Opens in a new tab

Notice of Privacy Practices

Effective Date: 10/01/2023

Your Information. Your Rights. Our Responsibilities.

This notice describes how medical information about you may be used and disclosed, how you can obtain access to this information, and the responsibilities of THRYV Medical concerning your health information.

Please review it carefully.

Who This Notice Covers

This notice applies to THRYV Medical and its locations:

Sugar Hill
5422 GA-20 #204
Sugar Hill, GA 30518

Woodstock
10917 GA-92 STE 150
Woodstock, GA 30188

This notice also applies to:

  • THRYV Medical physicians, advanced practice providers, nurses, medical assistants, and other healthcare professionals

  • Employees, contractors, trainees, volunteers, and other members of the THRYV Medical workforce

  • Business associates that provide services involving protected health information on our behalf, as required by law

The people and entities covered by this notice may use and share your health information as permitted by law for treatment, direct payment, and healthcare operations.

Your Rights

You have the right to:

  • Obtain an electronic or paper copy of your medical record

  • Ask us to correct your medical record

  • Request confidential communications

  • Ask us to limit certain uses or disclosures

  • Obtain a list of certain disclosures we have made

  • Obtain a paper copy of this notice

  • Choose someone to act on your behalf

  • File a complaint if you believe your privacy rights have been violated

Your Choices

In certain circumstances, you may tell us how you want your health information used or disclosed, including when we:

  • Share information with family members, close friends, or others involved in your care

  • Share information during a disaster-relief situation

  • Use or disclose information for a purpose that requires your written authorization

How We Typically Use or Disclose Health Information

Treatment

We may use your health information and disclose it to physicians, advanced practice providers, laboratories, pharmacies, imaging centers, specialists, hospitals, and other healthcare professionals involved in your care.

Example: A THRYV Medical provider may send a laboratory order or share relevant test results with another clinician helping evaluate or treat you.

Care Coordination

We may use or disclose information to coordinate prescriptions, laboratory testing, diagnostic services, follow-up care, and other aspects of your treatment.

Example: We may send an order to a laboratory or pharmacy and receive information needed to manage your care.

Healthcare Operations

We may use and disclose your health information to operate our practice, assess the quality of care, improve services, train our workforce, conduct audits, manage risk, perform credentialing, and contact you when necessary.

Example: We may review patient records to evaluate the quality and consistency of our services.

Direct Payment

THRYV Medical is a cash-pay medical practice. We may use your health information to:

  • Prepare invoices and receipts

  • Process direct payments

  • Maintain financial records

  • Respond to billing questions

  • Coordinate payment with a person you have authorized

  • Work with payment processors, accountants, or other vendors supporting our direct-payment operations

We do not routinely submit claims to health insurance plans.

Example: We may provide a receipt describing services you purchased or retain transaction information needed for accounting and legal compliance.

Appointment and Care Communications

We may use your information to:

  • Schedule, confirm, or remind you about appointments

  • Notify you of scheduling changes

  • Communicate laboratory or treatment-related instructions

  • Follow up regarding your care

  • Tell you about treatment options, programs, or health-related services offered by THRYV Medical that may be relevant to you

Communications may occur by telephone, voicemail, text message, email, mail, patient portal, or another method you have authorized or requested.

Your Rights in Detail

Obtain an Electronic or Paper Copy of Your Medical Record

You may ask to inspect or receive an electronic or paper copy of your medical record and other health information we maintain about you.

Ask us how to submit your request.

We will generally provide a copy or summary of your health information within 30 days after receiving your request. If additional time is permitted and required, we will notify you in writing.

We may charge a reasonable, cost-based fee as permitted by law.

In limited circumstances, we may deny access to part or all of the requested information. If we deny your request, we will explain the reason in writing and tell you whether you have a right to have the decision reviewed.

Ask Us to Correct Your Medical Record

You may ask us to correct health information that you believe is inaccurate or incomplete.

Your request must identify the information you want corrected and explain why you believe it is inaccurate or incomplete.

We may deny the request in certain circumstances, including when:

  • We did not create the information

  • The information is not maintained by THRYV Medical

  • The information is not available for inspection

  • We determine that the record is accurate and complete

If we deny your request, we will explain the reason in writing, generally within 60 days. You may submit a written statement of disagreement as permitted by law.

Request Confidential Communications

You may ask us to communicate with you in a particular way or at a particular location.

For example, you may ask us to:

  • Call only a particular telephone number

  • Avoid leaving detailed voicemail messages

  • Send mail to a different address

  • Communicate through a designated patient portal

We will accommodate reasonable requests. You do not have to explain why you are making the request.

Ordinary email and text messaging may not always be secure. We may ask you to use a patient portal or another secure communication method for sensitive information.

Ask Us to Limit What We Use or Disclose

You may ask us not to use or disclose certain health information for treatment, direct payment, or healthcare operations.

We are not generally required to agree to your request. We may deny the request if the limitation could interfere with your care or our ability to operate lawfully.

If we agree to a restriction, we will follow it except when the information is needed to provide emergency treatment or when disclosure is otherwise required by law.

Obtain a List of Certain Disclosures

You may ask for an accounting of certain disclosures of your health information made during the six years before the date of your request.

The accounting will identify:

  • The person or organization that received the information

  • The date of the disclosure

  • A description of the information disclosed

  • The reason for the disclosure

The accounting will not include certain disclosures, including most disclosures made:

  • For treatment

  • For direct payment

  • For healthcare operations

  • Directly to you

  • With your written authorization

  • To people involved in your care when permitted by law

  • For certain national security or intelligence purposes

  • As part of a limited data set

  • Before the legally applicable accounting period

We will provide one accounting during any 12-month period without charge. We may charge a reasonable, cost-based fee for an additional accounting requested within the same 12-month period. We will inform you of the fee before completing the additional request.

Obtain a Copy of This Notice

You may request a paper copy of this notice at any time, even if you previously agreed to receive it electronically.

We will provide a paper copy promptly.

A current copy will also be available at our offices and on our website at thryvmedical.com.

Choose Someone to Act on Your Behalf

If you have given someone legal authority to act for you, such as through a healthcare power of attorney, guardianship, or other legally recognized arrangement, that person may exercise your privacy rights and make choices regarding your health information.

Before taking action, we will verify that the person has appropriate authority to act on your behalf.

File a Complaint

You may file a complaint with THRYV Medical if you believe we have violated your privacy rights.

Contact:

THRYV Medical Privacy Officer
5422 GA-20 #204
Sugar Hill, GA 30518

Email: privacy@thryvmedical.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201

Telephone: 1-877-696-6775
Online: hhs.gov/hipaa/filing-a-complaint

THRYV Medical will not retaliate against you for filing a complaint or exercising your privacy rights.

Your Choices in Detail

For certain health information, you may tell us your preferences about what we disclose.

Tell us what you want us to do, and we will follow your instructions when required by law.

People Involved in Your Care

You may tell us whether we may:

  • Share information with family members, close friends, or others involved in your care

  • Share information with someone helping pay for your care

  • Notify another person about your location, general condition, or death

  • Share information during a disaster-relief situation

If you are unable to tell us your preference, such as when you are unconscious or unavailable, we may disclose information if we believe doing so is in your best interest and is permitted by law.

We may also disclose information when needed to prevent or lessen a serious and imminent threat to health or safety.

Uses Requiring Written Authorization

We will generally obtain your written authorization before using or disclosing health information for:

  • Marketing purposes when authorization is required

  • The sale of protected health information

  • Most uses or disclosures of psychotherapy notes

  • Other purposes not described in this notice or otherwise permitted by law

THRYV Medical does not sell protected health information.

If you authorize us to use or disclose information, you may revoke the authorization in writing at any time.

Revoking an authorization will not affect information already used or disclosed in reliance on the authorization.

Other Permitted or Required Uses and Disclosures

The law permits or requires us to use or disclose health information in additional circumstances. Before doing so, we must meet the applicable legal conditions.

Public Health and Safety

We may disclose information for legally authorized public health and safety purposes, including:

  • Preventing or controlling disease

  • Reporting adverse reactions to medications

  • Assisting with product recalls

  • Reporting suspected abuse, neglect, or domestic violence

  • Preventing or reducing a serious and imminent threat to health or safety

  • Reporting information to agencies responsible for public health oversight

Health Oversight

We may disclose information to health oversight agencies for legally authorized activities, including audits, inspections, licensing, accreditation, investigations, and disciplinary proceedings.

Compliance With Law

We will disclose health information when federal or state law requires us to do so.

We may disclose information to the U.S. Department of Health and Human Services if it requests information to determine whether we are complying with federal privacy law.

When Georgia law or another applicable law provides greater privacy protection than HIPAA, we will follow the more protective requirement.

Medical Examiners and Funeral Directors

We may disclose health information to a coroner, medical examiner, or funeral director when legally permitted or required.

Law Enforcement

We may disclose health information for certain law-enforcement purposes when all applicable legal requirements have been met.

Examples may include:

  • Responding to a valid court order, warrant, subpoena, or summons

  • Identifying or locating certain individuals

  • Reporting certain wounds or injuries when required by law

  • Reporting a death believed to have resulted from criminal conduct

  • Reporting criminal conduct occurring on our premises

  • Responding to an emergency involving possible criminal activity

Government Functions

We may use or disclose health information for certain authorized government functions, including:

  • Military and veterans’ activities

  • National security and intelligence activities

  • Presidential protective services

  • Correctional institutions and lawful custody

  • Other functions authorized by law

Lawsuits and Legal Proceedings

We may disclose health information in response to a valid court or administrative order.

We may also disclose information in response to a subpoena, discovery request, or other lawful process when the required assurances, notices, protective orders, or authorizations have been obtained.

Additional Protection for Certain Information

Certain categories of information may receive additional protection under federal or state law. These categories may include:

  • Mental health records

  • Psychotherapy notes

  • Substance use disorder records received from a specially regulated treatment program

  • HIV or AIDS-related information

  • Genetic information

  • Reproductive health information

  • Information concerning minors

  • Records subject to specific consent or confidentiality requirements

When a law provides greater protection than HIPAA, THRYV Medical will follow the more protective law.

To the extent THRYV Medical receives or maintains substance use disorder treatment records that are subject to 42 CFR Part 2, we will not use or disclose those records in civil, criminal, administrative, or legislative investigations or proceedings against you unless you provide written consent or the use or disclosure is authorized by a qualifying court order and subpoena.

Electronic Health Information and Patient Portals

THRYV Medical may provide access to certain health information through a patient portal or another secure electronic system.

You are responsible for safeguarding your portal username, password, authentication codes, and devices. Do not share your credentials unless you intend to give another person access to your account.

If you believe someone has obtained unauthorized access to your account, notify THRYV Medical and the portal provider promptly.

Electronic access does not replace your right to request records directly from THRYV Medical.

Business Associates

We may engage companies or individuals to provide services on our behalf, including:

  • Electronic health record services

  • Patient portal services

  • Laboratory and diagnostic coordination

  • Direct-payment processing

  • Information technology and data storage

  • Secure communications

  • Legal, accounting, and consulting services

  • Records management and destruction

When a business associate creates, receives, maintains, or transmits protected health information on our behalf, we require appropriate contractual safeguards as required by HIPAA.

Our Responsibilities

THRYV Medical is required by law to:

  • Maintain the privacy of your protected health information

  • Maintain appropriate safeguards to protect your information

  • Provide you with this notice of our legal duties and privacy practices

  • Follow the duties and privacy practices described in the notice currently in effect

  • Notify you following a breach of unsecured protected health information when notification is required by law

  • Respect your rights concerning your protected health information

  • Refrain from retaliating against you for exercising your rights or filing a complaint

We will not use or disclose your information for a purpose not described in this notice unless you provide written authorization or the use or disclosure is otherwise permitted or required by law.

Changes to This Notice

THRYV Medical may change the terms of this notice.

Changes may apply to all health information we maintain, including information created or received before the change.

When we make a material change, the revised notice will be:

  • Available upon request

  • Available at our offices

  • Posted on our website

  • Provided through another method when required by law

The effective date of the current notice will appear at the beginning of the document.

Contact Information

For questions about this notice, to exercise a privacy right, or to file a complaint with THRYV Medical, contact:

THRYV Medical Privacy Officer

Sugar Hill Location
5422 GA-20 #204
Sugar Hill, GA 30518

Woodstock Location
10917 GA-92 STE 150
Woodstock, GA 30188

Email: privacy@thryvmedical.com
Website: thryvmedical.com