At Lumelux Concierge Medicine & Wellness, we respect your privacy and are committed to protecting your personal health information (PHI). This Privacy Policy explains how we may use and disclose PHI and outlines your rights as a patient under the Health Insurance Portability and Accountability Act (HIPAA) and applicable Florida law.
How We Use and Disclose PHI
We will only use or disclose your PHI as permitted or required by law. HIPAA allows healthcare providers to use and disclose PHI without patient authorization for certain purposes, including:
• Treatment, payment and healthcare operations – We may use PHI to provide medical care, coordinate care with other providers, manage billing and collect payment for services.
• Disclosure to you – You are entitled to request and receive your own health information.
• Public interest and benefit activities – In limited circumstances, we may disclose PHI to public health authorities, law enforcement, or other entities for public health reporting, regulatory compliance, or similar purposes.
• Other uses – We may make incidental disclosures in the course of otherwise permitted uses, provided we have adopted reasonable safeguards and limit the information disclosed to the "minimum necessary".
Uses or disclosures outside of these situations—such as releasing your information to marketing partners or other third parties—will only occur with your written authorization. You may revoke an authorization at any time, except to the extent we have relied on it.
Your Rights
HIPAA gives patients specific rights regarding their PHI. These include:
• Right to notice – We must describe how we may use and disclose PHI, state our duty to protect your privacy, and provide contact information for questions or complaints.
• Right to access and copy records – You may review or request a copy of your PHI in our designated record set, subject to limited exceptions.
• Right to request an amendment – If you believe your record is incomplete or inaccurate, you can request an amendment; if we deny your request, we must tell you why.
• Right to an accounting of disclosures – You may request a list of disclosures we have made of your PHI over the past six years, except for disclosures related to treatment, payment, healthcare operations, or other limited exceptions.
• Right to request restrictions – You may ask us to limit certain uses and disclosures; although we are not required to agree, if we do agree we must honor that restriction.
• Right to request confidential communications – You may request that we send communications to a particular address or by alternative means (e.g., mail vs. voicemail).
Our Duties
We are required to:
• Maintain the privacy of PHI and provide this notice of our legal duties and privacy practices.
• Follow the terms of this policy and any updates to it.
• Notify you if there is a breach involving your PHI that requires notification.
Changes to This Policy
We may revise this Privacy Policy and will post the updated version on our website. The updated notice will apply to PHI we already have as well as to information we receive in the future. We will abide by the terms of the policy currently in effect.
Contact and Complaints
If you have questions, need more information, or believe your privacy rights have been violated, please contact us:
Lumelux Concierge Medicine & Wellness
Phone: 305.794.6356
Email: care@lumeluxconciergemedicine.com
You also have the right to complain to the Secretary of the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.