Notice of privacy practices.

01About this notice

This Notice is provided by Recode Labs LLC and describes the privacy practices that apply to protected health information ("PHI") we maintain about you. PHI is individually identifiable health information, including information about your health condition, the care you receive, and payment for that care.

We are required by law to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, to notify you following a breach of unsecured PHI, and to follow the terms of the Notice currently in effect.

Who this notice covers

Recode Labs is not a pharmacy, a prescriber or a healthcare provider. The independent clinicians who review your intake and the licensed pharmacies that dispense your medication are separate entities. Each maintains its own privacy practices and may provide you with its own notice. This Notice is the notice that governs the protected health information Recode Labs holds about you, and it is the Notice presented to you when you complete your intake. This Notice describes only how Recode Labs handles your PHI.

02How we may use and disclose your information

Treatment

We share your health information with the independent clinician licensed in your state who reviews your intake, and with Rush Pharmacy, the licensed pharmacy that fills your prescription, so that you can receive care. For example, your intake responses, medical history and current medications are provided to the reviewing clinician.

Payment

We use and disclose your information to process payment for services and medication, including to our payment processor and, where applicable, to resolve billing disputes.

Health care operations

We use your information for quality assessment, training, business planning, customer support, resolving complaints, and general administrative activities.

Business associates

We contract with vendors who perform services on our behalf, including our telehealth technology platform provider, hosting, communications and identity verification providers. Each is bound by a written Business Associate Agreement requiring them to protect your information.

Other permitted uses and disclosures

• As required by law. Where federal, state or local law requires disclosure.
• Public health activities. To prevent or control disease, to report adverse events, product defects or problems with medications to the FDA, and to enable product recalls.
• Health oversight. To agencies conducting audits, investigations, inspections and licensure activities.
• Judicial and administrative proceedings. In response to a court order, subpoena or other lawful process.
• Law enforcement. As permitted by law, for example to identify or locate a suspect or to report a crime.
• To avert a serious threat. To prevent or lessen a serious and imminent threat to the health or safety of you or the public.
• Abuse, neglect or domestic violence. To appropriate government authorities where permitted or required.
• Workers' compensation. As authorised by workers' compensation laws.
• Coroners, medical examiners and funeral directors. As permitted by law.
• Military, national security and correctional institutions. Where applicable and permitted by law.
• Research. Where an institutional review board has approved the research and appropriate privacy protections are in place, or using de-identified data.

03Uses that require your written authorization

The following uses and disclosures will be made only with your written authorization.

• Marketing. Most uses and disclosures of PHI for marketing purposes.
• Sale of information. Any disclosure that constitutes a sale of PHI. We do not sell your health information.
• Psychotherapy notes. Most uses and disclosures of psychotherapy notes, where these exist.
• Other uses. Any other use or disclosure not described in this Notice.

You may revoke an authorization in writing at any time. Revocation will stop any further use or disclosure under that authorization, but will not undo disclosures already made in reliance on it.

04Your rights regarding your health information

Right to inspect and copy

You have the right to inspect and obtain a copy of your PHI held in a designated record set, including in electronic form where we maintain it electronically. We will respond within 30 days, with one 30-day extension where permitted. We may charge a reasonable, cost-based fee for copies.

Right to request an amendment

If you believe information we hold is incorrect or incomplete, you may request an amendment. We may deny the request if the information was not created by us, is not part of the designated record set, is not available for inspection, or is accurate and complete. If we deny your request, you may submit a statement of disagreement, which we will include with the record.

Right to an accounting of disclosures

You may request a list of certain disclosures we have made of your PHI in the six years before your request. This excludes disclosures for treatment, payment and health care operations, disclosures you authorised, and certain other categories. The first accounting in any 12-month period is free.

Right to request restrictions

You may request that we restrict how we use or disclose your PHI. We are not required to agree to a restriction, except that we must agree to a request to restrict disclosure to a health plan for a service you paid for in full out of pocket.

Right to request confidential communications

You may request that we communicate with you in a particular way or at a particular location, for example only by email or only to a specific address. We will accommodate reasonable requests.

Right to a paper copy of this notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Right to notification of a breach

You will be notified if a breach occurs that may have compromised the privacy or security of your unsecured PHI.

Right to choose someone to act for you

If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will verify authority before acting.

How to exercise your rights

Submit requests in writing to privacy@recodelabs.io or by post to the address at the end of this Notice. We will verify your identity before acting on any request.

05Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the federal government. You will not be retaliated against, penalised, or refused service for filing a complaint.

With us

Privacy Officer

Recode Labs LLC
1120 E Kennedy Blvd, Ste 915
Tampa, FL 33602

Email

privacy@recodelabs.io

With the federal government

You may file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

Post

200 Independence Avenue SW
Washington, D.C. 20201

Telephone

1-877-696-6775

Online

hhs.gov/ocr/privacy/hipaa/complaints

06Changes to this notice

We reserve the right to change this Notice and to make the revised Notice effective for health information we already hold as well as information we receive in the future. The current Notice will always be posted on this website with its effective date. You may request a copy at any time.

Contact

Entity

Recode Labs LLC

Address

1120 E Kennedy Blvd, Ste 915
Tampa, FL 33602

Privacy

privacy@recodelabs.io