Notice of Privacy Practices

Effective date: August 26, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our duties

Legacy Integrative Healthcare ("we," "us") is required by law to maintain the privacy and security of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know in writing.

How we may use and disclose your health information

Treatment, payment, and health care operations

• Treatment. We use and share your information to provide and coordinate your care, for example with specialists, laboratories, pharmacies, and other providers involved in your care.
• Payment. We use and share your information to bill and get paid by health plans and others, for example by giving your health plan information about the services you received.
• Health care operations. We use and share your information to run our practice, improve your care, and contact you when necessary, for example for quality review, training, compliance, and appointment reminders.

People involved in your care

Unless you object, we may share information with a family member, friend, or other person you identify who is involved in your care or payment for your care, and we may share information in a disaster relief situation. If you are not able to tell us your preference, for example if you are unconscious, we may share your information if we believe it is in your best interest, or when needed to lessen a serious and imminent threat to health or safety.

Other uses and disclosures permitted or required by law

We may use or share your information without your written authorization in the following situations, as permitted or required by federal and Maryland law:

• As required by law, including to the U.S. Department of Health and Human Services when it wants to confirm our compliance with federal privacy law.
• Public health and safety, such as preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to anyone's health or safety.
• Health oversight activities authorized by law, such as audits, investigations, inspections, and licensure.
• Lawsuits and legal actions, in response to a court or administrative order, or in response to a subpoena when the law allows.
• Law enforcement purposes, when the law allows, such as to identify or locate a suspect, fugitive, material witness, or missing person.
• Coroners, medical examiners, and funeral directors, as needed for them to carry out their duties.
• Organ and tissue donation requests.
• Research, when approved through a process that protects your privacy.
• Workers' compensation claims and similar programs.
• Specialized government functions, such as military, national security, and presidential protective services.
• Correctional institutions and law enforcement custody, as needed for your health care or the health and safety of others.

Uses that require your written authorization

We will not use or share your information for marketing purposes, sell your information, or share most psychotherapy notes without your written authorization. Any other use or disclosure not described in this notice will be made only with your written authorization, which you may revoke in writing at any time, except to the extent we have already acted on it.

Special protections

Some information, such as HIV/AIDS, mental health, genetic, and substance use disorder treatment information, may have additional protection under federal or Maryland law, including the Maryland Confidentiality of Medical Records Act. Where those laws are more protective than federal privacy law, we follow them. If we receive substance use disorder treatment records protected by 42 CFR Part 2, we will not use or disclose them in civil, criminal, administrative, or legislative proceedings against you unless you give written consent or a court order is issued, as Part 2 requires.

Your rights

When it comes to your health information, you have the following rights. To use any of them, contact us using the information at the end of this notice.

• Get a copy of your medical record. You can ask to see or get a paper or electronic copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request, and may charge a reasonable, cost-based fee.
• Ask us to correct your medical record. You can ask us to correct health information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
• Request confidential communications. You can ask us to contact you in a specific way, for example by home or office phone, or to send mail to a different address. We will say yes to all reasonable requests.
• Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment, or our operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service or item out of pocket in full, you can ask us not to share that information with your health plan for payment or operations, and we will say yes unless a law requires us to share it.
• Get a list of those with whom we have shared information. You can ask for a list (accounting) of the times we have shared your information for six years before the date you ask, who we shared it with, and why. It will include all disclosures except those for treatment, payment, and health care operations and certain other disclosures, such as any you asked us to make. We will provide one accounting a year free and may charge a reasonable, cost-based fee for additional requests within 12 months.
• Get a copy of this notice. You can ask for a paper copy of this notice at any time, even if you have agreed to receive it electronically.
• Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority before we take any action.
• Be notified of a breach. You have the right to be notified if a breach of your unsecured health information occurs.

Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, in our office, and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer using the information below. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.

Contact

Privacy Officer, Legacy Integrative Healthcare
9854 Liberty Rd, Suite D, Randallstown, MD 21133
Phone: (443) 589-6355  ·  Email: Info@legacyintegrativehealth.org