This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. Electronic and paper copy available upon request.

State and federal laws require us to maintain the privacy of your health information and to inform you about our privacy practices by providing you with this notice. We must follow the privacy practices as described below for health information which is governed by hipaa (which is the health insurance portability and accountability act). This notice will take effect on november 21, 2023, and will remain in effect until it is amended or replaced by us. Please note that corewell health urgent care is a hipaa hybrid entity, and hipaa only applies to certain types of health information that we have, such as regarding urgent care. Examples of health information not covered by hipaa include occupational health, workers’ compensation, work injuries, testing in connection with employment, and forensic testing requested by your employer/potential employer.

It is our right to change our privacy practices provided law permits the changes. Before we make a significant change, this notice will be amended to reflect the changes and we will make the new notice available upon request. We reserve the right to make any changes in our privacy practices and the new terms of our notice effective for all health information maintained, created, and/or received by us, including before the date changes were made. We are only required to follow the terms of the notice currently in effect.

You may access an electronic copy of our privacy notice on our website or request a copy at any time by contacting our privacy department. Information on contacting us can be found at the end of this notice.

This notice describes different ways that we can use or disclose your health information under hipaa, including for on-line check in, on-line easy pay, and medical visits to our urgent care centers. We use an electronic medical record, and we participate in electronic health information exchanges with health information organizations. Please note that hipaa does not apply to all health information that we have, such as occupational medicine or workers compensation visits with us.

HIPAA permits health information to be used and disclosed for certain purposes, including without your consent or authorization, as described below

Treatment: We may use your health information without your consent to provide you with our professional services. For example, we may coordinate with other health care providers about your care or refer you for further care. We may disclose your healthcare information with other health care professionals who provide treatment and/or service to you either by fax or electronically, such as through electronic medical records.

We have established "need to know" standards that limit various staff members' access to your health information per their primary job functions. Our staff also sign confidentiality agreements.

Individuals involved in your care or payment: Health information about you may be disclosed to your family, friends, and/or other persons you choose to involve in your care, only if you agree that we may do so or as otherwise permitted by HIPAA. We will also use our professional judgment to make reasonable inferences of your best interest by allowing someone to pick up filled prescriptions, x-rays or other similar forms of health information and/or supplies unless you have advised us otherwise.

Payment: We may use and disclose your health information without your consent to seek payment for services we provide to you. For example, our business office staff may contact your insurance to obtain payment for your care or work with other businesses to assist us in mailing statements and/or collecting unpaid balances. Emergencies/Disaster relief: We may use or disclose your health information to notify, or assist in the notification of a family member or anyone responsible for your care, in case of any emergency involving your care, your location, your general condition, or death. If possible we will provide you with an opportunity to object to this use or disclosure. Under emergency conditions or if you are incapacitated, we will use our professional judgment to disclose only that information directly relevant to your care.

Health care operations: We may use and disclose your health information without your consent to keep our practice operable. For example, Health Care Operations includes care coordination, case management, customer service, and other management/administrative activities. Examples of personnel who may have access to this information include, but are not limited to, our medical records staff, outside health or management reviewers and individuals performing similar activities. We may send you possible treatment options, alternatives, or health-related benefits or services that may be of interest to you.

Required by law: We may use or disclose your health information when we are required to do so by law

(court or administrative orders, subpoena, discovery request or other lawful process).

National security, intelligence and other State and Federal officials: We may use and disclose your information as permitted by HIPAA when requested by national security, intelligence and other State and Federal officials and/or if you are an inmate or otherwise under the custody of law enforcement.

Military/veterans: The health information of Armed forces personnel and veterans may be disclosed under certain circumstances. For example, if the information is required for lawful intelligence, counterintelligence, or other national security activities, we may disclose it to authorized federal officials.

Abuse, neglect or domestic violence: We may disclose your health information to appropriate authorities if we reasonably believe that you are a possible victim of abuse, neglect, or domestic violence or the possible victim of other crimes. This information will be disclosed only to the extent required by law or if you agree or if we determine it is necessary to prevent serious harm.

Prevent serious threat: We may use or disclose health information to prevent or lessen a serious and imminent threat to your health or safety or that of others.

Public health activities: We may disclose your health care information for public health, including to report problems with products, reactions to medications, product recalls, disease/infection exposure,

vaccinations/immunizations, and to prevent and control disease, injury and/or disability. We may electronically report as permitted by law for tracking and quality/payment purposes.

Health oversight activities: We may disclose your health information for inspections, licensure, and other activities authorized by law.

Marketing/sale: We will not disclose your health information for Marketing or Sale purposes, as defined by HIPAA, unless otherwise permitted by HIPAA or we have your written authorization to do so.

Appointment reminders: We may use or disclose your health information to provide you with appointment reminders, including, but not limited to, voicemail messages, postcards, or letters.

Access: You can request inspection and get copies of your HIPAA-covered health information (and that of an individual for whom you are a parent or legal guardian.) There will be some limited exceptions. Your request must be in writing. If you wish to examine your health information, you will need to complete and submit an appropriate request form. Contact our Privacy Officer for a copy of the Request Form. You may also request access by sending the Privacy Officer a letter. If your request is approved, an appointment can be made to review your records. Medical records can also be requested online at https://www.swellbox.com/wellstreet-wizard.html.

Amendment: You have the right to request amendment of your health care information, if you feel it is inaccurate or incomplete. Your request must be in writing and must include an explanation of why you believe the information should be amended. Under certain circumstances, your request may be denied.

Non-routine Disclosures: You have the right to request a list of non-routine disclosures we have made of your health care information. This is also called an “accounting.” Consistent with HIPAA, you have the right to request a list of certain instances for the past 6 years in which we, or our Business Associates, disclosed information for reasons other than treatment, payment, or health care operations, disclosures to you, or disclosures based on your authorization. Other limited exceptions also apply.

Request Restrictions/Confidential Communications:You have the right to request that we place additional restrictions on our use or disclosure of your health information and for you to receive confidential communications from us at alternative locations or by alternative means. We do not have to agree to most of these requests, but if we do, we will abide by our agreement (except, for example, in emergencies). This request must be submitted in writing. If you or someone on your behalf has paid us in full, you have the right to ask us not to submit that health care item or service to a health plan for payment; we must generally agree to your request unless the disclosure is required by law.

Breach: In the event of a Breach involving Unsecured PHI, as defined by HIPAA, we will follow HIPAA to notify affected individuals.

Access to care: You have the right to access, and request for, and an amendment of your medical records.

Safety: You have a right to receive safe, high quality care.

Respect: You have a right to be shown respect, dignity, and consideration regarding your healthcare. Communication: You have a right to be informed about services, treatment options, and costs in a clear and susceptible way.

Participation: You have a right to be included in decisions and choices regarding your care.

Privacy: You have a right to privacy and confidentiality of your personal information.

Comment: You have a right to comment on your care and to have your concerns addressed.

Health records: You have the right to refuse the release of your personal health information (except when required by law).

Interpreter: You have the right to have clinic personnel or a language line available for patient/family members with a language barrier. Please let us know if you have such a request.

Advance care directive / Power of attorney / Guardianship: Please inform your health care professional if you have a current advance care directive or power of attorney for any health or personal matters, or if you are subject to a guardianship order.

Safety: Tell us your safety concerns.

Respect: Consider the wellbeing and rights of others.

Communication: Provide accurate and complete information regarding your medical history and ask questions.

Participation: Follow your treatment plan, cooperate, and participate where able.

Services: You have the right to refuse care or services.

Complaint / feedback: You should direct any complaint to a staff member or member of m

You may write or send an email to us with your specific request, including requesting a form to exercise any of the HIPAA rights summarized in this notice for HIPAA-covered information. All written correspondence should be sent to the physical address or email address listed below. We will consider your request and provide you with a response. If you believe your privacy rights have been violated regarding such information, you have the right to file a complaint with us. Your HIPAA complaint should be directed to our privacy officer or security officer whose information is listed below. You also have the right to file a HIPAA complaint with the U.S. department of health human services, office for civil rights. We support your right to the privacy of your information and will not retaliate or take action against you or any individual for filing a HIPAA complaint with us or with the U.S. department of health and human services.