Notice of Privacy
Practices.

01 · Our obligations

Androgenix is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”). We are required by law to:

• Maintain the privacy of your Protected Health Information (“PHI”)
• Provide you with this Notice describing our legal duties and privacy practices
• Follow the terms of the Notice currently in effect
• Notify you if a breach of your unsecured PHI occurs

02 · What is Protected Health Information?

PHI is any individually identifiable information about your health, healthcare, or payment for healthcare that we create or receive. It includes your labs, provider notes, prescriptions, appointments, diagnoses, and billing records.

03 · Uses & disclosures for treatment, payment, operations

For treatment

We use and disclose your PHI to provide your clinical care: for example, ordering labs, coordinating with our compounding pharmacies and telehealth partners, consulting among our providers, and writing and adjusting your treatment protocol.

For payment

We use and disclose your PHI to obtain payment for services: for example, generating superbills for out-of-network reimbursement, processing credit card transactions, and coordinating with Cherry for patient financing.

For healthcare operations

We use and disclose your PHI for the day-to-day operation of our practice: quality improvement, staff training, regulatory compliance, audit and accreditation activities, and internal management.

04 · Other permitted uses & disclosures

We may use or disclose your PHI without your authorization in the following circumstances:

• Appointment reminders & health information: we may contact you to remind you about appointments or to tell you about treatment alternatives or health services we offer.
• Business Associates: we disclose PHI to vendors who perform services on our behalf under written Business Associate Agreements that require them to protect the information (see our Privacy Policy for the list).
• Required by law: when required by federal, state, or local law.
• Public health activities: reporting to public health authorities for disease prevention and control, FDA-required reporting of adverse events, and similar.
• Health oversight activities: audits, investigations, and licensing actions by government oversight agencies.
• Judicial & administrative proceedings: in response to a court order, subpoena, or similar legal process.
• Law enforcement: when required by law, including reporting of certain wounds or suspected abuse.
• To avert a serious threat to health or safety: when necessary to prevent a serious and imminent threat.
• Workers’ compensation: as authorized by workers’ compensation laws.
• Disaster relief: to organizations assisting in disaster relief efforts.

05 · Uses requiring your authorization

Most uses or disclosures of PHI not listed above require your written authorization. Specifically:

• Marketing: we will not use your PHI for marketing communications that are not directly related to your care without your written authorization.
• Sale of PHI: we will not sell your PHI. Period.
• Psychotherapy notes: if applicable, most disclosures of psychotherapy notes require your authorization.

You may revoke an authorization at any time in writing, except to the extent we have already acted in reliance on it.

06 · Your rights regarding your PHI

You have the following rights:

• Right to inspect & copy. You may request a copy of your medical and billing records. We will provide them in the form you request (including electronic) if readily producible, typically within 30 days.
• Right to amend. If you believe information in your record is incorrect, you may request an amendment. We may deny in limited circumstances and will explain our reasoning.
• Right to an accounting of disclosures. You may request a list of certain disclosures we’ve made of your PHI.
• Right to request restrictions. You may request restrictions on how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree to most restrictions, but we will consider them. We must agree to a restriction on disclosures to a health plan for services you paid for in full out-of-pocket.
• Right to confidential communications. You may request that we contact you about medical matters in a specific way or at a specific location (e.g., only at your mobile number, not your home).
• Right to a paper copy of this Notice, even if you’ve agreed to receive it electronically.
• Right to be notified of a breach. We will notify you in writing if there is a breach of your unsecured PHI.

To exercise any of these rights, contact our Privacy Official (see Section 10).

07 · Breach notification

If we discover a breach of your unsecured PHI, we will notify you without unreasonable delay and no later than 60 days after discovery, in accordance with the HIPAA Breach Notification Rule.

08 · State-law protections

Some state laws provide greater protections for certain categories of PHI (for example, HIV status, mental health, substance-use treatment, reproductive health, or genetic information). Where state law is more protective than HIPAA, we follow state law.

09 · How to file a complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights.

10 · Contact our Privacy Official

11 · Changes to this Notice

We reserve the right to change the terms of this Notice at any time. If we make a material change, the revised Notice will apply to all Protected Health Information that we maintain, including information we created or received before the change took effect.

A revised Notice will be posted on this page with a new effective date, and a copy will be made available at our North Palm Beach office. You may request a paper copy of the current Notice at any time, at no charge, by calling (561) 331-5813.