Notice of Privacy Practices

Effective Date: December 17, 2025 (Revised)

AlphaMD LLC (hereafter "AlphaMD") is committed to safeguarding your Protected Health Information (PHI) in accordance with applicable federal and state law, including the Health Insurance Portability and Accountability Act (HIPAA). This Notice of Privacy Practices (the "Notice") explains how we handle your PHI, your rights regarding that information, and how you can contact us about our privacy practices.

Our Responsibilities

• Maintain Privacy: We are required by law to maintain the privacy and security of your PHI.
• Provide a Notice: We must give you this Notice of our legal duties and privacy practices regarding your PHI.
• Abide by the Notice: We will follow the terms of this Notice as long as it remains in effect.
• Notify You of Breaches: We will notify you promptly if a breach occurs that may compromise the privacy or security of your PHI.
• Right to Change Notice: We reserve the right to change our privacy practices and the terms of this Notice at any time, as allowed by law. We will make new versions of this Notice available upon request or post them on our website.

How We Use and Disclose Your PHI

Under HIPAA, AlphaMD may use and disclose your PHI for specific purposes, without needing additional authorizations from you, as listed below.

1. Consultations (Treatment)

   We may use or disclose your PHI to a physician or other healthcare provider who is involved in your treatment or to coordinate your care.

2. Billing and Payment (Payment)

   We may use or disclose your PHI to obtain payment for healthcare services rendered to you. For instance, we may provide certain portions of your PHI to your health plan or insurer so that we can be paid for the services provided to you.

3. Healthcare Operations

   We may use or disclose your PHI for our internal operations, which include:

   • Quality assessment and improvement activities
   • Reviewing the competence or qualifications of healthcare professionals
   • Provider performance evaluations
   • Conducting training programs
   • Accreditation, certification, licensing, and credentialing activities

4. With Your Authorization

   Beyond treatment, payment, and healthcare operations, AlphaMD will not use or disclose your PHI without first obtaining your written authorization. You may revoke your authorization in writing at any time, although any use or disclosure that occurred prior to revocation cannot be undone.

5. Family, Friends, and Others Involved in Your Care

   Disclosures to Family/Friends: We may disclose your PHI to family or friends directly involved in your care or payment for your care, but only if you agree or do not object.

   Notification Purposes: If you are incapacitated or in an emergency, we may disclose limited information to your personal representative or a family member based on our professional judgment.

6. Persons Involved in Care or Notification

   We may use or disclose PHI to help notify a family member, personal representative, or someone responsible for your care of your location, general condition, or death.

7. Required by Law

   We will disclose your PHI when required by federal, state, or local law or regulation.

8. Marketing

   We will not use your PHI for marketing purposes without your explicit written authorization, unless permitted by HIPAA (e.g., face-to-face communications about treatment alternatives).

9. National Security

   We may disclose PHI of Armed Forces personnel under certain circumstances to authorized federal officials for national security and intelligence activities, or to correctional institutions or law enforcement officials having lawful custody of an inmate.

10. Respond to Lawsuits and Legal Actions

    We may share PHI about you in response to a valid court or administrative order, or in response to a subpoena that meets HIPAA requirements.

11. Appointment Reminders

    We may use or disclose your PHI to send you appointment reminders via voicemail, email, text message, or letters.

Your Rights Regarding PHI

1. Right to Inspect and Obtain Copies

   You have the right to view and obtain copies of your PHI in a designated record set, with limited exceptions. You must submit a written request, and we may charge a reasonable, cost-based fee for copies, mailing, or staff time. If you request an alternative format (e.g., digital copy, summary), we will attempt to accommodate it if feasible.

2. Right to Request Restrictions

   You have the right to request additional restrictions on certain uses or disclosures of your PHI. While we will consider your request, we are not required to agree to any restriction. If we do agree, we will abide by it except in an emergency.

3. Right to Request Confidential Communications

   You have the right to request that we communicate with you via alternative means or at alternative locations (e.g., sending correspondence to a P.O. Box). Your request must be in writing and must specify how or where you wish to be contacted. We will accommodate reasonable requests.

4. Right to Amend

   If you believe your PHI is incorrect or incomplete, you have the right to request an amendment. Your request must be in writing, stating the reason for the amendment. If we deny your request, we will provide you with a written explanation.

5. Right to an Accounting of Disclosures

   You have the right to request a list (accounting) of certain disclosures of your PHI made by AlphaMD in the six years prior to your request date, except for disclosures made for treatment, payment, or healthcare operations, and other specific exceptions.

6. Right to a Paper or Electronic Copy of This Notice

   You have the right to receive a paper copy of this Notice at any time, even if you initially received it electronically.

How We Protect Your PHI

AlphaMD implements appropriate administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, or disclosure. This includes encryption of electronic health records where required, secure data storage, and limiting access to PHI only to authorized staff.

Questions or Complaints

If you would like more information about our privacy practices or have concerns or complaints, you can contact our designated Privacy Official. If you believe we have violated your privacy rights, you may file a complaint with AlphaMD or the U.S. Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.

This Notice of Privacy Practices explains how AlphaMD handles PHI under HIPAA. We encourage you to read it carefully and contact us at privacy@alphamd.org if you have any questions.

Last updated: December 17, 2025.