesse Health PLLC ("Finesse Health") is required by law to maintain the privacy of your protected health information (PHI), provide you with this Notice of our legal duties and privacy practices, and follow the terms of this Notice currently in effect.
Your Rights
When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
📋 Get a Copy of Your Health Records
- You can ask to see or get a copy of your medical records and other health information
- We will provide a copy or summary within 30 days of your request
- We may charge a reasonable fee for copying, mailing, or other supplies
- Access your records through our RXNT patient portal at any time
To request: Submit a written request to our Privacy Officer.
✏️ Request Corrections to Your Records
- You can ask us to correct health information that you believe is incorrect or incomplete
- We may deny your request in certain circumstances, but we will explain why in writing
To request: Submit a written request explaining what you want changed and why.
🔒 Request Confidential Communications
- You can ask us to contact you in a specific way (for example, home or office phone)
- You can ask us to send mail to a different address
- We will accommodate all reasonable requests
🚫 Request Restrictions on Uses and Disclosures
- You can ask us not to use or share certain health information for treatment, payment, or operations
- You can ask us not to share information with family members or others involved in your care
- We are not required to agree to your request, except in limited circumstances
- If you pay out-of-pocket in full, you can ask us not to share information with your health insurer
📄 Get a List of Disclosures
- You can request a list (accounting) of times we shared your health information in the past six years
- This includes who we shared it with and why
- The list will not include disclosures for treatment, payment, or operations, or disclosures you authorized
- We will provide one accounting per year for free; additional requests may incur a fee
📑 Get a Copy of This Notice
- You can ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically
- We will provide you with a copy promptly
👤 Choose Someone to Act for You
- If you have given someone medical power of attorney or they are your legal guardian, they can exercise your rights
- We will verify their authority before taking action
📢 File a Complaint
- You can file a complaint if you believe your privacy rights have been violated
- File with us using the contact information below
- File with the U.S. Department of Health and Human Services Office for Civil Rights
- We will not retaliate against you for filing a complaint
Our Uses and Disclosures
We may use and share your health information in the following ways:
Treatment
We can use your health information and share it with other professionals who are treating you.
Example: A provider treating you for a related condition asks us about your overall health status. We share information with laboratories for testing.
Payment
We can use and share your health information to bill and get payment from health plans or other entities.
Example: We provide information to your HSA administrator so they can process your claim.
Healthcare Operations
We can use and share your health information to run our practice, improve your care, and contact you when necessary.
Example: We use health information to evaluate our services and improve our practice.
With Your Authorization
For other uses of your health information, we will ask for your written authorization. You may revoke your authorization in writing at any time.
Special Situations
We may use or share your information in the following special situations:
Public Health and Safety
- Prevent disease
- Report births and deaths
- Report child abuse or neglect
- Report reactions to medications or medical device problems
- Notify someone who may have been exposed to a disease
Health Oversight Activities
We can share health information with health oversight agencies for activities authorized by law, including audits, investigations, inspections, and licensure.
Law Enforcement
We can share health information with law enforcement officials when required by law or in response to a valid subpoena or court order.
Lawsuits and Disputes
We can share health information in response to a court or administrative order, or in response to a subpoena.
Research
We can use or share your information for health research with your authorization or when approved by an institutional review board.
Workers' Compensation
We can use or share health information for workers' compensation claims.
Coroners and Medical Examiners
We can share health information with coroners, medical examiners, or funeral directors when an individual dies.
Serious Threats
We can share health information if we believe it is necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Military and Veterans
If you are a member of the armed forces, we may share your information as required by military command authorities.
National Security
We may share health information with federal officials for intelligence and national security activities authorized by law.
Our Responsibilities
- We are required by law to maintain the privacy and security of your protected health information
- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information
- We must follow the duties and privacy practices described in this Notice and give you a copy of it
- We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time.
Changes to This Notice
We can change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available upon request, on our website, and we will mail a copy to you.
Telehealth Privacy
When you receive telehealth services through Doxy.me, your information is protected by:
- End-to-end encryption
- HIPAA-compliant video platform with Business Associate Agreement
- No recording or storage of video sessions by Doxy.me
- Compliance with Connecticut Public Act 21-9
Electronic Health Records
Your health information is stored in our electronic health record system (RXNT), which is:
- HIPAA-compliant with encryption at rest and in transit
- Access-controlled with role-based permissions
- Backed up securely and regularly
- Subject to regular security audits
Contact Information
To exercise any of your rights, ask questions, or file a complaint, please contact:
Privacy Officer
Finesse Health PLLC
58 Capital Drive
Wallingford, CT 06492
Phone: (203) 208-8497
Email: privacy@finesse.health
To File a Complaint with HHS
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr
Acknowledgment of Receipt
By using Finesse Health services, you acknowledge that you have received this Notice of Privacy Practices. A copy of this Notice is available on our website and upon request.