HIPAA Notice of Privacy Practices

1. Introduction

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Kinito Physical Therapy and our affiliated entities are committed to protecting the privacy of your health information. This Notice describes our legal duties and privacy practices concerning protected health information (PHI).

2. How We Use and Disclose Your Health Information

Treatment

We use your health information to provide physical therapy treatment, conduct evaluations, develop treatment plans, provide therapeutic interventions, and coordinate your care with other providers.

Payment

We use and disclose health information to bill for services, including creating insurance claims, determining eligibility, processing claims, and collecting payments. Services may be billed through different affiliated entities depending on payer requirements.

Healthcare Operations

We use health information for quality improvement, peer review, training staff, compliance programs, and business operations.

Required By Law

We may disclose health information when required by court orders, subpoenas, public health activities, or law enforcement requests.

3. Your Privacy Rights

Under HIPAA and applicable state laws, you have the following rights:

• Right to Access: Request and receive copies of your health information
• Right to Amendment: Request correction of inaccurate or incomplete information
• Right to Accounting: Request an accounting of disclosures made
• Right to Restrictions: Request restrictions on use and disclosure
• Right to Confidential Communication: Request specific methods of communication
• Right to Breach Notification: Receive notification if your information is breached
• Right to File a Complaint: File a complaint with us or HHS without retaliation

4. Data Security

We implement comprehensive physical, technical, and administrative safeguards including encryption, secure access controls, regular security assessments, employee training, and audit monitoring.

5. Breach Notification

If your health information is breached, we will notify you without unreasonable delay with details about the breach, steps to protect yourself, and our response.

6. Retention

We retain health records for a minimum of six to seven years following last treatment, or as required by Oklahoma law. Records are securely destroyed after the retention period.

7. Complaints

If you believe your privacy rights have been violated, file a complaint with our Privacy Officer (privacy@kinitopt.com) or with HHS Office for Civil Rights (www.hhs.gov/ocr/privacy/hipaa/complaints, 1-800-447-8477). We will not retaliate against you for filing a complaint.

8. Contact Information