HIPAA Privacy Notice

Hello Dose HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date: June 1, 2026
This Notice of Privacy Practices (this “Notice”) describes how NP IN FAMILY HEALTH BANAYAN P.C. d/b/a Hello Dose and/or any affiliated covered health care provider entities participating in your care (“Hello Dose,” “we,” “us,” or “our”) may use and disclose your protected health information (“PHI”), as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). PHI is information that identifies you and relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or payment for health care.
This Notice explains your HIPAA privacy rights, our legal duties with respect to your PHI, and how you may access this information. This Notice applies to PHI collected, used, or disclosed through the Hello Dose website, mobile application, patient portal, telehealth services, secure messaging, scheduling tools, prescription workflow, coaching services, and related communications systems. This Notice does not apply to information that is not covered by HIPAA. For terms that apply to non-HIPAA covered products and services, please see our general Privacy Policy, which can be found at https://hellodose.com/privacy-policy/ .
We reserve the right to change our privacy practices and the terms of this Notice at any time and reserve the right to make any updated or new notice provisions effective for all protected health information that we maintain. If we make changes, we will notify you by revising the date listed at the top of this Notice. Although this Notice is provided to you electronically, you have the right to request a paper copy at any time.
Your Rights
You have the following rights with respect to your PHI:
Receive an electronic or paper copy of your medical record.
You have the right to inspect and obtain an electronic or paper copy of your PHI, medical record, or other health information that we maintain about you in a designated record set, with limited exceptions. We will provide you a copy or summary of your health information, usually within 30 days of your request.
Request an amendment or correction.
If you believe that your PHI is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, but we will explain any denial in writing within 60 days of your request.
An accounting of disclosures.
You have the right to request a list (an accounting) of certain disclosures we have made concerning your PHI, subject to applicable exceptions and limitations. We will provide you with the number of times we have shared your health information within six years of the request date, with whom we have shared it, and why.
We will provide you with one accounting per year for free. Any additional accountings requested will incur a reasonable, cost-based fee.
Request restrictions or limitations.
You have the right to request that we restrict certain uses or disclosures of your PHI for treatment, payment, or healthcare operations and to request restrictions on disclosures to family members or others involved in your care. We are not required to agree to all requests, and we may deny your request if it would affect your care, except where otherwise required by HIPAA.
Request confidential communications.
You have the right to ask us to contact you in a specific way or at a specific location, such as by using a different mailing address, phone number, or secure communication method.
Receive a paper copy of this Notice.
You have the right to request a paper copy of this Notice at any time, even if you agreed to receive it electronically. We will provide you with a paper copy promptly upon your request.
Receive notifications following a breach.
You have the right to be notified following a breach of your unsecured PHI, as required by law.
Select an agent or choose someone to act for you.
If you have given someone medical power of attorney or have a legal guardian, that person may be able to exercise rights on your behalf and make choices about your health information. We will make sure any designated person has the requisite authority and can act for you before we take any action.
File a complaint.
You have the right to complain to us and to the U.S. Department of Health and Human Services (“HHS”) if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.
How to exercise your rights or file a complaint with us, please contact us at:
Bracha Banayan, Privacy Officer
NP IN FAMILY HEALTH BANAYAN P.C.
d/b/a Hello Dose
980 East 12th Street
Brooklyn, NY 11230
[email protected]
(607) 638-3948
You may also file a complaint with HHS, Office for Civil Rights, through the OCR Complaint Portal at https://ocrportal.hhs.gov/ocr/cp/complaint_frontpage.jsf, or by mail to the appropriate OCR regional office.
Your Choices

For certain health information, you can tell us your choices about what we share. You have both the right and choice to tell us to:
Share information with your family, close friends, or others involved in your care or payment for your care;
Share information in a disaster relief situation; and/or
Include your information in a hospital directory.
If you have a clear preference for how we share your information in the situations described above, please let us know.

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
We will never share your information under the following circumstances unless you give us written permission:
Marketing purposes
Sale of your information
Most sharing of psychotherapy notes
In certain cases, we may contact you for fundraising efforts. You always have the option to tell us not to contact you again.
Our Duties and Responsibilities

We are required by law to:
Maintain the privacy of your PHI.
Give you this Notice of our legal duties and privacy practices.
Follow the terms of the Notice that is currently in effect.
Notify you if there is a breach of your unsecured PHI as required by law.
Comply with applicable federal and state privacy laws that are more protective than HIPAA, when applicable.

Our Uses and Disclosures:
We may use and disclose your PHI without your written authorization for the following purposes:
Treatment.
We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes sharing information with licensed providers, nurse practitioners, physicians, pharmacies, laboratories, coaches, care coordinators, and other professionals involved in your care.
Payment.
We may use and disclose your PHI to obtain payment for the healthcare services we provide. This may include billing, claims handling, eligibility verification, payment collection, payment processing, and related activities.
Healthcare operations.
We may use and disclose your PHI for our health care operations. For example, we may use PHI for quality assessment, clinical review, training, credentialing, compliance, auditing, customer service, and business planning.
Other uses and disclosures permitted or required by law, such as:

Public health activities;
Health oversight activities;
Judicial and administrative proceedings;
Law enforcement purposes;
To avert a serious threat to health or safety;
Organ and tissue donation;
Research, under limited circumstances and with appropriate approvals;
Workers’ compensation and similar programs; and/or
Military, national security, and correctional institution functions, where applicable.

Some uses and disclosures require your authorization. For example, we will obtain your written authorization before using or disclosing your PHI for marketing purposes, except where HIPAA permits the communication without authorization.
We will never sell your PHI, and we will not share your PHI unless you have given us a valid written authorization or unless another HIPAA exception applies. If an authorization is required for a disclosure of PHI, we will not use or disclose your PHI for third-party pharmaceutical marketing or similar purposes without your express written authorization.
Where applicable state law provides greater privacy protection than HIPAA, we will comply with that law.
Special categories of information
Some information may have additional protections under federal or state law, including records subject to 42 CFR Part 2 or other specially protected health information laws. Where those laws apply, we will comply with them. If any information is subject to other federal confidentiality laws, including 42 CFR Part 2, those laws may impose additional restrictions.
Website and app posting
Because Hello Dose maintains a website and mobile application that provide information about its services, this Notice may be accessed through the website and the app, and a copy may be made available electronically or in paper form upon request.