Notice of Privacy Practices
At a glance
This notice explains how Open Medicine LLC may use and share your protected health information (PHI) as a medical practice, and the rights you have over it.
The short version: we use your health information to treat you, get paid for your care, and run the practice. Almost everything else needs your written OK. We never sell your health information, and you have real rights — to see it, correct it, restrict it, and get a copy.
What always needs your written OK
- Selling your protected health information — we never do this.
- Using or sharing your information for marketing (with only the narrow exceptions HIPAA allows).
- Using or sharing psychotherapy notes (with narrow legal exceptions).
- Any purpose not described in this notice or otherwise permitted by law.
This Notice applies to protected health information maintained by Open Medicine LLC in connection with medical-practice services, including records created or received through the website, patient portal, intake forms, telehealth, messages, payment and billing workflows, laboratory or record requests, and other care-related services. Open Medicine LLC is the covered entity responsible for this notice.
Our duties
In plain terms: The law requires us to protect your health information, give you this notice, and follow it. If our privacy practices change, the updated notice applies to information we already hold.
We are required by law to maintain the privacy and security of your protected health information, give you this Notice of our legal duties and privacy practices, follow the Notice currently in effect, and notify you if a breach compromises unsecured protected health information.
We may change this Notice and our privacy practices. Changes may apply to information we already hold and information we receive in the future. The current Notice will be posted on our website and available on request.
Effective date: July 10, 2026.
How we may use and share your health information
In plain terms: Without asking each time, we may use your information to treat you, to bill for your care, and to run the practice — plus a set of uses the law specifically permits or requires.
We may use and disclose your health information without your written authorization for:
- Treatment — to provide, coordinate, and manage your care. For example, we may share information with a pharmacy, laboratory, imaging center, specialist, telehealth service, or another clinician involved in your care.
- Payment — to bill and collect payment for services. For example, we may use visit, diagnosis, procedure, payment, or insurance information to process a charge, refund, claim, or patient statement.
- Health care operations — to run the practice. For example, quality review, training, credentialing, compliance, legal services, fraud and abuse detection, business planning, record management, audits, and security monitoring.
We may also use or disclose your information:
- With business associates — a business associate that performs services for us (hosting, secure communication, billing, e-signature, record storage, or other practice functions) must agree in a contract to protect your information.
- For appointment reminders, account notices, and health-related services that may interest you.
- As required or permitted by law — including reporting to public-health authorities, the Florida Department of Health, the FDA for adverse events or product issues, health oversight agencies, workers’ compensation programs, law enforcement in limited circumstances, courts or administrative proceedings under lawful process, coroners or medical examiners, correctional institutions when applicable, military or veterans authorities when required, or to report suspected abuse, neglect, domestic violence, or a serious threat to health or safety.
- For research only when permitted by law, such as with appropriate review board approval, authorization, waiver, or de-identification.
Extra-protected information
In plain terms: Some records get extra legal protection. When a stricter law applies, we follow the stricter law.
Some information may receive additional protection under federal or state law, including certain substance use disorder treatment records, mental health records, HIV or sexually transmissible disease information, genetic information, reproductive health information, and other specially protected records. When a law gives greater privacy protection than this Notice, we will follow the more protective law.
Substance use disorder (SUD) treatment records — 42 CFR Part 2
In plain terms: Federal “Part 2” rules give certain addiction-treatment records extra protection. In general, we can’t redisclose them, or use them against you in a legal case, without your written consent or a court order.
If we create or receive records protected by federal regulations at 42 CFR Part 2 (which cover certain substance use disorder treatment records), we follow those additional rules. Such records generally may not be redisclosed without your written consent or as otherwise permitted by Part 2, and generally may not be used or disclosed in legal proceedings against you without your written consent or a court order. You may request an accounting of certain disclosures of these records.
Uses that need your written authorization
In plain terms: For anything outside the uses above, we need your signed OK first — and you can take it back in writing.
We will not do any of the following without your signed authorization:
- Use or disclose psychotherapy notes, with narrow legal exceptions.
- Use or disclose your information for marketing, except as permitted by HIPAA.
- Sell your protected health information.
- Use or disclose your information for another purpose not described in this Notice or otherwise permitted by law.
You may revoke an authorization at any time in writing, except to the extent we have already relied on it.
Fundraising: Open Medicine does not use your information for fundraising.
Your rights
In plain terms: You can see and get a copy of your record, ask us to fix it, ask us to limit sharing, ask for private communications, get a paper copy of this notice, be told about a breach, and complain — without penalty.
You have the right to:
- Inspect and get a copy of your health record, electronic or paper, generally within 30 days of a written request. We may charge a reasonable, cost-based fee where allowed by law.
- Ask us to send a copy to someone else when your request is signed, in writing, and clearly identifies where to send the information.
- Request corrections (amendment) if you believe your record is wrong or incomplete. We may deny the request in certain cases and will tell you why in writing, generally within 60 days.
- An accounting of disclosures we have made of your information, other than for treatment, payment, operations, disclosures to you, disclosures you authorized, and certain other exceptions, for up to six years before your request.
- Request restrictions on how we use or disclose your information. We are not required to agree, except we must honor a request not to disclose information to your health plan for services you paid for in full out of pocket when the disclosure is for payment or health care operations and is not otherwise required by law.
- Request confidential communications by asking us to contact you in a specific way or at a specific location. We will accommodate reasonable requests.
- Choose someone to act for you if that person has medical power of attorney, guardianship authority, or another legal right to act as your personal representative.
- A paper copy of this Notice at any time, even if you agreed to receive it electronically.
- Be notified of a breach of your unsecured protected health information.
- File a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.
To exercise any of these rights, contact us in writing at support@openmedicine.md or 6901A N 9th Ave # 586, Pensacola, FL 32504. We may ask you to use a specific form or verify your identity before fulfilling a request.
Complaints
In plain terms: If you think your privacy rights were violated, you can complain to us or to the federal government. We will never retaliate against you for it.
If you believe your privacy rights have been violated, you may file a complaint with us at support@openmedicine.md, by phone at +1 (850) 462-3422, or at 6901A N 9th Ave # 586, Pensacola, FL 32504 — or with the U.S. Department of Health and Human Services, Office for Civil Rights at hhs.gov/ocr or 1-800-368-1019.
You will not be penalized or retaliated against for filing a complaint.
Contact
Privacy Officer, Open Medicine LLC
6901A N 9th Ave # 586
Pensacola, FL 32504
Phone: +1 (850) 462-3422
support@openmedicine.md