Notice of Privacy Practices

Luma Health & Wellness ("Luma") is required by law to maintain the privacy and security of your protected health information (PHI), provide you with this notice of our legal duties and privacy practices with respect to your PHI, notify you promptly following a breach of unsecured PHI, and follow the terms of the notice currently in effect.

We reserve the right to change this notice and to make the revised notice effective for PHI we already have as well as information we receive in the future. The current notice is always posted on this website, and a copy is available on request.

• Treatment — to provide, coordinate, or manage your care, including sharing information with pharmacies, laboratories, and other providers involved in your care.
• Payment — to bill and collect payment for services and to verify eligibility for benefits.
• Health care operations — for quality assessment, clinical review, training, business management, and general administration.
• Business associates — with vendors who perform services for us (for example, our electronic health record, payment processor, or shipping partner) under written agreements requiring them to protect your PHI.
• Individuals involved in your care — with a family member, friend, or personal representative you identify, to the extent permitted by law.
• As required by law — including public health activities, reporting abuse or neglect, health oversight activities, judicial and administrative proceedings, law enforcement purposes, serious threats to health or safety, specialized government functions, and workers' compensation.

The following uses and disclosures will be made only with your written authorization: most uses and disclosures of psychotherapy notes; uses and disclosures for marketing purposes; and disclosures that constitute a sale of PHI. Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Consistent with current federal requirements, we apply heightened protections to reproductive health care information and will not use or disclose that information for a prohibited purpose, including to investigate or impose liability on a person for seeking, obtaining, providing, or facilitating lawful reproductive health care. Where required, we will obtain a signed attestation before disclosing such information for certain purposes.

• Right to access — inspect and obtain a copy of your medical and billing records, including an electronic copy of records maintained electronically, generally within 30 days of your request. A reasonable, cost-based fee may apply.
• Right to request an amendment — ask us to correct information you believe is incorrect or incomplete. We may deny the request in certain cases and will explain why in writing.
• Right to confidential communications — ask us to contact you at an alternative address or by an alternative means. We will accommodate reasonable requests.
• Right to request restrictions — ask us to limit how we use or disclose your PHI. We are not required to agree, except that we must agree to a request to restrict disclosure to a health plan for an item or service you paid for in full out of pocket.
• Right to an accounting of disclosures — receive a list of certain disclosures we made of your PHI, generally for the six years prior to your request.
• Right to a paper or electronic copy of this notice — obtain a copy at any time, even if you agreed to receive it electronically.
• Right to breach notification — be notified if a breach of your unsecured PHI occurs.
• Right to choose someone to act for you — a personal representative with legal authority may exercise these rights on your behalf.
• Right to file a complaint — without retaliation of any kind.

We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of the electronic PHI we create, receive, maintain, or transmit. We limit access to PHI to workforce members and business associates who need it to perform their duties.

If you believe your privacy rights have been violated, you may file a complaint with us using the privacy contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201, by calling 1-877-696-6775, or at hhs.gov/ocr/privacy/hipaa/complaints. You will not be penalized or retaliated against for filing a complaint.

Privacy Contact, Luma Health & Wellness

3316 Griffin Rd, Fort Lauderdale, FL 33312

Phone: (786) 518-1905 · Email Lumahealthwellness@gmail.com