Notice of Privacy Practices.

This Notice of Privacy Practices ("Notice") describes how Rylo Health LLC ("we", "us", or "our") may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes permitted or required by law. This Notice also describes your rights regarding your PHI. We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice.

Uses and disclosures of PHI.

We may use and disclose your PHI for the following purposes:

Treatment. To provide, coordinate, or manage your healthcare and related services, including communicating with other providers about your treatment and coordinating your care.

Payment. To obtain payment for services, including verifying coverage, billing and collection, and sharing PHI with providers, insurers, or collection agencies.

Healthcare operations. For quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.

As required by law. When required by federal, state, or local law.

Public health and safety. To prevent or control disease, injury, or disability; report child abuse or neglect; report reactions to medications or product problems; and notify persons who may have been exposed to a communicable disease.

Health oversight activities. To health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.

Judicial and administrative proceedings. In response to a court or administrative order, subpoena, discovery request, or other lawful process.

Law enforcement. For law enforcement purposes, such as reporting certain wounds or injuries, or complying with a court order, warrant, or other legal process.

Research. For research approved by an institutional review board with privacy protections in place.

Organ and tissue donation. If you are an organ donor, to organizations that handle organ procurement, transplantation, or donation.

Workers' compensation. For workers' compensation or similar programs providing benefits for work-related injuries or illnesses.

Military and veterans. If you are a member of the armed forces, as required by military authorities.

Inmates. If you are an inmate, to the correctional institution or law enforcement official having custody of you.

Your rights regarding PHI.

Right to inspect and copy. You may inspect and copy your PHI that we maintain, with certain exceptions, by written request to our Privacy Officer. We may charge a reasonable fee for copying, mailing, or supplies.

Right to amend. You may request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request in certain cases.

Right to an accounting of disclosures. You may request an accounting of certain disclosures of your PHI made in the past six years.

Right to request restrictions. You may request a restriction on our use or disclosure of your PHI. We are not required to agree but will consider your request.

Right to request confidential communications. You may request that we communicate with you about your PHI in a certain way or at a certain location.

Right to a paper copy of this Notice. You may receive a paper copy of this Notice even if you agreed to receive it electronically.

Right to be notified of a breach. You will be notified if we discover a breach of your unsecured PHI.

Transmission of PHI.

We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the HIPAA Privacy Rule (45 CFR 164). This includes the use of Secure-Socket Layer (SSL) or equivalent technology, as well as adherence to all applicable security standards for online transmissions of PHI.

Changes to this Notice.

We reserve the right to change this Notice. A revised Notice will be effective for PHI we already have about you, as well as information we receive in the future. We will post the current Notice on our website with its effective date.

Complaints.

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

State-specific provisions.

This Notice applies across all US states. Certain states provide additional privacy protections for your PHI; the following are examples.

California. Additional rights under the Confidentiality of Medical Information Act (CMIA), including access in a readily usable electronic format, restrictions on certain disclosures to health plans for out-of-pocket services, limits on marketing and sale of PHI, and specific minors' rights for sensitive services.

New York. We comply with the New York State confidentiality laws providing additional protections for HIV-related information, mental health records, and genetic testing results, obtaining written consent before disclosing such information.

Texas. We comply with the Texas Medical Privacy Act, including consent requirements for certain disclosures, additional safeguards for electronic PHI, and protections for mental health and substance use treatment records.

Florida. We comply with Florida's privacy laws, including additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records, obtaining written consent before disclosing such information.

Illinois. We comply with Illinois's privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results, including breach notification for unauthorized access to electronic PHI.

Massachusetts. We comply with Massachusetts's privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results, with specific security measures for electronic PHI.

If you reside in a state other than those listed, please consult your state's privacy laws or contact our Privacy Officer for more information about your rights.