THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

‍Richardson Medical Corporation d/b/a Richardson Direct Primary Care (“the Practice,” “we,” “us”) is required by law to maintain the privacy of your protected health information (“PHI”), to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. California’s Confidentiality of Medical Information Act, and other state laws that are more protective of your information than HIPAA, may further limit how we use and disclose your PHI; where a stricter law applies, we follow it.

‍1. How We May Use and Disclose Your Health Information
‍Treatment. We use your PHI to provide, coordinate, and manage your care — for example, sharing information with a specialist we refer you to, a laboratory, an imaging center, or a pharmacy. This includes care delivered by telehealth and secure messaging.

Payment. We may use and disclose PHI to bill and collect payment for services — for example, processing your membership billing or, at your request, providing documentation you submit to a health plan, health-sharing organization, or employer for reimbursement.

Health care operations. We may use and disclose PHI to run the Practice — quality improvement, training, licensing, business planning, and administrative activities — and may share PHI with business associates (such as our electronic health record, membership management, and secure communication vendors) under written agreements that require them to safeguard it.

Appointment reminders and care communications. We may contact you to remind you of appointments, follow up on care, or tell you about treatment options and health-related services we offer.Family and others involved in your care. With your agreement, or when you are unable to agree and we determine it is in your best interest, we may share relevant PHI with a family member or other person involved in your care or payment for your care.

Other uses and disclosures permitted or required by law. We may use or disclose PHI without your authorization when permitted or required by law, including for: public health activities (such as disease reporting and vital statistics); reporting suspected abuse, neglect, or domestic violence; health oversight activities (audits, licensing); judicial and administrative proceedings in response to lawful process; law enforcement purposes within legal limits; coroners, medical examiners, and funeral directors; organ and tissue donation; research approved under required privacy safeguards; to avert a serious and imminent threat to health or safety; specialized government functions (such as military or national security); and workers’ compensation.

‍2. Uses and Disclosures That Require Your Written Authorization
‍We will obtain your written authorization before: most uses and disclosures of psychotherapy notes; using your PHI for marketing purposes; selling your PHI (which we do not do); and any other use or disclosure not described in this Notice. You may revoke an authorization at any time in writing, except to the extent we have already relied on it.

‍3. Substance Use Disorder Treatment Records
‍If we receive or maintain records subject to the federal confidentiality rules for substance use disorder treatment records (42 C.F.R. Part 2), those records receive additional protection beyond HIPAA. In particular, such records — and testimony relaying their content — may not be used or disclosed against you in civil, criminal, administrative, or legislative proceedings without your written consent or a court order issued after you have received notice. Part 2 records disclosed with your consent may be redisclosed only as permitted by law; once information leaves the protection of these rules, it may no longer be protected. We do not use substance use disorder records for fundraising.

‍4. Your Rights Regarding Your Health Information• 
• Right to inspect and copy. You may inspect and obtain a copy of your medical record (including an electronic copy) by written request. We will respond within the time required by law and may charge a reasonable, cost-based fee for copies.
• Right to amend. If you believe information in your record is incorrect or incomplete, you may request an amendment in writing. We may deny the request in certain circumstances, and you have the right to submit a statement of disagreement.
• Right to an accounting of disclosures. You may request a list of certain disclosures of your PHI made during the six years before your request (excluding disclosures for treatment, payment, operations, and certain others).
• Right to request restrictions. You may ask us to restrict how we use or disclose your PHI. We are not required to agree to every request, with one important exception: if you pay for a service in full out of pocket, you may require that we not disclose PHI about that service to a health plan for payment or operations purposes, and we must honor that restriction. Because the Practice operates on a direct-pay membership model, this protection applies to most services we provide.
• Right to confidential communications. You may ask us to contact you by specific means or at a specific location (for example, only by secure message, or only at a particular phone number), and we will accommodate reasonable requests.
• Right to a paper copy. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Right to breach notification. We will notify you as required by law if a breach occurs involving your unsecured PHI.

‍5. Our Duties and Changes to This Notice
‍We are required by law to maintain the privacy and security of your PHI and to abide by the terms of this Notice. We reserve the right to change this Notice and to make the new terms effective for all PHI we maintain. The current Notice will always be posted at our office and on richardsondpc.com, with its effective date at the top.

‍6. Complaints
‍If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, and/or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights (hhs.gov/ocr; 1-800-368-1019). You will not be penalized or retaliated against in any way for filing a complaint. California patients may also contact the California Attorney General’s office regarding violations of state medical-privacy law; North Carolina patients may contact the North Carolina Attorney General’s office.

‍7. Contact — Privacy Officer
‍Privacy Officer: Tabia Richardson
Richardson Medical Corporation d/b/a Richardson Direct Primary Care
21400 Ventura Blvd., Suite C, Woodland Hills, CA 91364
Email: support@richardsondpc.com  •  Phone: 818-514-1564