HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date: June 1, 2026
This Notice of Privacy Practices (“Notice”) describes how NP IN FAMILY HEALTH BANAYAN P.C. d/b/a Hello Dose and/or any affiliated covered health care provider entities participating in your care (“Hello Dose,” “we,” “us,” or “our”) may use and disclose your protected health information (“PHI”), your rights regarding your PHI, and our legal duties with respect to your PHI. This Notice applies to PHI collected, used, or disclosed through the Hello Dose website, mobile application, patient portal, telehealth services, secure messaging, scheduling tools, prescription workflow, coaching services, and related communications systems.
PHI is information that identifies you and relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or payment for health care.
1. Our duties:
We are required by law to:
- Maintain the privacy of your PHI.
- Give you this Notice of our legal duties and privacy practices.
- Follow the terms of the Notice that is currently in effect.
- Notify you if there is a breach of your unsecured PHI as required by law.
- Comply with applicable federal and state privacy laws that are more protective than HIPAA, when applicable.
2. How we may use and disclose your PHI without your authorization:
We may use and disclose your PHI without your written authorization for the following purposes:
a. Treatment
We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes sharing information with licensed providers, nurse practitioners, physicians, pharmacies, laboratories, coaches, care coordinators, and other professionals involved in your care.
b. Payment
We may use and disclose your PHI to obtain payment for the health care services we provide. This may include billing, claims handling, eligibility verification, payment collection, payment processing, and related activities.
c. Healthcare operations
We may use and disclose your PHI for our health care operations. For example, we may use PHI for quality assessment, clinical review, training, credentialing, compliance, auditing, customer service, and business planning.
d. Other uses and disclosures permitted or required by law
e. We may also use or disclose your PHI without your authorization for certain other purposes permitted or required by law, including:
- Public health activities;
- Health oversight activities;
- Judicial and administrative proceedings;
- Law enforcement purposes;
- To avert a serious threat to health or safety;
- Organ and tissue donation;
- Research, under limited circumstances and with appropriate approvals;
- Workers’ compensation and similar programs;
- Military, national security, and correctional institution functions, where applicable.
3. Uses and disclosures that require your authorization
We will obtain your written authorization before using or disclosing your PHI for marketing purposes, except where HIPAA permits the communication without authorization. We will not sell your PHI unless you have given us a valid written authorization or unless another HIPAA exception applies. If an authorization is required for a disclosure of PHI, we will not use or disclose your PHI for third-party pharmaceutical marketing or similar purposes without your express written authorization.
Where applicable state law provides greater privacy protection than HIPAA, we will comply with that law.
4. Your rights regarding your PHI
You have the following rights with respect to your PHI:
a. Right to inspect and copy
You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, with limited exceptions. You may request an electronic copy if we maintain your information electronically, where applicable.
b. Right to request an amendment
If you believe your PHI is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, but we will explain any denial in writing.
c. Right to an accounting of disclosures
You have the right to request an accounting of certain disclosures of your PHI, subject to applicable exceptions and limitations.
d. Right to request restrictions
You have the right to request that we restrict certain uses or disclosures of your PHI for treatment, payment, or health care operations, and to request restrictions on disclosures to family members or others involved in your care. We are not required to agree to all requests, except where HIPAA requires us to agree.
e. Right to request confidential communications
You have the right to ask us to contact you in a specific way or at a specific location, such as by using a different mailing address, phone number, or secure communication method.
f. Right to receive a paper copy of this Notice
You have the right to request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
g. Right to be notified following a breach
You have the right to be notified following a breach of your unsecured PHI when notification is required by law.
h. Right to complain
You have the right to complain to us and to the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.
How to exercise your rights or file a complaint:
To exercise your rights, ask questions, request copies, request amendments, or file a complaint, contact:
Bracha Banayan, Privacy Officer
NP IN FAMILY HEALTH BANAYAN P.C.
d/b/a Hello Dose
980 East 12th Brooklyn, NY 11230
[email protected]
(607) 638-3948
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, through the OCR Complaint Portal at https://ocrportal.hhs.gov/ocr/cp/complaint_frontpage.jsf, or by mail to the appropriate OCR regional office.
5. Special categories of information
Some information may have additional protections under federal or state law, including records subject to 42 CFR Part 2 or other specially protected health information laws. Where those laws apply, we will comply with them. If any information is subject to other federal confidentiality laws, including 42 CFR Part 2, those laws may impose additional restrictions.
6. Website and app posting
Because Hello Dose maintains a website and mobile application that provide information about its services, this Notice may be accessed through the website and the app, and a copy may be made available electronically or in paper form upon request. HHS requires covered entities to prominently post and make available their notice on any website that provides information about customer services or benefits.
7. Changes to this Notice
We reserve the right to change the terms of this Notice and to make the revised Notice effective for PHI we already have about you as well as any PHI we receive in the future. If we make material changes, we will post the revised Notice and make it available as required by law.
Contact Us
