HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Body Good, LLC and its affiliated licensed clinicians (“Body Good,” “we,” “us,” or “our”) provide telehealth-based weight management and GLP-1 medication services and are the health care provider responsible for your care. We are required by law to protect the privacy of your protected health information (“PHI”), to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

How We May Use and Disclose Your Health Information

For treatment. Our clinicians review your intake, history, and labs to decide whether a GLP-1 or other treatment is appropriate, write prescriptions, and send them to a pharmacy that fills your medication; we coordinate with laboratories and other providers involved in your care.

For payment. We use and share PHI to obtain payment, including to process your payment, verify insurance eligibility and coverage when you request it, submit prior authorizations (including to a government program such as the Medicare GLP-1 Bridge where applicable), and bill for services or products.

For health care operations. We use PHI to run our practice, including quality review, training and supervising clinicians and staff, care coordination, and customer support.

Business associates. We share PHI with vendors who perform services for us, including Body Good Studio, LLC (our management and technology partner), pharmacies, laboratories, and messaging and IT providers, each under a written business associate agreement requiring them to protect your PHI.

Care and service communications. We may contact you by phone, text message, email, or patient portal with treatment reminders, refill and shipping updates, lab results, and other information about your care. Message and data rates may apply; reply STOP to opt out of text messages. You may ask us to communicate with you in a specific way or at a specific location.

Other uses permitted or required by law. We may use or disclose PHI without your authorization when required or permitted by law, including for public health activities (such as reporting adverse drug events to the FDA), health oversight, judicial or administrative proceedings, law enforcement as permitted by law, to avert a serious threat to health or safety, for workers’ compensation, and to coroners or medical examiners.

Uses and Disclosures That Require Your Written Authorization

The following will be made only with your written authorization, which you may revoke in writing at any time (revocation does not affect actions already taken in reliance on it): most uses and disclosures for marketing; disclosures that constitute a sale of PHI; most uses and disclosures of psychotherapy notes, if any are maintained; and any other use or disclosure not described in this Notice.

We do not sell your PHI, and we do not use or disclose PHI for marketing without your authorization. General marketing emails and texts you opt into are governed by our Privacy Policy.

Your Rights Regarding Your Health Information

• Access. Inspect and obtain a copy of your PHI, including an electronic copy, usually within 30 days.
• Amend. Request a correction to PHI you believe is incorrect or incomplete.
• Accounting of disclosures. Receive a list of certain disclosures we have made.
• Request restrictions. Ask us to limit how we use or share your PHI. We will agree to your request not to share information with your health plan about an item or service you paid for in full out of pocket, except where required by law.
• Confidential communications. Ask us to contact you by a specific means or at a specific location.
• Paper copy. Receive a paper copy of this Notice even if you agreed to receive it electronically.
• Breach notification. Be notified if a breach affects the privacy of your unsecured PHI.
• Revoke authorization. Withdraw any authorization you previously gave, in writing.

To exercise any of these rights, contact our Privacy Officer below. Some requests must be made in writing.

Our Duties

We are required by law to maintain the privacy and security of your PHI, to notify you following a breach of unsecured PHI, to follow the terms of the Notice currently in effect, and to obtain your authorization for uses and disclosures not described here. We reserve the right to change this Notice and to make the new terms effective for all PHI we maintain; if we make a material change, we will post the revised Notice on our website and update the effective date.

State Law

Where the law of your state provides greater protection for your health information than HIPAA, we will follow the more protective law. Because we provide telehealth across multiple states, additional state-specific protections may apply to your information.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201; 1-877-696-6775; www.hhs.gov/hipaa/filing-a-complaint/. We will not retaliate against you for filing a complaint.

Contact — Privacy Officer

Pierre Louis, Esq., Managing Attorney, Louis Law Group
Covered entity: Body Good, LLC
Email: [email protected]
Phone: 305-422-9921
Address: 12 SE 7th St, Suite 805, Fort Lauderdale, FL 33301