Notice of Privacy Practices
1. How this notice works
This page is the structured framework the effective NPP will follow. Booking flows acknowledge the applicable NPP separately from the general Privacy Policy — the two are different documents with different legal bases, and the NPP controls for protected health information (PHI) where HIPAA applies.
2. Covered entity identification counsel required
To be completed: the legal entity (or entities) to which this notice applies, its designations (covered entity, business associate, hybrid entity, organized health care arrangement), and the scope of PHI it covers.
3. Uses and disclosures of PHI
The effective notice will describe, with examples: uses and disclosures for treatment, payment, and health care operations (including appointment scheduling and reminders); uses and disclosures permitted or required by law without authorization (public health, health oversight, judicial process, safety); uses requiring your written authorization (including marketing, sale of PHI, and psychotherapy notes where applicable) and your right to revoke authorization; and special protections for sensitive categories — behavioral health, substance-use-disorder records subject to confidentiality regulations, adolescent records, and reproductive health information where state law provides additional protection.
4. Your rights regarding PHI
The rights to: inspect and obtain a copy of your PHI; request corrections; receive an accounting of certain disclosures; request restrictions on certain uses and disclosures; request confidential communications by alternative means or locations; obtain a paper copy of this notice on request; and be notified following a breach of unsecured PHI.
5. Our duties
Maintain the privacy and security of PHI; provide this notice and abide by its terms; notify affected individuals following a breach of unsecured PHI; and not use or disclose PHI other than as described here without authorization.
6. Complaints
You may complain to the privacy office (privacy@getmyspotnow.com) and to the U.S. Department of Health and Human Services, Office for Civil Rights, without retaliation.
7. Effective date and contact
Effective date, privacy-official contact details, and the revision process will be completed at finalization. Acceptance and acknowledgment records are retained with legal-document versioning.