HIPAA Notice of Privacy Practices

Our Commitment to Your Privacy

EzLabTesting is committed to protecting the privacy of your health information. This Notice of Privacy Practices describes how we may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations, and for other purposes permitted or required by law.

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the notice currently in effect
• Notify you if we are unable to agree to a requested restriction
• Notify you in the event of a breach of your unsecured PHI

What is Protected Health Information (PHI)?

PHI is information about you, including demographic information, that may identify you and relates to:

• Your past, present, or future physical or mental health condition
• The provision of healthcare to you
• Payment for the provision of healthcare to you

Examples include your lab test orders, results, medical history, and payment information.

How We May Use and Disclose Your Health Information

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes:

• Coordinating with CLIA-certified laboratories to perform your tests
• Having physicians review and approve your test orders
• Providing test results to you and, with your permission, to your healthcare providers

For Payment

We may use and disclose your PHI to bill for services and collect payment, including:

• Processing credit card payments
• Verifying HSA/FSA eligibility
• Collecting outstanding balances
• Responding to payment disputes or chargebacks

For Healthcare Operations

We may use and disclose your PHI for healthcare operations, such as:

• Quality assessment and improvement activities
• Reviewing the competence or qualifications of healthcare professionals
• Conducting or arranging for medical review, legal services, and auditing functions
• Business planning and development
• Training programs

Business Associates

We may disclose your PHI to business associates who perform services on our behalf (such as laboratories, payment processors, and IT service providers). We require them to appropriately safeguard your information through written contracts.

As Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law, including:

• Public health activities (e.g., disease reporting)
• Health oversight activities (e.g., audits, investigations)
• Judicial and administrative proceedings
• Law enforcement purposes
• Preventing serious threats to health or safety
• Workers' compensation claims
• Coroners, medical examiners, and funeral directors

Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not covered by this notice or applicable laws will be made only with your written authorization. You may revoke such authorization in writing at any time, except to the extent that we have already acted in reliance on your authorization.

Specifically, we will obtain your authorization before using or disclosing your PHI for:

• Marketing purposes
• Sale of PHI
• Most uses and disclosures of psychotherapy notes (if applicable)

How to Exercise Your Rights

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI. To request copies of your information, submit a written request to our Privacy Officer. We may charge a reasonable fee for copying and mailing costs.

We may deny your request in certain limited circumstances. If we deny your request, we will provide you with a written explanation and information about your right to have the denial reviewed.

Right to Amend

If you believe that information in your health record is incorrect or incomplete, you may request an amendment. Your request must be in writing and provide a reason for the amendment.

We may deny your request if the information:

• Was not created by us
• Is not part of the records kept by us
• Is not available for inspection
• Is accurate and complete

Right to an Accounting of Disclosures

You have the right to request an "accounting of disclosures," which is a list of certain disclosures we have made of your PHI. The first accounting in any 12-month period is free; we may charge a reasonable fee for additional requests.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request, but if we do, we will comply with your request unless the information is needed for emergency treatment.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your health information in a certain way or at a certain location. For example, you may ask that we contact you only at work or by mail. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this notice, even if you have agreed to receive it electronically. You may request a copy at any time.

Changes to This Notice

We reserve the right to change this notice and make the new notice apply to health information we already have as well as any information we receive in the future. We will post a copy of the current notice on our website with the effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. You will not be penalized or retaliated against for filing a complaint.

To file a complaint with us, contact:

To file a complaint with the Department of Health and Human Services:

Contact Information

For questions about this notice or to exercise your rights, contact our Privacy Officer using the information above.