HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. It applies to protected health information ("PHI") created or maintained by Rivē Lume in the course of providing care. The public marketing website does not collect PHI.

Purpose of this notice

We are required by law to maintain the privacy of your PHI, to provide you with this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

How we may use and disclose health information

We may use and disclose your PHI, without separate authorization, for the following purposes:

• Treatment — to provide, coordinate, and manage your care, including with other providers involved in your treatment.
• Payment — to obtain payment for the services we provide, where applicable.
• Health care operations — for activities necessary to run the practice, such as quality assessment and administrative functions.
• As required by law — when federal, state, or local law requires it, including certain public-health and safety disclosures.

Uses requiring your authorization

Most uses and disclosures not described above — including most uses for marketing, any sale of PHI, and disclosure of psychotherapy notes — require your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

Your rights

With respect to your PHI, you have the right to:

• Inspect and obtain a copy of your records
• Request a correction of information you believe is inaccurate or incomplete
• Request confidential communications by an alternative means or at an alternative location
• Request restrictions on certain uses and disclosures
• Receive an accounting of certain disclosures
• Obtain a paper copy of this notice on request
• Be notified in the event of a breach of your unsecured PHI

Our responsibilities

We are required to protect the privacy and security of your PHI, to notify you promptly if a breach occurs that may have compromised it, and to follow the duties and privacy practices described in this notice. We reserve the right to change this notice, and changes will apply to information we already hold; a current copy will be made available on request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with the practice using the contact below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

Contact

To exercise any of your rights or ask questions about this notice, contact our privacy contact at enquiries@rivelume.com.