How medical information about you may be used and disclosed.

This Notice of Privacy Practices applies to protected health information maintained by Wells Legacy Health & Wellness in connection with healthcare services, including in-person primary care in Altamonte Springs, telehealth available in Florida and Minnesota when appropriate, wellness care, patient advocacy, health education, CPR and First Aid training where applicable, administrative activities, billing, and healthcare operations.

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Website visitor information is addressed separately in the Web & Mobile Privacy Policy.

Wells Legacy Health & Wellness is required to:

• Maintain the privacy and security of protected health information.
• Follow the duties and privacy practices described in this notice.
• Provide patients with a copy of this notice upon request.
• Notify affected individuals following a breach of unsecured protected health information when required by law.
• Not use or share protected health information other than as described in this notice unless authorized or permitted by law.

Protected health information may be used or disclosed for the following purposes:

• Treatment: To provide, coordinate, or manage care and related services.
• Payment: To bill, collect payment, verify insurance, process claims, and support payment-related activities.
• Healthcare operations: To support practice administration, quality improvement, compliance, credentialing, training, audits, and business operations.
• Appointment reminders and communications: To contact you about appointments, follow-up, care-related information, or services.
• Public health and safety: To report information when required or permitted by law, such as certain disease reporting or safety-related situations.
• Legal and regulatory requirements: To comply with court orders, audits, investigations, government requests, law enforcement requests, or other legal duties when applicable.

In some situations, Wells Legacy Health & Wellness may need your written authorization before using or disclosing protected health information. You may revoke an authorization in writing, except to the extent action has already been taken based on that authorization.

In certain situations, you may tell Wells Legacy Health & Wellness your preferences about sharing information, such as:

• Sharing information with family members, friends, caregivers, or others involved in your care.
• Contacting you through a specific phone number, mailing address, email address, or other reasonable communication method.
• Receiving communications in a confidential way, when the request is reasonable and can be accommodated.

If you are not able to tell the practice your preference, the practice may use professional judgment to share information if it is in your best interest or allowed by law.

Depending on applicable law and the type of record, you may have the right to:

• Inspect or receive a copy of certain health information.
• Ask the practice to correct health information you believe is incorrect or incomplete.
• Request confidential communications by a specific method or at a specific location.
• Ask the practice to limit certain uses or disclosures of your information.
• Receive a list of certain disclosures of your health information.
• Receive a paper or electronic copy of this notice.
• Choose someone to act for you if they have legal authority to do so.
• File a complaint if you believe your privacy rights have been violated.

Some requests must be made in writing. Wells Legacy Health & Wellness may not be required to agree to every request, but each request will be reviewed as required by applicable law.

Certain types of information may receive additional protections under federal or state law. This may include, where applicable, reproductive health information, behavioral health information, substance use disorder treatment records, HIV/AIDS-related information, genetic information, minor consent records, and other sensitive health information.

Wells Legacy Health & Wellness will handle these records according to applicable legal requirements and practice policies.

Telehealth visits, patient portal communications, online scheduling, and electronic communications may involve third-party systems that support care delivery, scheduling, communication, and recordkeeping.

Patients should use secure, practice-approved systems for sensitive medical information whenever possible. Regular email, public website forms, and social media should not be used for emergencies, urgent symptoms, or detailed sensitive medical information.

If you believe your privacy rights have been violated, you may contact Wells Legacy Health & Wellness directly through the Contact page or by calling (321) 306-6755.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Wells Legacy Health & Wellness will not retaliate against you for filing a complaint.

HHS complaint information is available at HHS HIPAA Filing a Complaint.

This website, email, social media, online booking, and contact forms should not be used for medical emergencies. If you are experiencing chest pain, difficulty breathing, stroke symptoms, uncontrolled bleeding, severe allergic reaction, suicidal thoughts, or any life-threatening condition, call 911 or go to the nearest emergency room immediately.

Wells Legacy Health & Wellness may change this notice and make the revised notice effective for information already maintained by the practice, as well as information received in the future.

The current notice will be posted on this website with an effective date. You may request a copy of the current notice at any time.