Notice of Privacy Practices

Prosperity Medical, LLC. d/b/a Kinwell (referred to here as "Kinwell," "we," "us," or "our") is committed to protecting your privacy and the confidentiality of your health information. This Notice of Privacy Practices ("Notice") applies to Kinwell.

This Notice describes how we may use and share your health information and explains your rights regarding that information.

Protected health information ("PHI") is information regarding your past, present or future health care services and can be used to identify you. Examples of PHI we may collect through this website include information you provide when scheduling an appointment, completing an intake or health history form, or submitting insurance information. Information we may collect may not be PHI, such as information indicating that you visited the website, but did not submit information, schedule or receive services. Our use and disclosure of that information is discussed in our Privacy Policy.

As required by law, we must maintain the privacy of your health information, provide you with this Notice as to our legal duties and privacy practices, and comply with the terms of this Notice.

How We May Use and Disclose Your Health Information

We will not use or disclose your health information except as described in this Notice or as otherwise required or permitted by law. For any use or disclosure not described in this Notice, we will seek your written authorization first.

Certain categories of health information receive heightened protection under federal or applicable state law, including information related to HIV/AIDS status, genetic information, substance use disorder treatment, mental and behavioral health, and reproductive health. Where such protections apply, we will comply with these heightened protections.

We may use and disclose your health information only for the purposes listed below:

• Treatment: We may use and disclose PHI to provide you with treatment and health care services, including to facilitate and coordinate your care. This includes scheduling and obtaining intake information and transmitting it to providers, including doctors, nurses, technicians, or other personnel involved in your care, making referrals to specialists, and other agencies or entities in order to meet your medical and clinical needs. We may also contact you to provide appointment reminders or information about treatment or other health-related services that may be of interest to you.
• Payment: We may use and disclose your PHI to get paid or reimbursed for the treatment and services you receive from us. Payment activities include billing, collections, and determinations of eligibility to obtain payment from you, an insurance company, or another third party responsible for the cost of services.
• Healthcare Operations: We may use and disclose your health information for health care operations, including care management, quality assessment and improvement activities, and analytics and reporting to evaluate and improve the services we provide.

Other Uses and Disclosures Without Your Consent or Authorization

We may also use and disclose your health information without your written authorization for the following purposes:

• As Required by Law: We will disclose your health information when required to do so by federal, state, or local law.
• Individuals Involved in Your Care or Payment: Unless prohibited by law, we may disclose your health information to a family member, friend, or other person involved in your care or payment for your care, or to your authorized personal representative.
• Serious Threat to Health or Safety: We may disclose your health information when necessary in good faith to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Disaster Relief: We may disclose your health information to organizations assisting in disaster relief efforts.
• Workers' Compensation: We may disclose your health information as required by workers' compensation laws or similar programs covering work-related injuries or illnesses.
• Public Health Activities: We may disclose your health information to public health authorities authorized by law to receive such information for purposes such as disease surveillance, reporting, and control.
• Health Oversight Activities: We may disclose your health information to government agencies, such as state departments of health, for oversight activities authorized by law, including audits, investigations, and inspections.
• Research: We may disclose your health information for research purposes, subject to applicable legal requirements and institutional review protocols. Where required by law, we will obtain your written authorization first.
• Coroners, Medical Examiners and Funeral Directors: We may disclose your health information to these individuals as necessary to carry out their lawful duties following your death.
• Government and Law Enforcement: We may disclose your health information to law enforcement officials, government agencies, and authorized federal authorities as required or permitted by law. This includes disclosures in response to a valid court order, subpoena, or summons; to report criminal conduct on our premises; and for national security, intelligence, and counterintelligence activities. If you are a member of the U.S. or foreign armed forces, we may disclose your health information to military command authorities as required by law. If you are an inmate of a correctional institution, we may disclose your health information to the institution or applicable law enforcement officials to the extent authorized by law.
• Special Treatment of Alcohol and Drug Abuse Records: Health information we may receive about you from federally assisted alcohol or drug treatment programs is subject to special protection under federal law. We will not disclose this information without your authorization except where required by, and in full compliance with, federal or state law. We shall not disclose this information in civil, criminal, administrative, or legislative proceedings against you unless you provide us with written consent to do so, or unless a court orders us to do so after you are provided with a notice and an opportunity to be heard. We will disclose such information in accordance with a court order only if it is accompanied by a subpoena or other legal requirement compelling disclosure.
• Other State Laws: To the extent that you reside in a state that provides additional protections to medical information or a subset of treatment information, we will protect your information in accordance with state law.

Uses and Disclosures Requiring Your Written Authorization

We will not use or disclose your health information for any purpose not specified in this Notice, including marketing, unless we obtain your express written authorization or the authorization of your legally appointed representative. If you give us your authorization, you may revoke it at any time by providing us with a written notice stating that you wish to revoke your authorization, in which case we will no longer use or disclose your health information for the purpose you authorized, except to the extent that we have relied on your prior authorization to provide your care.

Potential for Redisclosure

We want you to be aware that when we disclose your information as described in this Notice, either with or without your authorization, it has the potential to be redisclosed by the person receiving the information, and the information is no longer subject to the protections we've described or protected by the law.

Your Rights Regarding Your Health Information

You have the following rights regarding your health information:

• Right to Inspect and Copy: You have the right to inspect or request a copy of your health information that we maintain.
• Right to Request Amendments: If you believe your health information is inaccurate or incomplete, you may request an amendment. We may deny the request if the information is accurate and complete, was not created by us, or is not part of the records you have a right to access. However, if your request is denied, we will provide you with a written denial in accordance with applicable law. If changes are made to your record, it does not mean that we will destroy or rewrite your previous records, but we will add an addendum to your current records to reflect your changes.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI made during the past six years. This does not include disclosures for treatment, payment, operations, or disclosures you authorized. To request an accounting of disclosures of your health information, you must submit your request in writing. The first request in a year is free; after that, we may charge a small fee.
• Right to Request a Restriction: You have the right to request that we limit how we use or disclose your health information for certain purposes. We are not required to grant your request, except in one circumstance: if you request that we not disclose your health information to a health plan for payment or health care operations purposes provided that the information pertains solely to an item or service for which you, or a person on your behalf, has paid for in full, and the disclosure is not otherwise required by law. If we agree to any other restriction you request, we are bound by that agreement. To request a restriction, please contact us using the contact information provided below.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your health matters by alternative means or to alternative locations, which we will accommodate if the request is reasonable. To make such a request, you must submit your request in writing; your request should specify where and/or how we should contact you.
• Right to Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice upon request, even if you have previously agreed to receive this Notice electronically. You may obtain a paper copy of this Notice by using the contact information provided below. You may also print out a copy of this Notice by visiting our website at www.kinwellaid.com/npp.
• Right to be Notified of a Breach: We will notify you of any breach of your unsecured protected health information, as required by law.

How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us by writing to our Privacy Official using the contact information provided below. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. We will not penalize or retaliate against you for filing a complaint.

Contact Information

For questions about this Notice or to exercise your privacy rights, including submitting requests to access or amend your health information, requesting restrictions, or submitting a written authorization, please contact:

Changes to This Notice

We may change the terms of this Notice at any time. If the terms of the Notice are changed, the new terms will apply to all of your health information, whether created or received by us before or after the date on which the Notice is changed. The current version of this Notice, including its effective date, will be available on this website.