THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
Please review it carefully.

This HIPAA Notice of Privacy Practices (“Notice”) is provided to you pursuant to the Health Insurance Portability and Accountability Act of 1996, as amended, and regulations implemented thereunder (“HIPAA”). This Notice is designed to inform you of how we may, under federal law, use or disclose your protected health information (“PHI"). 

I.  OUR PLEDGE TO PROTECT YOUR PRIVACY

We understand that PHI is personal, and we are committed to protecting the privacy of your PHI. This Notice applies to your PHI collected by Integrity Medical, LLC ( “we”, “us”, “our”) personnel.  

We are required by law to: 

• Maintain the privacy of your PHI; 
• Give you this Notice regarding our legal duties and privacy practices with respect to your PHI; 
• Notify you if you are affected by a breach of unsecured PHI; and 
• Follow the terms of the HIPPA Policy that is currently in effect. 

II.  WHO WILL FOLLOW THIS NOTICE

The following people or groups will comply with this Notice: 

• Our employees, staff, workforce members and other personnel. 

III.  HOW WE MAY USE AND DISCLOSE YOUR PHI 

• To Facilitate Access to our Products, including our Cubby Beds:  we may use or disclose your PHI to provide you with our products, such as our Cubby Beds. Example: Your PHI may be used by our employees involved in providing our products.
• For Payment: we may use or disclose your PHI to obtain payment for our products. Example: Your PHI may be released to an insurance company to get pre-approval of or payment for our products.
• For Health Care Operations: we may use your PHI for uses necessary to run our businesses, such as to conduct quality assessment activities, train, or arrange for legal services. Example: we may use your PHI to conduct internal audits to verify proper billing procedures.
• To Covered Entities and Business Associates: we may share your PHI with “Covered Entities” or “Business Associates,” as defined by HIPAA, who we provide services to or who provide services to or on behalf of us.
• Customer Support / Outreach: we may use your PHI to contact you for customer care purposes or other outreach about our product and services.
• Health-Related Benefits and Services: we may use your PHI to advise you of health-related benefits, services, and products provided by us that may be of interest to you.
• Individuals Involved in Your Care or Payment for our Products: unless you tell us you object, we may use or disclose your PHI to notify a friend, family member, or legal guardian who is involved in your care or who helps pay for our products.
• As Required by Law: we will disclose your PHI where required by law. Example: federal law may require your PHI to be released to an appropriate health oversight agency, public health authority, or attorney.
• Public Health and Safety: we may use and disclose your PHI to prevent or control a serious threat to the health and safety of you, others, or the public and for public health activities, such as to prevent injury. Example: California law requires us to report birth defects and cases of communicable disease.
• Food & Drug Administration (FDA) and Health oversight Agencies: we may disclose PHI about incidents related to product defects to the FDA and manufactures to enable product recalls, repairs, or replacements; and to health oversight agencies for activities authorized by law, such as audits.
• Lawsuits/Disputes: if you are involved in a lawsuit/dispute and have not waived the provider-patient privilege, we may disclose your PHI under a court/administrative order, subpoena, or discovery request after attempting to inform you of the request.
• Victims of Abuse, Neglect or Domestic Violence: if we reasonably believe you are a victim of abuse, neglect or domestic violence, we may use and disclose your PHI to a governmental authority, including social service or protective services agency, authorized by law to receive reports of such abuse, neglect or domestic violence.
• Coroners, Medical Examiners, and Funeral Directors: we may release your PHI to coroners, medical examiners, or funeral directors to enable them to carry out their duties.
• National Security/Intelligence Activities and Protective Services: we may release your PHI to authorized local or national security or other law enforcement agencies for the protection of certain persons or to conduct special investigation.
• Workers’ Compensation: we may use or disclose PHI about you for workers’ compensation or similar programs as authorized or required by law. These programs provide benefits for work-related injuries or illnesses. 
• Military/Veterans: we may disclose your PHI to military authorities if you are an armed force or reserve member.

IV.  OTHER USES AND DISCLOSURES OF YOUR PHI

Other uses and disclosures of your PHI not described in this Notice will be made only with your authorization.  We will obtain your written authorization for: (i) most uses and disclosures of PHI for marketing purposes, as defined by HIPAA; and (ii) disclosures that constitute a sale of PHI, as defined by HIPAA.  If you authorize us to use or disclose your PHI for another purpose, you may revoke your authorization, in writing, at any time.  Your revocation will be effective upon receipt, but will not be effective to the extent that we or others have acted in reliance upon the authorization.

V.  YOUR RIGHTS REGARDING YOUR PHI

You have the rights described below in regard to the PHI that we maintain about you. You must submit a written request to exercise any of these rights. You may obtain forms for any of these purposes by contacting the Privacy Officer at the number or address below.

• Right to Inspect/Obtain a Copy: you have the right to inspect and get a copy of PHI maintained by us and used in decisions about your care, with certain limited exceptions. We may charge you a reasonable cost-based fee to cover copying, postage and/or preparation of a summary. We may deny your request in certain circumstances. You may request a licensed health care professional chosen by us to review a denial based on professional healthcare reasons; we will comply with this decision.
• Right to Amend: if you believe the PHI we created for you is inaccurate or incomplete, you may ask us to amend it in writing. We cannot delete or destroy any information already included in your health record. You must provide a reason for your request. We may deny your request if you ask to amend information that: (i) we did not create (unless the person or entity that created the information is not available to make the amendment); (ii) is not part of the PHI we maintain; (iii) is not part of the information you are permitted by law to inspect and copy; or (iv) is accurate and complete.
• Right to Accounting of Disclosures: you have the right to ask for a list or “accounting” of disclosures we have made of your PHI. We are not required to list all disclosures, such as those you authorized or disclosures made for treatment, payment, health care operations and certain other purposes. You must state a time period, which may not be longer than 6 years or include dates before April 14, 2003. You may obtain one accounting in a 12-month period for free; we may charge you a reasonable fee for additional accountings of disclosures. 
• Right to Request Restrictions: you have the right to request a restriction or limit on how we use or disclose your PHI. You must be specific in your request for restriction. We are not required to comply with your request, except when you request that we restrict disclosure of your PHI to a health plan for a health care item or service for which you have paid out-of-pocket in full and the disclosure is for the purpose of carrying out payment or health care operations, and not otherwise required by law. 
• Right to Request Confidential Communications: you have the right to request, in writing, that we contact you about our services in a certain way, such as by mail. You must specify how or where you wish to be contacted; we will try to accommodate reasonable requests.
• Right to a Copy of This Notice: you have the right to a paper or electronic copy of this Notice, which is posted and available on our website.

VI.  CHANGES TO OUR PRIVACY PRACTICES

We reserve the right to change our privacy practices and update this Notice accordingly.  We reserve the right to make the revised or changed Notice effective for all your PHI, even if it was created prior to the change in the Notice. Revised HIPAA Policies will be posted and available on our website.

V. COMPLAINTS

If you believe any of your privacy rights have been violated, you may file a complaint with our Privacy Officer. You may also file a complaint with the Office for Civil Rights of the U.S. Department of Health and Human Services Rights (“OCR”) by sending a letter to the appropriate OCR regional office (available at https://www.hhs.gov/ocr/about-us/contact-us/index.html#ocr-regional-offices), sending an email to OCRComplaint@hhs.gov, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.  We will not take any action against you for filing a complaint.

VI. CONTACT INFORMATION

You may contact us about our privacy practices calling our Privacy Officer at: (855) 964-2664 or writing to our Privacy Officer at: hello@cubbybeds.com.

VII.  EFFECTIVE DATE 

This Notice is effective as of December 11, 2024.