🏥 MedLeaf Clinic

HIPAA Notice of Privacy Practices

Effective Date: April 7, 2025

THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED, AND HOW YOU CAN ACCESS THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

I. Our Commitment to Your Privacy

At MedLeaf Clinic, we are committed to protecting the confidentiality of your health information. We comply with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) and Florida medical privacy regulations.

We are required to:

• Maintain the privacy of your Protected Health Information (PHI)
• Provide you with this Notice of our legal duties and privacy practices
• Abide by the terms of this Notice currently in effect
• Notify you promptly if a breach of your unsecured PHI occurs

We may update this Notice at any time. The most current version will be available in our office and on our website.

II. How We May Use and Disclose Your PHI Without Authorization

We may use and disclose your PHI without your specific authorization for the following purposes:

• Treatment: To coordinate your care with other healthcare providers.
• Payment: To process billing, insurance claims, and payment collection.
• Healthcare Operations: For quality improvement, compliance audits, and administrative purposes.

We may also disclose your PHI in the following situations:

• Public health activities (e.g., disease reporting)
• Health oversight agencies (e.g., audits, inspections)
• Legal proceedings (when required by law or court order)
• Law enforcement purposes (under certain conditions)
• Workers’ compensation programs
• To prevent or reduce a serious threat to health or safety
• Organ donation and coroner-related activities
• Approved research projects (subject to privacy protections)

III. Uses and Disclosures That Require Your Authorization

We will obtain your written authorization before using or disclosing your PHI for:

• Psychotherapy notes (with limited exceptions)
• Marketing or promotional communications
• Sale of your PHI

You may revoke any prior authorization in writing at any time.

IV. Your Rights Regarding Your PHI

You have the right to:

• Request restrictions on certain uses and disclosures of your PHI (we are not required to agree to all requested restrictions)
• Request confidential communication (e.g., receiving mail at an alternate address)
• Inspect and obtain a copy of your medical records (reasonable copying fees may apply)
• Request amendments to your medical records if you believe they are incorrect
• Request an accounting of disclosures made of your PHI over the past six years (excluding treatment, payment, and operations disclosures)
• Request a paper or digital copy of this Notice
• Restrict disclosure of PHI to health plans if you pay for services entirely out-of-pocket

V. Patient Communication Preferences

We may use secure electronic tools (such as the SimplePractice portal, encrypted email, or SMS text messaging) to send appointment reminders, telehealth access links, and limited administrative communications.

You can opt out of text or email communications at any time.

We do not send sensitive PHI via unencrypted email or text without your prior consent.

VI. Telehealth Services

Telehealth services are conducted using a secure, HIPAA-compliant platform. Your health information shared during telehealth sessions is protected under the same standards as in-person care.

VII. Special Note Regarding Medical Marijuana Services

If you are receiving services related to medical marijuana certification, please be advised:

• Marijuana remains illegal under federal law, although it is approved for medical use under Florida law.
• Certification by our physician is not a prescription and medical marijuana products are not approved by the FDA.
• MedLeaf Clinic and its providers follow Florida law and Board of Medicine guidelines. We are not responsible for any legal, employment, or health consequences related to your use of medical marijuana, so long as care is delivered lawfully and ethically.

VIII. Questions or Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or directly with the U.S. Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.

Privacy Contact for MedLeaf Clinic:
📞 (305) 363-6521
📍 1419 S Federal Hwy, Ste A, Dania Beach, FL 33004

Acknowledgment of Receipt of Notice

By signing the HIPAA Acknowledgment Form or by checking the acknowledgment box electronically, you confirm that you have received and reviewed this Notice of Privacy Practices.