Who this notice covers
This Notice of Privacy Practices applies to Rehab® Health Lab and the licensed providers, pharmacies, and business associates who deliver care through our telehealth platform. We are required by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law to protect the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
How we may use and disclose your health information
- Treatment: to allow licensed providers, pharmacists, and lab partners to evaluate you, issue and fill prescriptions, and coordinate follow-up care.
- Payment: to process your payment, verify a charge or refund, and handle billing disputes with our payment processor.
- Health care operations: quality review, provider credentialing, medical record keeping, secure technology support, and compliance auditing.
- As required by law: including public health reporting, adverse-event reporting to the FDA, court orders, subpoenas, and law-enforcement requests permitted by HIPAA.
- To avert a serious threat to health or safety, and for certain oversight, research, and specialized government functions where HIPAA permits.
Uses that require your written authorization
We will not sell your PHI and will not use it for marketing that requires authorization, or disclose psychotherapy notes, without your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
Your rights
- Inspect and get a copy of your medical and billing records, generally within 30 days of your request.
- Request a correction to information you believe is incomplete or inaccurate.
- Request confidential communications at an alternate address, phone number, or email.
- Request restrictions on certain uses and disclosures, including a restriction on disclosure to a health plan for services you pay for in full yourself.
- Receive an accounting of certain disclosures of your PHI.
- Receive notification if a breach of your unsecured PHI occurs.
- Receive a paper or electronic copy of this notice at any time.
Telehealth and technology safeguards
Intake questionnaires, provider messages, and prescription records are transmitted over encrypted connections and stored in access-controlled systems. Our intake and pharmacy vendors operate under HIPAA business associate agreements. Standard email and SMS are not fully secure; if you contact us by those channels, only the information you choose to include is shared.
Our responsibilities
We are required to maintain the privacy and security of your PHI, notify you promptly if a breach compromises the privacy or security of your information, and follow the duties and privacy practices described in this notice. We may change this notice, and any change applies to information we already hold as well as information we receive in the future. The current version is always posted on this page.
How to file a complaint
If you believe your privacy rights have been violated, contact our Privacy Officer at support@rehabhealthlab.com or 715.303.1301, or write to Rehab® Health Lab, Attn: Privacy Officer, 3050 Village Park Dr., Plover, WI 54467. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.