HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

HeartSpringTX PLLC, doing business as Sovera Health ("we," "us," or "our"), is required by law to maintain the privacy of your protected health information (PHI), provide you with this Notice of our legal duties and privacy practices, notify you following a breach of unsecured PHI, and abide by the terms of the Notice currently in effect. This Notice applies to the medical services provided by HeartSpringTX PLLC doing business as Sovera Health. Sovera Coaching is a nonmedical service and is not a HIPAA-covered clinical service; PHI protections under this Notice do not apply to coaching interactions.

How we may use and disclose PHI without your written authorization

Treatment

We may use and disclose PHI to provide, coordinate, or manage your health care and related services, including sharing information with other providers, laboratories, pharmacies, and specialists involved in your care.

Payment

We may use and disclose PHI to obtain payment for services provided, such as verifying eligibility, processing payments, and coordinating with billing vendors.

Health care operations

We may use and disclose PHI for internal activities necessary to run the practice, including quality improvement, credentialing, business planning, training, compliance, and administration.

Other uses and disclosures permitted or required by law

• Public health activities. To prevent or control disease, injury, or disability; to report adverse events; and to comply with public health authorities as permitted by law.
• Health oversight activities. To agencies authorized by law to conduct audits, investigations, inspections, and licensure actions.
• Abuse, neglect, or domestic violence. To appropriate authorities when we reasonably believe a patient may be a victim of abuse, neglect, or domestic violence, as permitted or required by law.
• Judicial and administrative proceedings. In response to a court or administrative order, subpoena, discovery request, or other lawful process.
• Law enforcement. For law enforcement purposes as permitted or required by law, including reporting certain injuries and responding to lawful requests.
• Workers' compensation. As authorized by and to the extent necessary to comply with workers' compensation laws.
• Required by law. When the use or disclosure is required by federal, state, or local law.
• To avert a serious threat. To prevent or lessen a serious and imminent threat to health or safety, consistent with applicable law and ethical standards.
• Health-related benefits and services. To communicate with you about treatment alternatives or other health-related services that may be of interest, as permitted by law.
• Coroners, medical examiners, and funeral directors. As permitted by law.
• Business associates. To vendors that perform services on our behalf under a written HIPAA business associate agreement that requires them to protect your PHI.

Uses and disclosures requiring your written authorization

Other uses and disclosures of PHI not described in this Notice will be made only with your written authorization. Uses and disclosures for marketing, sales of PHI, and most uses and disclosures of psychotherapy notes (if any) require your written authorization. You may revoke an authorization in writing at any time, except to the extent that we have already acted in reliance on it.

Breach notification

We are required by law to notify you following a breach of unsecured PHI in accordance with applicable federal and state law.

Your rights

• Right to inspect and obtain copies. You have the right to inspect and receive a copy of your PHI in our designated record set, subject to limited exceptions. We may charge a reasonable, cost-based fee.
• Right to request amendments. You have the right to request an amendment of PHI you believe is incorrect or incomplete. We may deny the request in certain circumstances.
• Right to request restrictions. You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions, except that we must agree to a request to restrict disclosure to a health plan for a service you paid for out of pocket in full.
• Right to request confidential communications. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.
• Right to an accounting of disclosures. You have the right to request an accounting of certain disclosures of your PHI made by us.
• Right to a paper copy of this Notice. You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
• Right to be notified of a breach. You have the right to be notified in the event of a breach of your unsecured PHI.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our privacy contact using the information below, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, or by visiting www.hhs.gov/ocr/complaints/. You will not be retaliated against for filing a complaint.

Changes to this Notice

We reserve the right to change the terms of this Notice and to make the new provisions effective for all PHI we maintain. The current version of the Notice will be posted on our website and available at the practice upon request.

Contact for privacy questions

Privacy Contact — HeartSpringTX PLLC doing business as Sovera Health
2028 E Ben White Blvd, Suite 240-9678, Austin, TX 78741
Email: hello@soveracollective.com
Phone: (737) 321-8939