Our Commitment to Your Privacy
Pulse Whole Health I, P.C., doing business as Pulse Whole Health (“we,” “our,” or “us”), is committed to protecting the privacy of your Protected Health Information (“PHI”). This Notice of Privacy Practices (“Notice”) describes how we may use and disclose your PHI, and how you can access this information.
We are required by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”), and other applicable federal and state laws to:
- Maintain the privacy and security of your PHI
- Provide you with this Notice of our legal duties and privacy practices with respect to your PHI
- Follow the terms of this Notice currently in effect
- Notify you if a breach occurs that may have compromised the privacy or security of your PHI
How We May Use and Disclose Your Protected Health Information
The following categories describe the ways we may use and disclose your PHI without your written authorization. Not every use or disclosure will be listed; however, all permitted uses and disclosures fall within one of the categories below.
1. Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with other healthcare providers involved in your care, such as your primary care physician, specialists, laboratories (e.g., RUPA Health, LabCorp, Quest, HNL), pharmacies, and compounding pharmacies. For example, if we order laboratory testing, we will share necessary information with the laboratory.
2. Payment
Pulse Whole Health is a cash-pay practice and does not bill health insurance for our services. However, we may use and disclose your PHI in connection with payment for services, including sending invoices, processing payments through our secure payment platform, and providing superbills you may submit to your insurance for reimbursement of out-of-network services.
3. Healthcare Operations
We may use and disclose your PHI for operations necessary to run our practice, including quality assessment and improvement, provider training and evaluation, licensing and credentialing, business planning, customer service, and legal and regulatory compliance.
4. Business Associates
We share PHI with third-party Business Associates who perform services on our behalf, under signed Business Associate Agreements requiring them to protect your information. Our Business Associates include:
- Practice Better (electronic health record and patient portal)
- Spruce Health (secure patient communication)
- Fullscript (supplement dispensary and recommendations)
- RUPA Health (laboratory testing platform)
- Cloud storage and email providers that have executed Business Associate Agreements
- Billing and accounting service providers
5. Appointment Reminders and Health-Related Information
We may contact you to remind you about appointments, follow-up care, or health-related information relevant to your care. We may contact you by phone, text message, email, or through our secure patient portal.
6. As Required by Law
We may use and disclose your PHI when required by federal, state, or local law, including reporting of certain communicable diseases, child abuse or neglect, elder abuse, and responding to court orders, subpoenas, or other legal processes.
7. Public Health Activities
We may disclose your PHI for public health activities, such as reporting births, deaths, communicable diseases, adverse drug events, or product recalls.
8. Health Oversight Activities
We may disclose your PHI to health oversight agencies for activities including audits, investigations, inspections, and licensure.
9. Serious Threat to Health or Safety
We may disclose your PHI to prevent or lessen a serious and imminent threat to your health or safety, or to the health or safety of others.
10. Workers' Compensation
We may disclose your PHI as authorized by and to the extent necessary to comply with workers’ compensation and similar laws.
11. Law Enforcement
We may disclose your PHI to law enforcement officials for purposes such as responding to a court order, subpoena, or warrant; identifying or locating a suspect, fugitive, or missing person; or reporting certain crimes.
12. Coroners, Medical Examiners, and Funeral Directors
We may disclose your PHI to coroners, medical examiners, and funeral directors as necessary for them to carry out their duties.
Uses and Disclosures Requiring Your Written Authorization
The following uses and disclosures require your specific written authorization. You may revoke your authorization at any time in writing.
- Marketing: Most uses and disclosures for marketing purposes
- Sale of PHI: Any sale of your PHI
- Psychotherapy Notes: Most uses and disclosures of psychotherapy notes (not applicable to our current services)
- Other Uses: Any other uses and disclosures not described in this Notice
Special Categories of Information
Certain categories of PHI receive additional legal protection. These include information related to HIV/AIDS, mental health, substance abuse treatment, genetic information, and reproductive health. We follow both federal and Pennsylvania law when handling these categories, which typically require additional consent for disclosure.
Your Rights Regarding Your Protected Health Information
1. Right to Access and Copy
You have the right to inspect and obtain a copy of your PHI in our designated record set. Requests must be made in writing. We may charge a reasonable fee for copies. We will respond to your request within 30 days (or 60 days if the records are stored off-site).
2. Right to Request Amendment
You have the right to request that we amend PHI you believe is inaccurate or incomplete. Requests must be made in writing and include a reason. We may deny your request in certain circumstances but will provide a written explanation.
3. Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except in limited circumstances (such as when you pay in full for a service and request that we not disclose the PHI to your health plan).
4. Right to Confidential Communications
You have the right to request that we communicate with you in a specific way or at a specific location (for example, only at a certain phone number or by email). We will accommodate reasonable requests.
5. Right to an Accounting of Disclosures
You have the right to receive an accounting of certain disclosures we have made of your PHI (excluding disclosures for treatment, payment, and healthcare operations). Requests may cover up to six years prior to the request date.
6. Right to Breach Notification
You have the right to be notified if a breach occurs that may have compromised the privacy or security of your unsecured PHI.
7. Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. Request a paper copy at any time by contacting our office.
How to Exercise Your Rights
To exercise any of the rights described above, submit a written request to:
Pulse Whole Health I, P.C.
Attn: Privacy Officer
523 West Lafayette Street
Easton, PA 18042
Email: contact@pulsewholehealth.com
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. There will be no retaliation for filing a complaint.
To File a Complaint with Us
Submit a written complaint to our Privacy Officer at the address above, or email us at contact@pulsewholehealth.com.
To File a Complaint with HHS
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Changes to This Notice
We reserve the right to change this Notice at any time and to apply the revised Notice to PHI we already have about you as well as any PHI we receive in the future. We will post the current Notice in our office and on our website with the effective date. The Notice will contain the effective date on the first page.
Contact
For questions about this Notice or our privacy practices, contact our Privacy Officer:
Allyson L. Norton, PA-C — Privacy Officer
Pulse Whole Health I, P.C.
523 West Lafayette Street
Easton, PA 18042
Email: contact@pulsewholehealth.com
