YOUR HEALTH INFORMATION. YOUR RIGHTS. OUR RESPONSIBILITIES.

This Notice of Privacy Practices describes how Thrive Health DPC (“Thrive,” “we,” “us,” or “our”) may use and disclose your protected health information (“PHI”) and how you can obtain access to that information.

Thrive Health DPC is committed to protecting the privacy and security of your health information.

We are required by law to:

• Maintain the privacy of your protected health information
• Provide you with this notice of our legal duties and privacy practices
• Follow the privacy practices described in this notice



YOUR RIGHTS

Get a Copy of Your Medical Record

You have the right to inspect and obtain a copy of your health information maintained by Thrive Health DPC.

Ask Us to Correct Your Medical Record

You may ask us to correct health information that you believe is incorrect or incomplete.

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular location.

Ask Us to Limit What We Use or Share

You may request restrictions on how we use or disclose your health information.

If you pay for a healthcare service completely out of pocket and request that we not disclose information about that service to your health plan for payment or healthcare operations purposes, we will generally honor that request unless disclosure is required by law.

Get a List of Certain Disclosures

You may request an accounting of certain disclosures of your health information, subject to legal exceptions.

Get a Copy of This Notice

You may request a paper copy of this notice at any time.

Choose Someone to Act for You

If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights on your behalf to the extent permitted by law.

File a Complaint

You may file a complaint with Thrive Health DPC or with the U.S. Department of Health and Human Services Office for Civil Rights.



You will not be retaliated against for filing a complaint.

OUR USES AND DISCLOSURES

We may use and disclose your health information without your written authorization for certain purposes permitted by law.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare.

This may include communicating with specialists, laboratories, pharmacies, hospitals, imaging facilities, and other healthcare professionals involved in your care.

Payment

We may use and disclose health information as necessary to obtain payment for healthcare services.

Because Thrive Health DPC operates using a direct primary care model, many services may be paid directly by patients rather than billed to health insurance.

Healthcare Operations

We may use and disclose health information for healthcare operations, including:

• Quality improvement
• Care coordination
• Practice management
• Auditing
• Compliance
• Training
• Patient safety
• Information technology
• Business planning
• Maintaining electronic health record systems

Appointment Reminders and Health-Related Communications

We may use your health information to contact you regarding:

• Appointments
• Appointment reminders
• Follow-up care
• Treatment recommendations
• Laboratory results
• Prescriptions and medications
• Preventive care
• Other healthcare-related services

We may communicate by telephone, voicemail, text message, email, patient portal, or other communication method you have provided, subject to applicable law.

Persons Involved in Your Care

We may disclose relevant health information to a family member, close friend, caregiver, or another person you identify as being involved in your healthcare or payment for healthcare.

Required by Law

We may use or disclose health information when required by federal, state, or local law.

Public Health

We may disclose health information for public health activities permitted or required by law.

Abuse, Neglect, or Domestic Violence

We may disclose health information to appropriate authorities when required or permitted by law to report suspected abuse, neglect, or domestic violence.

Health Oversight

We may disclose health information to governmental agencies for authorized oversight activities, including audits, investigations, inspections, and licensing activities.

Judicial and Administrative Proceedings

We may disclose health information in response to lawful legal process when permitted by applicable law.

Law Enforcement

We may disclose health information to law enforcement when permitted or required by law.

Serious Threats to Health or Safety

We may use or disclose health information when necessary to prevent or lessen a serious and imminent threat to health or safety, when permitted by law.

Workers' Compensation

We may disclose health information as authorized by workers' compensation laws.

Organ and Tissue Donation

We may disclose health information for organ, eye, or tissue donation and transplantation purposes as permitted by law.

Coroners and Medical Examiners

We may disclose health information to coroners and medical examiners as permitted by law.

Research

We will not use or disclose health information for research purposes.

Military and Veterans

We may disclose health information concerning members of the armed forces or veterans when required or permitted by law.

Disaster Relief

We may disclose health information to organizations involved in disaster-relief activities when permitted by law.

USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION

Certain uses and disclosures require your written authorization.

These may include:

• Certain marketing activities
• Sale of protected health information
• Most uses and disclosures of psychotherapy notes
• 
  

You may revoke an authorization in writing at any time, although revocation will not affect actions already taken based on the authorization.

SUBSTANCE USE DISORDER RECORDS

If Thrive Health DPC receives or maintains substance use disorder records subject to 42 CFR Part 2, those records may receive additional federal privacy protections.

Thrive Health DPC will comply with applicable requirements of 42 CFR Part 2 and HIPAA.



Where required, we will obtain appropriate patient consent or authorization before using or disclosing Part 2-protected information.

MINORS AND PERSONAL REPRESENTATIVES

Parents, legal guardians, and other personal representatives may have authority to access or make decisions regarding a minor's health information.

Washington State law may permit minors to consent to certain healthcare services and may limit parental access to information concerning those services.



Thrive Health DPC will follow applicable federal and Washington State law when determining access to a minor's health information.

WASHINGTON STATE PRIVACY PROTECTIONS

Thrive Health DPC will comply with applicable Washington laws governing the privacy, access, correction, and disclosure of health information.

When Washington law provides greater privacy protection than federal law, Thrive Health DPC will comply with the applicable legal requirement.

TELEHEALTH AND ELECTRONIC COMMUNICATIONS

When you participate in telehealth or communicate electronically with Thrive Health DPC, information may become part of your medical record.

We use reasonable safeguards designed to protect electronic health information.

For sensitive health information, we encourage you to use secure patient communication methods provided by Thrive Health DPC.

TEXT MESSAGES AND PHONE COMMUNICATIONS

If you provide your telephone number, Thrive Health DPC may contact you regarding your care, appointments, treatment, prescriptions, laboratory results, membership, or other healthcare-related matters.

You may request reasonable restrictions on how we communicate with you.

OUR RESPONSIBILITIES

Thrive Health DPC is required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this notice
• Follow the terms of the notice currently in effect
• Notify you if a breach occurs when notification is required by law
• Comply with applicable federal and Washington State privacy laws
• Provide a copy of this notice upon request



We will not use or disclose your health information other than as described in this notice unless you provide written authorization or the use or disclosure is otherwise permitted or required by law.

CHANGES TO THIS NOTICE

Thrive Health DPC reserves the right to change this Notice of Privacy Practices.

Any changes will apply to all PHI we maintain, unless otherwise required by law.

When material changes are made, we will update this notice and make the revised notice available on our website and upon request.

QUESTIONS OR PRIVACY CONCERNS

Thrive Health DPC
501 S 336th St, Suite 100
Federal Way, WA 98003

Phone: (253) 235-5314
Email: hello@thrivehealthdpc.com

You may also submit a complaint to:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775

Thrive Health DPC will not retaliate against you for filing a complaint.