Effective date: October 15, 2026

‍1. Our commitment
‍We protect the privacy of your health information, give you this notice describing our duties and privacy practices, and follow the terms of the notice currently in effect.We do this because North Carolina law requires us to keep your medical information confidential, and because we have chosen to hold this practice to the federal HIPAA Privacy and Security Rules. Whether a direct primary care practice that bills no insurance and submits no electronic claims is a “covered entity” under HIPAA turns on technical facts about the transactions it sends, and the answer can change as a practice grows. Our commitment to you does not depend on that answer. We follow these standards, and if that ever changes we will tell you and post a revised notice.This practice is small and virtual. Your records are handled by one physician and a small number of vetted vendors, each under a written agreement requiring them to protect your information. There is no billing department, no clearinghouse, and no insurance company receiving your chart.

‍2. How we may use and disclose your health information without your authorization
‍For treatment. To provide and coordinate your care. We may share information with pharmacies, laboratories, imaging facilities, hospitals, and specialists involved in your care.For payment. To collect your membership fee and to document services. Because we do not bill insurance, this is a narrow category. We do not submit claims, and we do not send your diagnoses to a payer.For health care operations. To evaluate and improve the quality of care, conduct training, and carry out administrative activities.As required by law. When federal, state, or local law requires disclosure.For public health activities. To report communicable diseases, births and deaths, adverse drug reactions, and product defects, as required or permitted by law.To report abuse, neglect, or domestic violence. To government authorities authorized to receive such reports.For health oversight. To agencies conducting audits, investigations, licensure actions, and inspections.For judicial and administrative proceedings. In response to a court order, or to a subpoena or discovery request where satisfactory assurances have been given that you were notified or that the information will be protected.For law enforcement. In limited circumstances permitted by law, such as responding to a court order or identifying a suspect, fugitive, or missing person.To avert a serious threat. When necessary to prevent a serious and imminent threat to your health or safety or that of another person.To coroners, medical examiners, and funeral directors. As necessary for them to carry out their duties.For organ donation. To organizations that handle organ, eye, or tissue procurement or transplantation.For workers’ compensation. To the extent authorized by and necessary to comply with workers’ compensation laws.For specialized government functions. Including military and veterans’ activities, national security, and protective services for the President.To persons involved in your care. We may share information relevant to your care with a family member, friend, or other person you identify, if you agree or do not object, or if in our professional judgment it is in your best interest and you are not present or able to agree.

‍3. Uses and disclosures that require your written authorization
‍We will not use or disclose your health information for any purpose other than those described above without your written authorization. In particular, your written authorization is always required for:· Marketing. Any use of your information to encourage you to purchase a product or service, where we receive payment from a third party.· Sale of your information. We do not sell health information and would need your authorization to do so.· Psychotherapy notes, if any exist.You may revoke an authorization in writing at any time. Revocation stops future uses and disclosures but does not undo anything we already did in reliance on it.

‍4. Substance use disorder records
‍Some health records are protected by an additional federal law, 42 C.F.R. Part 2, which governs records of substance use disorder treatment created by federally assisted treatment programs. This practice does not provide substance use disorder treatment and is not itself such a program.If we receive records covered by Part 2 from another program, we will protect them under that law’s stricter rules as well as under the standards described in this notice. Part 2 records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written consent or a court order meeting specific requirements.If you give us written consent to use or disclose Part 2 records for treatment, payment, or health care operations, that consent may be a single consent covering all such uses until you revoke it. You may revoke it in writing at any time.You may have a right to sue for a violation of Part 2. Contact us for more information about how Part 2 applies to any record we hold for you.

‍5. Your rights
‍To inspect and get a copy of your record. Including an electronic copy if we maintain it electronically. We will respond within thirty days. We may charge a reasonable, cost-based fee for a paper copy, and that fee will be the lower of our actual cost and the maximum North Carolina law allows. If we deny your request, we will explain why in writing and tell you how to have the denial reviewed.
To direct a copy to someone else. You may ask us in writing to send your record directly to a person or entity you name.To ask us to correct your record. If you believe information in your record is incorrect or incomplete, you may ask us in writing to amend it. We may deny your request, and if we do, we will explain why and you may submit a written statement of disagreement that we will include with your record.To get a list of disclosures. You may request an accounting of certain disclosures we made in the six years before your request. This does not include disclosures for treatment, payment, or operations, disclosures you authorized, or disclosures to you. The first accounting in any twelve-month period is free.

To request restrictions. You may ask us to limit how we use or disclose your information. We are not required to agree, except in one case: if you pay for a service in full out of pocket, and you ask us not to disclose information about that service to a health plan, we must agree. Because we do not bill insurance, this is rarely relevant here, but the right exists.
To request confidential communications. You may ask us to contact you a specific way or at a specific address.We will accommodate reasonable requests and will not ask you why.
To get a paper copy of this notice. Even if you agreed to receive it electronically, you may ask for a paper copy at any time.
To be notified of a breach. We will notify you if a breach occurs that compromises the privacy or security of your information.

‍6. Our duties
‍We are required by law to maintain the privacy of your health information, to give you notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We reserve the right to change this notice and to make the new notice apply to information we already hold as well as to information we receive in the future. If we make a material change, we will post the revised notice on our website and make it available to you at your next visit.

‍7. How to file a complaint
‍If you believe your privacy rights have been violated, you may complain to us, to the federal government, or to the North Carolina Medical Board. We will not retaliate against you for filing a complaint, and filing one will not affect your care.
To complain to us. Privacy Officer, Richardson Direct Primary Care, PLLC, 10130 Mallard Creek Rd, Suite 300, Charlotte, NC 28262. privacy@richardsondpc.com · 980-360-5840.To complain to the federal government. Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue SW, Washington, DC 20201.1-877-696-6775 · www.hhs.gov/ocr/privacy/hipaa/complaints/.
To complain to the State. North Carolina Medical Board, PO Box 20007, Raleigh, NC 27619-0007. 1-800-253- 9653 · ncmedboard.org. The Board licenses and disciplines physicians in North Carolina and accepts patient complaints, including complaints about confidentiality.

‍8. Contact
‍Questions about this notice: Privacy Officer, privacy@richardsondpc.com, 980-360-5840.