Notice of Privacy Practices

Our Commitment to Your Privacy

Tint-RX is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. We are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of the Notice currently in effect.

What Is Protected Health Information (PHI)?

PHI is individually identifiable health information that relates to your past, present, or future physical or mental health condition; the provision of health care to you; or the past, present, or future payment for health care. This includes information in your medical records, clinical notes, diagnoses, medications, and any other health-related information you submit through our Platform.

How We May Use and Disclose Your PHI

Treatment

We use and disclose your PHI to provide, coordinate, and manage your clinical evaluation. This includes sharing your information with the board-certified dermatologist performing your store-and-forward review.

Payment

We may use your PHI to process payment for services rendered, including billing and collection activities.

Health Care Operations

We may use your PHI for internal operations including quality assessment, compliance reviews, training, and Platform improvement activities.

As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including disclosures to public health authorities, law enforcement, or in response to a court order or subpoena.

Business Associates

We may share your PHI with third-party service providers (Business Associates) who perform functions on our behalf, such as secure data hosting and form processing. All Business Associates are required to sign a HIPAA Business Associate Agreement and protect your PHI.

Uses and Disclosures Requiring Your Authorization

The following uses and disclosures require your written authorization:

• Marketing purposes
• Sale of your PHI
• Most uses of psychotherapy notes
• Any other use or disclosure not described in this Notice

You may revoke any authorization in writing at any time, except to the extent that we have already taken action in reliance on the authorization.

Your Rights Regarding Your PHI

Right to Access

You have the right to inspect and obtain a copy of your PHI maintained in our records.

Right to Amend

You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.

Right to an Accounting of Disclosures

You have the right to request a list of disclosures we have made of your PHI, other than for treatment, payment, or health care operations.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request except in limited circumstances.

Right to Confidential Communications

You have the right to request that we communicate with you about your PHI in a specific way or at a specific location.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.

Data Retention

We retain PHI for a minimum of six (6) years from the date of creation or the date it was last in effect, whichever is later, in compliance with HIPAA requirements and applicable Arizona state law.

Changes to This Notice

We reserve the right to change this Notice at any time. We reserve the right to make the revised Notice effective for PHI we already have about you as well as any PHI we receive in the future. The current Notice will be posted on our Platform with its effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.

• HHS OCR: www.hhs.gov/hipaa/filing-a-complaint
• Tint-RX Privacy Officer: [email protected]

Contact Our Privacy Officer