Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW PEPPY HEALTH CORPORATION, PEPPY MEDICAL OF NEW YORK, P.C., PEPPY MEDICAL OF NEW JERSEY, P.C., PEPPY MEDICAL OF CALIFORNIA, P.C., PEPPY MEDICAL OF KANSAS, P.A., AND PEPPY MEDICAL, P.A. (COLLECTIVELY “PEPPY”, “WE”, “US”, OR “OUR”) MAY USE AND DISCLOSE YOUR MEDICAL INFORMATION AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Peppy’s Commitment to Your Privacy

Peppy is dedicated to maintaining the privacy of your protected health information (“PHI”). PHI is information about you that may be used to identify you (such as your name, social security number or address), and that relates to (a) your past, present, or future physical or mental health or condition, (b) the provision of healthcare to you, or (c) your past, present, or future payment for the provision of healthcare. In conducting its business, Peppy will receive and create records containing your PHI. Peppy is required by law to maintain the privacy of your PHI and to provide you with notice of its legal duties and privacy practices with respect to your PHI.

This Notice of Privacy Practices (“Notice”) applies to Peppy’s collection of PHI. For information about our collection, use, and disclosure of personal information other than PHI, please visit our Privacy Policy.

Peppy must abide by the terms of this Notice while it is in effect. This current Notice was last updated on November 16, 2022 and will remain in effect until Peppy replaces it. Peppy reserves the right to change the terms of this Notice at any time, as long as the changes are in compliance with applicable law. If Peppy changes the terms of this Notice, the new terms will apply to all PHI that it maintains, including PHI that was created or received before such changes were made. If Peppy changes this Notice, it will post the new Notice on its Web site and will make the new Notice available upon request.

Uses and Disclosures of PHI

Peppy may use and disclose your PHI in the following ways:

Treatment, Payment and Healthcare Operations. Peppy is permitted to use and disclose your PHI for purposes of (a) treatment, (b) payment and (c) healthcare operations. For example:

• Treatment. Peppy may disclose your PHI to another physician or healthcare provider for purposes of a visit or in connection with the provision of follow-up treatment.
• Payment. Peppy may use and disclose your PHI to your health insurer or health plan in connection with the processing and payment of claims and other charges.
• Healthcare Operations. Peppy may use and disclose your PHI in connection with its healthcare operations, such as providing customer services, obtaining medication history from third parties, and conducting quality review assessments. Peppy may engage third parties to provide various services for Peppy. If any such third party must have access to your PHI in order to perform its services, Peppy will require that third party to enter an agreement that binds the third party to the use and disclosure restrictions outlined in this Notice.

Authorization. Peppy is permitted to use and disclose your PHI upon your written authorization, to the extent such use or disclosure is consistent with your authorization. We need your written authorization prior to us using and disclosing your PHI in the follow contexts: marketing purposes, fundraising purposes, to your employer, or for the sale of your PHI. You may revoke any such authorization at any time.

As Required by Law. Peppy may use and disclose your PHI to the extent required by law.

Special Circumstances

The following categories describe unique circumstances in which Peppy may use or disclose your PHI:

Public Health Activities. Peppy may disclose your PHI to public health authorities or other governmental authorities for purposes including preventing and controlling disease, reporting child abuse or neglect, reporting domestic violence and reporting to the Food and Drug Administration regarding the quality, safety, and effectiveness of a regulated product or activity. Peppy may, under certain circumstances, disclose PHI to persons who have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition.

Workers’ Compensation. Peppy may disclose your PHI as authorized by, and to the extent necessary to comply with, workers’ compensation programs and other similar programs relating to work-related illnesses or injuries.

Health Oversight Activities. Peppy may disclose your PHI to a health oversight agency for authorized activities such as audits, investigations, inspections, licensing, and disciplinary actions relating to the healthcare system or government benefit programs.

Judicial and Administrative Proceedings. Peppy may disclose your PHI, in certain circumstances, as permitted by applicable law, in response to an order from a court or administrative agency, or in response to a subpoena or discovery request.

Law Enforcement. Peppy may, under certain circumstances, disclose your PHI to a law enforcement official, such as for purposes of identifying or locating a suspect, fugitive, material witness, or missing person.

Decedents. Peppy may, under certain circumstances, disclose PHI to coroners, medical examiners, and funeral directors for purposes such as identification, determining the cause of death, and fulfilling duties relating to decedents.

Organ Procurement. Peppy may, under certain circumstances, use or disclose PHI for the purposes of organ donation and transplantation.

Research. Peppy may, under certain circumstances, use or disclose PHI that is necessary for research purposes.

Threat to Health or Safety. Peppy may, under certain circumstances, use or disclose PHI if necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Specialized Government Functions. Peppy, may in certain situations, use and disclose PHI of persons who are, or were, in the Armed Forces for purposes such as ensuring proper execution of a military mission or determining entitlement to benefits. Peppy may also disclose PHI to federal officials for intelligence and national security purposes.

Your Rights Regarding Your PHI

You have the following rights regarding the PHI maintained by Peppy:

Confidential Communication. You have the right to receive confidential communications of your PHI. You may request that Peppy communicate with you through alternate means or at an alternate location, and Peppy will accommodate your reasonable requests. You must submit your request in writing to Peppy.

Restrictions. You have the right to request restrictions on certain uses and disclosures of PHI for treatment, payment, or healthcare operations. You also have the right to request that Peppy restrict its disclosures of PHI to only certain individuals involved in your care or the payment of your care. You must submit your request in writing to Peppy. Peppy is not required to comply with your request. However, if Peppy agrees to comply with your request, it will be bound by such agreement, except when otherwise required by law or in the event of an emergency.

Inspection and Copies. You have the right to inspect and copy your PHI. You must submit your request in writing to Peppy. Peppy may impose a fee for the costs of copying, mailing, labor and supplies associated with your request. Peppy may deny your request to inspect and/or copy your PHI in certain limited circumstances. If that occurs, Peppy will inform you of the reason for the denial, and you may request a review of the denial.

Amendment. You have a right to request that Peppy amend your PHI if you believe it is incorrect or incomplete, and you may request an amendment for as long as the information is maintained by Peppy. You must submit your request in writing to Peppy and provide a reason to support the requested amendment. Peppy may, under certain circumstances, deny your request by sending you a written notice of denial. If Peppy denies your request, you will be permitted to submit a statement of disagreement for inclusion in your records.

Accounting of Disclosures. You have a right to receive an accounting of all disclosures Peppy has made of your PHI. However, that right does not include disclosures made for treatment, payment, or healthcare operations, disclosures made to you about your treatment, disclosures made pursuant to an authorization, and certain other disclosures. You must submit your request in writing to Peppy and you must specify the time period involved (which must be for a period of time less than six years from the date of the disclosure). Your first accounting will be free of charge. However, Peppy may charge you for the costs involved in fulfilling any additional request made within a period of 12 months. Peppy will inform you of such costs in advance, so that you may withdraw or modify your request to save costs.

Breach Notification. You have the right to be notified in the event that Peppy (or a Peppy Business Associate) discovers a breach of unsecured PHI.

Paper Copy. You have the right to obtain a paper copy of this Notice from Peppy at any time upon request. To obtain a paper copy of this notice, please contact Peppy at hello@peppy.health. 

Complaint. You may complain to Peppy and to the Secretary of the Department of Health and Human Services if you believe that your privacy rights have been violated. To file a complaint with Peppy, you must submit a statement in writing to Peppy: 1209 Orange St., Wilmington, DE 19801. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to: 200 Independence Avenue, SW, Washington, D.C., 20201, or by calling 1-877-696-6775, or by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. Peppy will not retaliate against you for filing a complaint.

Further Information. If you would like more information about your privacy rights, please contact Peppy at: hello@peppy.health. To the extent you are required to send a written request to Peppy to exercise any right described in this Notice, you must submit your request to Peppy at: 1209 Orange St., Wilmington, DE 19801.