This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
My commitment
Lighthouse EverLucent Health is required by law to maintain the privacy of your protected health information ("PHI"), provide you with this Notice of my legal duties and privacy practices, follow the terms of the Notice currently in effect, and notify you in the event of a breach of unsecured PHI.
How I may use and disclose your PHI
- Treatment — to provide, coordinate, or manage your health care, including consultations with pharmacies, labs, or other providers involved in your care.
- Payment — to bill for visits and memberships and to confirm coverage when applicable (I do not bill insurance, but may provide a superbill on request).
- Health care operations — for quality improvement, training, and administrative functions.
- Business associates — vendors I contract with (EHR, scheduling, telehealth platform, payment processor) that handle PHI under written HIPAA Business Associate Agreements.
- Required by law — public health activities, reporting abuse or neglect, judicial orders, law enforcement requests, and other disclosures required by federal, state, or local law.
Uses requiring your authorization
Most uses and disclosures of psychotherapy notes, uses for marketing, and sales of PHI require your written authorization. You may revoke an authorization at any time in writing.
Your rights
- Access — inspect and obtain a copy of your medical record.
- Amend — request that I correct information you believe is inaccurate or incomplete.
- Accounting of disclosures — request a list of certain disclosures I have made of your PHI.
- Restrict — request restrictions on certain uses and disclosures. I will accommodate reasonable requests but are not required to agree to all restrictions.
- Confidential communications — request that I communicate with you by alternative means or locations.
- Paper copy — receive a paper copy of this Notice on request, even if you have agreed to receive it electronically.
- Complaints — file a complaint with me or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.
Telehealth, messaging & email
Video visits and your clinical chart are handled through Optimantra, my HIPAA-compliant EMR and telehealth platform, under a signed Business Associate Agreement (BAA). Secure patient messaging is conducted through Spruce Health, also under a BAA. Email from my practice is sent through Paubox, which provides HIPAA-compliant encrypted email by default. Standard SMS is not fully secure; please use Spruce or Optimantra for anything containing PHI.
Changes to this Notice
I may change this Notice and the changes will apply to all PHI I maintain. The current Notice will be posted on my website with the effective date.
Contact / Privacy Officer
To exercise any of these rights or to file a complaint, contact my Privacy Officer:
Mallory Jones, MSN, APRN, FNP-C, CWHS
hello@lighthouseeverlucenthealth.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201, or at hhs.gov/ocr/complaints.