HIPAA Policy

Privacy Policy and Terms of Service

Purpose of Policy
The safety of our patients’ data is our top priority. Maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA) requires the institution of several policies to ensure full compliance with applicable laws and regulations, including the protection and handling of Protected Health Information (PHI).

Acceptable Use of PHI

What is PHI?
Protected Health Information (PHI) refers to any information that:

  • Relates to:
    • An individual’s past, present, or future physical or mental health condition.
    • The provision of healthcare to an individual.
    • Past, present, or future payment for healthcare services provided to an individual.
  • And:
    • Identifies the individual, or
    • There is a reasonable basis to believe it can be used to identify the individual.

Scope of Information and Request Procedures

The right to access applies to all information in a designated record set, which includes medical, payment, and other records used to make decisions about individuals:

  • Everything in the electronic health record.
  • Patient notes, medications, lab results, X-rays, procedure, and discharge notes.
  • It does not matter how old the information is, where it is kept, or where it originated.

Limited Exclusions from the Right to Access:

  • Psychotherapy notes kept separate from the patient’s other records.
  • PHI compiled for litigation.
  • Records not used to make decisions about individuals.

Access cannot be denied due to:

  • Failure to pay for healthcare services.
  • Concerns that an individual may not understand their PHI or be upset by it.

Request Procedures

  • An individual or their personal representative can request their health information at any time for any reason. A written request (which can be electronic) is required, and we will verify the identity of the requesting individual.
  • Procedures must not create a barrier or unreasonably delay access to the individual’s information.

Form, Format, and Manner of Access

  • Individuals have the right to receive a copy of PHI in the form and format requested if “readily reproducible.”
  • Information maintained electronically must be accessible to the individual.
  • Individuals have the right to specify the mode of transmission or transfer. This includes receiving information via unsecured email if specifically requested.

Timeliness of Response:

  • Access must be provided within 30 days of the request.
  • Record requests must be documented with dates of receipt and response.

Directing PHI to Third Party

An individual may have their records transmitted to a third party (e.g., primary care physician, friend, family member, or other organizations), provided there is a signed written request from the individual. The same procedures apply as if the information were provided directly to the individual.

SMS Consent Communication Policy

To comply with all applicable consent and privacy laws, we have implemented the following updates:

  • SMS For Consent Communication:
    The phone numbers obtained as part of the SMS consent process will not be shared with third parties or affiliate companies for marketing purposes. Your privacy is important to us.
  • Types of SMS Communications:
    Upon consenting to receive text messages from Elite Medical Services of Georgia, LLC dba Beyond Health and Wellness, you may receive communications related to our practice, your care, etc. Please note that standard messaging disclosures apply.
  • Message Frequency:
    Our SMS message frequency is estimated to be 100 text messages daily across all users.
  • Potential Fees for SMS Messaging:
    Carriers may charge fees for each message sent or received. These fees vary depending on the carrier’s pricing structure and whether the message is sent domestically or internationally.
  • Opt-In Method:
    Customers may opt-in for SMS messaging from Elite Medical Services of Georgia, LLC dba Beyond Health and Wellness verbally during a call initiated through our website www.beyond-healthandwellness.com. During the call, customers will be asked:
    “Do you agree to receive texts from Elite Medical Services of Georgia, LLC dba Beyond Health and Wellness? Message frequency varies. Message and data rates may apply. Text HELP for help, text STOP to opt-out. See our privacy policy at www.beyond-healthandwellness.com/privacy-policy.”
    This consent agreement will not be shared with third parties or affiliates for marketing purposes. No SMS communication will be initiated without the customer’s consent.

    Example 2:  If consent is obtained via a website form:
    “I consent to receive SMS from Elite Medical Services of Georgia, LLC. Reply STOP to opt-out; Reply HELP for support; Message and data rates may apply; Messaging frequency may vary. Visitwww.beyond-healthandwellness.com/privacy-policy for privacy policy and Terms of Service.”
  • Opt-Out:
    Customers can opt-out of SMS messaging from Elite Medical Services of Georgia, LLC  by replying STOP at any time to any received SMS message. Once opted out, they will receive no further SMS communications. Customers can opt back in at any time by replying START.
  • Standard Messaging Disclosures:
    • Messaging frequency may vary.
    • Message and data rates may apply.
    • To opt out at any time, text STOP.
    • For assistance, text HELP or visit our website at www.beyond-healthandwellness.com.
    • Visit www.beyond-healthandwellness.com/privacy-policy for the privacy policy and Terms of Service.

Beyond Health and Wellness: Your Information, Your Rights, Our Responsibilities

This notice explains how your medical information may be used and disclosed and how you can access it. Please review it carefully.

Your Rights:
You have the right to:

  • Get a copy of your paper or electronic medical record.
  • Correct your paper or electronic medical record.
  • Request confidential communication.
  • Ask us to limit the information we share.
  • Get a list of those with whom we’ve shared your information.
  • Get a copy of this privacy notice.
  • Choose someone to act for you.
  • File a complaint if you believe your privacy rights have been violated.

Your Choices:
You have some choices in the way we use and share your information:

  • Tell family and friends about your condition.
  • Provide disaster relief.
  • Include you in a hospital directory.
  • Provide mental health care.
  • Market our services and sell your information.
  • Raise funds.

Our Uses and Disclosures

We may use and share your information to:

    • Treat you.
    • Run our organization.
    • Bill for your services.
    • Help with public health and safety issues.
    • Do research.
    • Comply with the law.
    • Respond to organ and tissue donation requests.
    • Work with a medical examiner or funeral director.
    • Address workers’ compensation, law enforcement, and other government requests.
    • Respond to lawsuits and legal actions.

Changes to the Terms of this Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our website.

Privacy Officer:
Justin Paulk
Date: 01/18/2025

For more information on your rights under HIPAA and how your health information may be used and shared, visit the U.S. Department of Health and Human Services website:  www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html