Your medical record, and your rights over it.

For treatment

Your physician uses your health information to evaluate you, prescribe, and monitor your treatment. We share what is necessary with the pharmacy that dispenses your medication and with any laboratory that performs your tests. If you ask us to, we will send records to another clinician treating you.

For payment

We use your information to charge you for the care you received and to deal with refunds and payment disputes. We do not bill insurance and we do not submit claims to Medicare, Medicaid or any other government healthcare program.

For health care operations

We use it to run the practice: quality review of the care we provide, training, reviewing the performance of our physicians, resolving complaints, and the ordinary business of a medical practice. Where we use an outside company for any of this — our electronic medical record, for example — we have a written agreement requiring them to protect your information.

As required or permitted by law

We may use or disclose your information without your permission where the law requires or allows it, including:

• To report to a state prescription drug monitoring program, which is required in most states for controlled substances, and to review your record in one.
• For public health activities, such as reporting a communicable disease or an adverse reaction to a medication.
• To report suspected abuse, neglect or domestic violence involving a child or a vulnerable adult.
• For health oversight — audits, investigations and licensure actions by a state medical board or other regulator.
• In response to a court order, subpoena or other lawful legal process.
• For law enforcement purposes where the law permits it.
• To avert a serious and imminent threat to your health or safety or that of another person.
• To a coroner, medical examiner or funeral director, as the law allows.
• For workers’ compensation, where the law requires.
• For research, only where an institutional review board has approved it and privacy protections are in place, or where the information has been de-identified.

To people involved in your care

If you ask us to, we may share relevant information with a family member, partner or friend you name. We will not do this unless you have told us to.

Appointment reminders and messages about your care

We may contact you by email, text message or phone about your treatment, your orders and your refills. Your consent sets out what you agreed to, and you may change it at any time.

• Marketing. We will not use your health information to market anything to you without your written authorization.
• Selling your information. We will not sell your health information. Full stop.
• Psychotherapy notes, where any exist, beyond the narrow circumstances the law permits.
• Any other purpose not described in this notice.

Where you give us an authorization, you may revoke it in writing at any time. Revoking it stops any future use or disclosure under it; it cannot undo something already done in reliance on it.

To see and get a copy of your record

You may inspect and get a copy of your medical and billing records, in electronic form if you prefer. We will respond within 30 days. We may charge a reasonable, cost-based fee for copies, and we will tell you the amount before we do. If we deny a request, we will explain why in writing and tell you how to have the decision reviewed.

To ask us to correct it

If you believe something in your record is wrong or incomplete, you may ask us in writing to amend it. If we deny the request we will tell you why, and you may submit a statement of disagreement that becomes part of your record.

To an accounting of disclosures

You may ask for a list of the disclosures we have made of your health information, other than for treatment, payment and operations, going back up to six years.

To ask for restrictions

You may ask us to restrict how we use or disclose your information. We are not required to agree, and we will tell you if we cannot. We must agree to one request: if you pay for an item or service in full yourself and ask us not to disclose it to a health plan, we will not — though since we do not bill insurance, this rarely arises here.

To confidential communications

You may ask us to contact you in a specific way or at a specific address — by portal message only rather than email or text, for instance. We will accommodate any reasonable request and will not ask you why.

To a paper copy of this notice

You may ask for a paper copy at any time, even if you agreed to receive it electronically.

To be told about a breach

If your unsecured health information is breached, we will notify you as the law requires.

• We are required by law to maintain the privacy and security of your protected health information.
• We are required to give you this notice of our legal duties and privacy practices, and to abide by its terms.
• We are required to notify you if a breach compromises the privacy or security of your information.
• We will not retaliate against you for making a complaint or exercising any right in this notice. Your care will not be affected.
• We use and disclose only the minimum necessary information for the purpose at hand.

If you believe your privacy rights have been violated, you may complain to us using the contact details at the foot of every page. Tell us what happened and we will look into it.

You may also complain to the federal government, and you do not have to come to us first.

You may also complain to your state medical board. The state notices page lists the board for every state we practise in.

You will not be penalised for complaining. It will not affect your treatment, your access to care, or anything else.

We may change this notice, and a change applies to all the health information we hold, including information created before the change. If we make a material change we will post the revised notice on this website and make it available on request. The effective date at the top of this page tells you which version is current.

Who to contact

Our Privacy Officer is responsible for this notice and for handling privacy requests and complaints. Contact details are at the foot of every page.

Effective 19 October 2026