HIPAA NOTICE OF PRIVACY PRACTICES
This notice describes how medical information about you may be used and disclosed and how you can get access to this information.
Please review it carefully.
Our Commitment to Your Privacy
RestartRX is strongly committed to creating a safe place for patients to access and receive care, which requires protecting patient privacy and complying with applicable laws and regulations. While RestartRX is not itself a HIPAA Covered Entity — as we operate on an all-cash, self-pay basis and do not bill federal healthcare programs — we nonetheless undertake serious efforts to protect patient health information.
We maintain and adhere to a comprehensive Privacy Policy and Consumer Health Data Privacy Policy for our patients. We also maintain a Data Subject Access Request program that allows patients to exercise their rights to opt-out and request data deletion consistent with state law. We continually evaluate our practices and follow the evolving legislative and regulatory landscape to ensure the appropriate protection of patient health information.
1. IMPORTANT INFORMATION ABOUT RESTARTRX AND HIPAA
RestartRX Management LLC ("RestartRX," "we," "us," or "our") is a technology platform that connects individuals with independently licensed healthcare providers. RestartRX does not provide medical care, diagnosis, or treatment. All medical services are provided by independent healthcare providers and affiliated pharmacies.
Because of this structure:
- RestartRX is not itself a "covered entity" under HIPAA in all circumstances. HIPAA does not necessarily apply to an entity simply because health information is involved, and HIPAA may not apply to all of your transactions or communications with RestartRX directly.
- Healthcare providers and pharmacies you interact with through our platform may be HIPAA covered entities and are responsible for their own HIPAA compliance.
- In certain cases, RestartRX may act as a "business associate" to providers or pharmacies and may handle protected health information ("PHI") on their behalf. To the extent RestartRX is deemed a business associate, it is subject to applicable HIPAA provisions with respect to PHI.
Any medical or health information you provide that is subject to specific protections under applicable federal or state law (collectively, "Protected Information") will be used and disclosed only in accordance with those laws. Information that does not constitute Protected Information may be used as described in our Privacy Policy.
This Notice explains how Protected Health Information may be used and disclosed when HIPAA applies, and describes your rights with respect to that information.
2. WHAT IS PROTECTED HEALTH INFORMATION (PHI)
Protected Health Information ("PHI") is individually identifiable health information that:
- Identifies you (or could reasonably be used to identify you), and
- Relates to your past, present, or future physical or mental health or condition, the provision of healthcare to you, or payment for that healthcare.
PHI may include your medical history and intake information, diagnoses or treatment information, prescription and medication data, and communications with providers. PHI does not include information that has been de-identified in accordance with applicable law.
3. HOW PHI MAY BE USED AND DISCLOSED
When applicable, your PHI may be used and disclosed for the following purposes. We use and disclose only the minimum necessary PHI to accomplish the intended purpose.
A. Treatment
To provide, coordinate, or manage your healthcare and related services. For example, sharing information between providers and pharmacies involved in your care.
B. Payment
To facilitate payment for healthcare services. For example, processing payments or coordinating billing with service providers involved in your care.
C. Healthcare Operations
To support administrative and operational functions, including quality improvement, compliance monitoring, and system operations.
D. Other Permitted Uses and Disclosures
PHI may also be used or disclosed in the following circumstances without your authorization:
- As required by law
- For public health activities and reporting
- For health oversight activities by government agencies
- For law enforcement purposes or legal proceedings
- To prevent or lessen a serious threat to health or safety
- For workers' compensation purposes
E. Uses Requiring Your Authorization
Any use or disclosure of your PHI not described above will be made only with your written authorization. You have the right to revoke any such authorization in writing at any time. Revocation will not affect any actions already taken in reliance on your prior authorization.
4. YOUR RIGHTS REGARDING YOUR PHI
When HIPAA applies, you have the following rights with respect to your Protected Health Information. To exercise any of these rights, please contact us using the information in Section 8.
| Your Right | What It Means |
|---|---|
| Right to Access | You may request access to inspect or receive a copy of your PHI. We will respond within the timeframe required by law. |
| Right to Correct | You may request correction of PHI that you believe is inaccurate or incomplete. We may deny the request in certain circumstances permitted by law. |
| Right to Request Restrictions | You may request limits on how your PHI is used or disclosed. We are not required to agree to all requested restrictions, except that we must agree to restrict disclosure to a health plan for services you have paid for out-of-pocket in full. |
| Right to Confidential Communications | You may request that we communicate with you about your health matters through alternative means or at an alternative location (e.g., a different email address or mailing address). |
| Right to an Accounting of Disclosures | You may request a list of certain disclosures of your PHI made in the prior six years, other than disclosures for treatment, payment, or healthcare operations. |
| Right to Revoke Authorization | Where we rely on your authorization to use or disclose PHI, you may revoke that authorization in writing at any time, except to the extent we have already acted in reliance on it. |
| Right to a Copy of This Notice | You may request a paper or electronic copy of this Notice at any time, free of charge. |
| Right to Breach Notification | You have the right to be notified if your unsecured PHI is breached. We will notify you in accordance with applicable law following the discovery of a breach. |
5. RESPONSIBILITIES OF HEALTHCARE PROVIDERS AND PHARMACIES
The independently licensed healthcare providers and pharmacies you interact with through the RestartRX platform:
- Maintain their own Notice of Privacy Practices describing how they use and disclose PHI
- Are independently responsible for their own HIPAA compliance
- May provide you with additional privacy notices specific to their practice
By using the RestartRX platform, you acknowledge that you may receive separate privacy notices from providers and pharmacies involved in your care, and you acknowledge receipt of this Notice.
6. DATA HANDLING AND SECURITY
We use reasonable and appropriate administrative, technical, and physical safeguards designed to protect your information against unauthorized access, use, or disclosure. We are required by law to maintain the privacy of your PHI, to provide you with this Notice, and to follow the terms of the Notice currently in effect.
However, no electronic system can be guaranteed to be completely secure, and electronic communications may carry some risk of interception or unintended disclosure. You should use caution when transmitting health information electronically.
7. BREACH NOTIFICATION
We are required by law to notify you following the discovery of a breach of your unsecured Protected Health Information. Notification will be provided in accordance with the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414) and any applicable state law requirements, including notification to the U.S. Department of Health and Human Services where required.
8. HOW TO FILE A COMPLAINT
If you believe your privacy rights have been violated, you have the right to file a complaint. You will not be penalized, retaliated against, or suffer any adverse consequences for filing a complaint in good faith.
Phone: 888-973-7879
63 N. Burritt Ave, Room 100 East PMB1215
Buffalo, WY 82834
hhs.gov/hipaa/filing-a-complaint
Toll-free: 1-800-368-1019
TDD: 1-800-537-9339
9. CHANGES TO THIS NOTICE
We reserve the right to change the terms of this Notice at any time. Any revised Notice will apply to PHI we already hold as well as PHI we receive in the future. When we make a material change to this Notice, we will post the updated version on our website and revise the effective date at the top of this document. You may request a copy of the current Notice at any time.
10. CONTACT INFORMATION
For questions about this Notice or to exercise your rights, please contact us:
63 N. Burritt Ave, Room 100 East PMB1215
Buffalo, WY 82834, United States
Email: support@restartrx.com
Phone: 888-973-7879