Innovative Express Care is required to comply with the federal health care privacy and security laws and maintain safeguards to protect the security of your health information. We devote considerable effort toward ensuring that your personal information is secure. Information regarding our use of health and other personal information is provided in our Site Privacy Policy and health information Notice of Privacy Practices. As part of providing you the Services, we may need to provide you with certain communications, such as appointment reminders, service announcements and administrative messages. These communications are considered part of the Services and your Account. While secure electronic messaging is always preferred to insecure email, under certain circumstances, insecure email communication containing personal health information may take place between you and Innovative Express Care. Innovative Express Care cannot ensure the security or confidentiality of messages sent by email.

We use and disclose your health information for the normal business activities that the law sees as falling in the categories of treatment, payment and health care operations. Below we provide examples of those activities, although not every use or disclosure falling within each category is listed:

Treatment – We keep a record of the health information you provide us. This record may include your test results, diagnoses, medications, your response to medications or other therapies, and information we learn about your medical condition through the online services. We may disclose this information so that other doctors, nurses, and entities such as laboratories can meet your healthcare needs.

Payment – We document the services and supplies you receive when we are providing care to you so that you, your insurance company or another third party can pay us. We may tell your health plan about upcoming treatment or services that require prior approval by your health plan.

Health Care Operations – Health information is used to improve the services we provide, to train staff and students, for business management, quality improvement, and for customer service. For example, we may use your health information to review our treatment and services and to evaluate the performance of our staff in caring for you.

We may also use your health information to:

• Comply with federal, state or local laws that require disclosure.
• Assist in public health activities such as tracking diseases or medical devices.
• Inform authorities to protect victims of abuse or neglect.
• Comply with Federal and state health oversight activities such as fraud investigations.
• Respond to law enforcement officials or to judicial orders, subpoenas or other process.
• Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.
• Facilitate organ and tissue donation or procurement.
• Conduct research following internal review protocols to ensure the balancing of privacy and research needs.
• Avert a serious threat to health or safety.
• Assist in specialized government functions such as national security, intelligence and protective services.
• Inform military and veteran authorities if you are an armed forces member (active or reserve).
• Inform a correctional institution if you are an inmate.
• Inform workers’ compensation carriers or your employer if you are injured at work.
  Recommend treatment alternatives.
• Tell you about health-related products and services.
• Communicate within our organization for treatment, payment, or health care operations.
• Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment or licensing.
• Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.

We may also use or disclose your personal or health information for the following operational purposes. For example, we may:

• Communicate with individuals involved in your care or payment for that care, such as friends and family.
• Send appointment reminders.
• You may tell us that you do not want us to use or disclose your information for these two activities.
• All other uses and disclosures, not previously described, may only be done with your written authorization. For example, we need your authorization before we disclose your psychotherapy notes. We will also obtain your authorization before we use or disclose your health information for marketing purposes or before we would sell your information. You may revoke your authorization at any time; however, this will not affect prior uses and disclosures.

In some cases state law may require that we apply extra protections to some of your health information.

We are required by law to:

• • Maintain the privacy of your health information
  • Provide this notice of our duties and privacy practices
  • Abide by the terms of the notice currently in effect.
  • Tell you if there has been a breach that compromises your health information.

We reserve the right to change privacy practices, and make the new practices effective for all the information we maintain. Revised notices will be posted on the Innovative Express Care website.

The law entitles you to:

• Inspect and copy certain portions of your health information. In most cases this will not include psychotherapy notes and we may deny your request under limited circumstances. (Fees may apply to this request). If we keep records electronically, you may request that we provide them to you in an electronic format.
• Request amendment of your health information if you feel the health information is incorrect or incomplete. (However, under certain circumstances we may deny your request.)
  Receive an accounting of certain disclosures of your health information made for the prior six (6) years, although this excludes disclosures for treatment, payment, health care operations. (Fees may apply to this request).
• Request that we restrict how we use or disclose your health information. (However, we are not required to agree with your requests, unless you request that we restrict information provided to a payor, the disclosure would be for the payor’s payment or health care operations, and you have paid for the health care services completely out of pocket).
• Request that we communicate with you at a specific telephone number or address.
• Obtain a paper copy of this notice even if you receive it electronically.

We may ask that you make some of these requests in writing.

If you believe that your privacy has been violated, you may file a complaint with us or with the Secretary of Health and Human Services in Washington, D.C. We will not retaliate or penalize you for filing a complaint with the facility or the Secretary.

To file a complaint with us or receive more information contact:

Phone: 872-395-8181
Email: health@InnovativeExpressCare.com

Address:

Innovative Express Care 2400 N. Ashland Ave., Suite 100 Chicago, IL 60614
To file a complaint with the Secretary of Health and Human Services write to:

Secretary of Health and Human Services
200 Independence Ave., S.E.
Washington, D.C. 20201

or call 877-696-6775

This Notice describes the healthcare practices of:

• Any physician or other health care professional authorized by us to access and/or enter information into your medical record.
• All departments and units through which Innovative Express Care online services are provided.
• All affiliates and volunteers.

Your personal care providers may have different policies or Notices regarding their use and disclosure of your health information created in their offices.

Protected Health Information (PHI). PHI, also known as a patient’s medical records, is contained between the personnel of the clinic, the patient, and any covered entity. Covered entities are not required to obtain consent from patients for routine disclosures for treatment, payment or healthcare operations, although some covered entities still choose to do so.

Regarding PHI patients have the right to access the health data created, stored or maintained by their healthcare providers.. Patients are also permitted to amend certain information held by a covered entity if it is discovered to be incorrect. Such requests should be obtained from a patient in writing.

A HIPAA release form must be obtained from a patient before his/her protected health information is disclosed for purposes such as those summarized below:

• Prior to the disclosure of PHI to a third party for reasons other than the provision of treatment, payment or other standard healthcare operations – E.g. disclosing information to an insurance underwriter
• Prior to PHI being used for marketing or fund-raising purposes
• Prior to PHI being provided to a research organization
• Prior to psychotherapy notes being disclosed
• Prior to the sale of PHI or sharing that involves remuneration