HIPAA NOTICE OF PRIVACY PRACTICES
HIPAA Notice of Privacy Practices
Effective April 14, 2003
Revised Effective Date: October 14, 2026
If you have any questions about this notice, please contact the Privacy Officer at Re3 Stem Cell and Healing Institute, PLLC (Re3), doing business as Center for Brain and Spine, Center for Regenerative and Aesthetic Wellness, and Center for Primary Care.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Re3 is committed to protecting the privacy and confidentiality of your protected health information ("PHI"). We create and maintain records regarding the healthcare services we provide to you. These records are used to provide quality care, obtain payment for services rendered, and comply with legal and regulatory requirements.
Federal and state laws require us to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and notify you following a breach of unsecured PHI when required by law.
We are also required to make a good-faith effort to obtain your written acknowledgment that you have received this Notice of Privacy Practices.
We are required to follow the duties and privacy practices described in the Notice currently in effect and to provide you with a copy of this Notice. We will not use or disupdclose your PHI for purposes other than those described in this Notice unless you provide written authorization or the use or disclosure is otherwise permitted or required by law.
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share information with physicians, specialists, hospitals, laboratories, imaging centers, pharmacies, therapists, or other healthcare providers involved in your care.
We may also use your PHI to contact you regarding treatment alternatives, follow-up care, appointment scheduling, and other health-related services.
Payment
We may use and disclose your PHI to obtain payment for healthcare services provided to you. This may include submitting claims to insurance companies, Medicare, Medicaid, workers' compensation programs, or other third-party payers.
Health Care Operations
We may use and disclose your PHI for healthcare operations necessary to run our practice. Examples include:
• Quality assessment and improvement activities
• Staff training and education
• Licensing and accreditation activities
• Business planning and administration
• Audits and compliance reviews
• Customer service and patient support
Appointment Reminders and Communications
We may contact you by phone, voicemail, text message, email, mail, or patient portal regarding appointments, treatment information, billing matters, or other healthcare-related communications.
Individuals Involved in Your Care
Unless you object, we may disclose relevant information to a family member, friend, caregiver, or other person involved in your care or payment for your care when appropriate.
USES AND DISCLOSURES REQUIRED OR PERMITTED BY LAW
Public Health Activities
We may disclose your PHI for public health activities, including:
• Preventing or controlling disease, injury, or disability
• Reporting births and deaths
• Reporting adverse reactions to medications or medical devices
• Reporting suspected abuse, neglect, or domestic violence when required by law
Health Oversight Activities
We may disclose PHI to government agencies authorized to oversee healthcare systems, government programs, licensing activities, investigations, inspections, audits, and regulatory compliance.
Judicial and Administrative Proceedings
We may disclose PHI in response to a court order, subpoena, discovery request, or other lawful process as permitted or required by applicable federal and state law. Such disclosures will be subject to any required patient notification and applicable confidentiality protections.
Law Enforcement
We may disclose PHI to law enforcement officials when required by law or in response to valid legal processes, including court orders, warrants, subpoenas, or similar legal requests.
Serious Threat to Health or Safety
We may use or disclose PHI when necessary to prevent or lessen a serious threat to the health or safety of an individual or the public.
Workers' Compensation and Work-Related Injuries
We may disclose PHI as authorized by workers' compensation laws or other programs providing benefits for work-related injuries or illnesses.
Coroners, Medical Examiners, and Funeral Directors
We may disclose PHI to coroners, medical examiners, and funeral directors as necessary to carry out their duties.
Military and Veterans
If you are a member of the armed forces, we may disclose your PHI as required by military authorities. We may also disclose information to the Department of Veterans Affairs when authorized by law.
National Security and Protective Services
We may disclose PHI to authorized federal officials for intelligence, national security, and protective services activities authorized by law.
Correctional Institutions
If you are an inmate or under the custody of law enforcement, we may disclose PHI to correctional institutions or law enforcement officials as permitted by law.
Research
We may use or disclose PHI for research purposes only when authorized by you or when permitted by applicable laws and regulations governing research activities.
Business Associates
We may disclose PHI to business associates who perform services on our behalf. These business associates are required by law and contract to safeguard your PHI.
Organ and Tissue Donation
We may disclose your protected health information (PHI) to organ procurement organizations or other authorized entities involved in organ, eye, or tissue donation and transplantation, as permitted by law.
Disaster Relief
We may disclose relevant PHI to organizations assisting with disaster relief efforts to help notify family members or others involved in your care of your location, general condition, or status, as permitted by law. You may express your preferences regarding these disclosures when circumstances allow.
Immunizations
We may disclose proof of immunization to a school when required for admission or enrollment, provided that we have obtained and documented the agreement required by applicable law.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
Right to Request Restrictions
You have the right to request restrictions on certain uses and disclosures of your PHI. While we are not required to agree to every request, we will comply with restrictions required by law.
If you pay for a service out-of-pocket in full, you may request that we not disclose information about that service to your health plan for payment or healthcare operations purposes, and we will comply unless disclosure is otherwise required by law.
Right to Confidential Communications
You have the right to request that we communicate with you in a certain way or at a certain location. We will accommodate reasonable requests.
Right to Inspect and Obtain Copies
You have the right to inspect and obtain copies of your medical and billing records, subject to limited exceptions allowed by law.
You may request copies in paper or electronic format when available. Reasonable cost-based fees may apply as permitted by law.
We will generally provide access to your records or a copy of your information within 30 days of receiving your request, subject to extensions and exceptions permitted by law.
Right to Request Amendment
If you believe information in your medical record is inaccurate or incomplete, you may request an amendment. We may deny your request under certain circumstances but will provide a written explanation if we do so.
We will respond to your request in writing, generally within 60 days, subject to extensions permitted by law.
Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures we have made of your PHI, excluding disclosures made for treatment, payment, healthcare operations, and certain other exceptions permitted by law.
You may request an accounting of certain disclosures made during the six years preceding your request. We will provide one accounting within a 12-month period at no charge. Additional requests during that period may be subject to a reasonable, cost-based fee.
Right to a Paper Copy of This Notice
You have the right to obtain a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.
Right to Be Notified of a Breach
You have the right to be notified if a breach of your unsecured PHI occurs and notification is required by law.
Right to Choose a Personal Representative
If you have a legally authorized personal representative, such as a legal guardian or an individual holding a valid medical power of attorney, that person may exercise certain rights and make decisions regarding your PHI on your behalf.
We will verify the individual's legal authority before allowing them to act on your behalf, consistent with applicable law.
SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS
Certain substance use disorder treatment records are subject to additional confidentiality protections under federal law, including 42 CFR Part 2. To the extent that Re3 maintains or receives records protected under 42 CFR Part 2, we will comply with applicable requirements governing their use and disclosure. These records may be used or disclosed with the patient's written consent or as otherwise permitted or required by law, including certain medical emergencies, audits, evaluations, and other legally authorized purposes.
When Part 2 records are received pursuant to a valid consent for treatment, payment, or health care operations, they may be used or redisclosed in accordance with applicable HIPAA and Part 2 requirements.
Part 2 records may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against a patient without the patient's written consent or a qualifying court order accompanied by a subpoena or other applicable legal mandate, as required by law. If Part 2-protected information is used for fundraising communications, we will provide any advance notice and opportunity to opt out required by law.
Part 2 records may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against a patient without the patient's written consent or a qualifying court order issued in accordance with 42 CFR Part 2. When required by law, the court order must be accompanied by a subpoena or other legal mandate compelling disclosure, and applicable notice and hearing protections must be observed.
OTHER USES AND DISCLOSURES
Marketing
We will obtain your written authorization before using or disclosing your PHI for marketing or promotional purposes when required by applicable federal or state law. Certain communications regarding your treatment, treatment alternatives, or other health-related services may be made without authorization as permitted by law.
Fundraising
Re3 does not currently use or disclose patients' protected health information for fundraising activities. If our fundraising practices change, we will comply with all applicable notice, consent, and opt-out requirements.
Sale of Protected Health Information
Re3 will not sell your PHI without your written authorization except as otherwise permitted by law.
Psychotherapy Notes
We will obtain your written authorization for most uses and disclosures of psychotherapy notes, when applicable.
Authorizations
Any authorization you provide may be revoked at any time in writing, except to the extent we have already acted in reliance on that authorization.
COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer. You will not be retaliated against for filing a complaint.
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Telephone: 1-877-696-6775
Website: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
CHANGES TO THIS NOTICE
We reserve the right to change the terms of this Notice and make the revised Notice effective for all PHI we maintain, including information obtained before the revision. Any revised Notice will be available upon request, posted in our offices, and made available on our websites at www.re3healing.com and www.brainandspinehealth.com.
CONTACT INFORMATION
Privacy Officer
Re3 Stem Cell and Healing Institute, PLLC
Phone: (941) 893-4669
Please contact our Privacy Officer if you have questions regarding this Notice or your privacy rights.