Records Request Policy

Health Solutions Clinic shall not release any information contained in your medical record to anyone without your written consent unless required by law.

Should you require a copy of your medical record, you may make a request in writing, dated and signed by the person making the request. The request should include a reasonable description of the records sought. Health Solutions Clinic has a written medical records request form that must be utilized.

If someone is making the request on your behalf, he or she must provide evidence of the authority to receive the records (such as a power of attorney). Health Solutions Clinic shall accept a photocopy, facsimile, or other copy of the original signed by the requester as if it were an original.

Upon receipt of the request, Health Solutions Clinic has 30 days to:

• Provide copies of the records;
• Inform the requester if the information does not exist or cannot be found;
• Inform the requester of the provider who now maintains the records; or
• Deny the records request as permitted under applicable Georgia law and provide the reason for the denial.

Health Solutions Clinic may impose a reasonable cost-based fee of $25.00 for each record request, reflecting the cost of supplies and labor to copy the medical records. The requester shall provide a copy of a valid picture ID (driver’s license or passport) and a self-addressed pre-stamped envelope along with the request so that the records may be mailed.

Health Solutions Clinic will maintain patient records for a minimum of six years following your last patient encounter, with the following exceptions:

• Records of a minor child are maintained until the child reaches the age of 18 or becomes emancipated, with a minimum retention of six years from the last patient encounter;
• Records that have been previously transferred to another practitioner or provided to the patient or his or her personal representative; or
• Records required by contractual obligation or federal law to be maintained for a longer period of time.

Requests for records and the self-addressed pre-stamped envelope should be mailed to:
Health Solutions Clinic • 3660 Flat Shoals Rd, Suite 180, Decatur, GA 30034

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Company (referred to as either “the Company,” “We,” “Us,” or “Our” in this Agreement) refers to Health Solutions Clinic, at 3660 Flat Shoals Rd, Suite 180, Decatur, GA 30034.
• Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history on that website among its many uses.
• Country refers to: Georgia, United States.
• Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
• Do Not Track (DNT) is a concept promoted by U.S. regulatory authorities, in particular the FTC, for the Internet industry to develop and implement a mechanism allowing internet users to control tracking of their online activities across websites.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes data on behalf of the Company — third-party companies or individuals employed to facilitate the Service, provide the Service on our behalf, perform related services, or assist in analyzing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• Website refers to Health Solutions Clinic, accessible from www.healthsolutionsweightloss.com.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Usage Data

Usage Data

Usage Data is collected automatically when using the Service. It may include information such as Your Device’s Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service through a mobile device, We may collect certain information automatically, including but not limited to the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or access it through a mobile device.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
• Flash Cookies. Certain features of our Service may use local stored objects (Flash Cookies) to collect and store information about Your preferences or activity. Flash Cookies are not managed by the same browser settings as those used for Browser Cookies.
• Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company to count users who have visited those pages or opened an email, and for other related website statistics.

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. We use both Session and Persistent Cookies for the purposes set out below:

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage Your Account: to manage Your registration as a user of the Service and give You access to different functionalities available to registered users.
• For the performance of a contract: the development, compliance, and undertaking of the purchase contract for products, items, or services You have purchased or of any other contract with Us through the Service.
• To contact You: by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including security updates.
• To provide You with news, special offers, and general information about other goods, services, and events which we offer that are similar to those You have already purchased or inquired about, unless You have opted not to receive such information.
• To manage Your requests: to attend and manage Your requests to Us.
• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
• For other purposes: such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Service, products, and marketing.

We may share Your personal information in the following situations:

• With Service Providers: to monitor and analyze the use of our Service, for payment processing, and to contact You.
• For business transfers: in connection with any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business.
• With Affiliates: We may share Your information with Our affiliates, who will be required to honor this Privacy Policy.
• With business partners: to offer You certain products, services, or promotions.
• With other users: when You share personal information in public areas, such information may be viewed by all users and publicly distributed.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

SMS Communications and Messaging Consent

This section governs Health Solutions Clinic’s use of SMS/text messaging to communicate with patients and website users. By providing your mobile phone number to Health Solutions Clinic, you consent to receive text messages from us in accordance with the terms described below.

Consent and Opt-In

By providing your mobile phone number and affirmatively agreeing (by checking a box, clicking “I Agree,” or otherwise confirming), you consent to receive text messages from Health Solutions Clinic at the telephone number you have provided. Messages may include appointment confirmations and reminders, prescription notifications, test result notices, health-related communications, and other care-related information.

Message and data rates may apply. Message frequency varies. Consent to receive text messages is not a condition of purchasing any goods or services or receiving care from our clinic.

What Information We Collect

In connection with our SMS communications program, we collect the following information:

• Your name and mobile telephone number
• Your communication preferences and opt-in/opt-out status
• The date, time, and content of messages sent and received
• Delivery status and response data related to messages

How We Use Your Information

Information collected through our SMS program is used exclusively for the following purposes:

• Sending appointment confirmations, reminders, and scheduling updates
• Delivering prescription refill notifications and pickup confirmations
• Providing test results and health-related clinical notifications
• Facilitating other healthcare communications as part of your established care relationship with our clinic
• Complying with applicable legal, regulatory, and healthcare record-keeping obligations

No Sharing, Selling, or Marketing Use of Messaging Consent Data

Health Solutions Clinic is committed to protecting your privacy with respect to your messaging consent data. The following restrictions apply without exception:

• We will not sell, rent, lease, or otherwise transfer your mobile phone number or messaging consent status to any third party.
• We will not share your mobile phone number or opt-in consent data with any third party for their own marketing, advertising, or promotional purposes.
• Your messaging consent will not be used to send marketing or promotional messages unrelated to your healthcare and clinical relationship with Health Solutions Clinic.
• No information submitted through the SMS program will be shared with third parties or affiliates for marketing purposes without your explicit prior written consent.

Limited Sharing Permitted for Service Delivery Only

Solely to the extent necessary to operate our SMS communications program and deliver healthcare services, your phone number and message-related data may be accessed by:

• Our SMS service provider and telecommunications carriers, solely to deliver messages on our behalf
• Other healthcare providers involved in your direct care, as necessary and as permitted by applicable law including HIPAA
• Business associates who assist us in providing healthcare services, each of whom is bound by a signed Business Associate Agreement (BAA) and contractually prohibited from using your information for any purpose other than providing the designated service
• Law enforcement agencies or other parties strictly as required by applicable federal, state, or local law

How to Opt Out

You may opt out of receiving text messages from Health Solutions Clinic at any time using any of the following methods:

• Reply STOP, QUIT, CANCEL, UNSUBSCRIBE, or END to any message you receive from us
• Call us at 404-369-6300 and request removal from our messaging list
• Send a written opt-out request to orders@hscweightloss.com

We will honor your opt-out request as soon as practicable and no later than ten (10) business days from receipt, in accordance with FCC regulations. A one-time opt-out confirmation message may be sent at no charge. After opting out, you will receive no further SMS messages from Health Solutions Clinic except as may be required by law.

Important Security Notice

Standard text messages are not encrypted and may be intercepted by third parties. We will never ask you to send sensitive personal information — such as Social Security numbers, full credit card numbers, or detailed diagnoses — via text message. For sensitive communications, please contact our office directly by phone at 404-369-6300 or use our secure patient portal.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. This information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy, and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Detailed Information on the Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process, and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

Email Marketing

We may use Your Personal Data to contact You with newsletters, marketing or promotional materials, and other information that may be of interest to You. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us.

We may use Email Marketing Service Providers to manage and send emails to You.

Payments

We may provide paid products and/or services within the Service. In that case, we may use third-party services for payment processing. We will not store Your payment card details. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

Clover: Their Privacy Policy can be viewed at https://clover.com/us/privacy

“Do Not Track” Policy

Our Service does not respond to Do Not Track signals. However, some third party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.

Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party sites or services.

Changes to This Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective, and update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

Get an electronic or paper copy of your medical record:

• You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this.
• We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask us to correct your medical record:

• You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this.
• We may say “no” to your request, but we’ll tell you why in writing within 60 days.

Request confidential communications:

• You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
• We will say “yes” to all reasonable requests.

Ask us to limit what we use or share:

• You can ask us not to use or share certain health information for treatment, payment, or our operations.
• We are not required to agree to your request, and we may say “no” if it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer.
• We will say “yes” unless a law requires us to share that information.

Get a list of those with whom we’ve shared information:

• You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why.
• We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

Get a copy of this privacy notice:

• You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Choose someone to act for you:

• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
• We will make sure the person has this authority and can act for you before we take any action.

File a complaint if you feel your rights are violated:

• You can complain if you feel we have violated your rights by contacting us using the information below.
• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation
• Include your information in a hospital directory

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

In these cases we never share your information unless you give us written permission:

• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes

In the case of fundraising: We may contact you for fundraising efforts, but you can tell us not to contact you again.

Our Uses and Disclosures

How do we typically use or share your health information? We typically use or share your health information in the following ways.

Treat you:

• We can use your health information and share it with other professionals who are treating you. Example: A doctor treating you for an injury asks another doctor about your overall health condition.

Run our organization:

• We can use and share your health information to run our practice, improve your care, and contact you when necessary. Example: We use health information about you to manage your treatment and services.

Bill for your services:

• We can use and share your health information to bill and get payment from health plans or other entities. Example: We give information about you to your health insurance plan so it will pay for your services.

How else can we use or share your health information? We are allowed or required to share your information in other ways — usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

Help with public health and safety issues:

We can share health information about you for certain situations such as:

• Preventing disease
• Helping with product recalls
• Reporting adverse reactions to medications
• Reporting suspected abuse, neglect, or domestic violence
• Preventing or reducing a serious threat to anyone’s health or safety

Do research:

• We can use or share your information for health research.

Comply with the law:

• We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

Respond to organ and tissue donation requests:

• We can share health information about you with organ procurement organizations.

Work with a medical examiner or funeral director:

• We can share health information with a coroner, medical examiner, or funeral director when an individual dies.

Address workers’ compensation, law enforcement, and other government requests:

We can use or share health information about you:

• For workers’ compensation claims
• For law enforcement purposes or with a law enforcement official
• With health oversight agencies for activities authorized by law
• For special government functions such as military, national security, and presidential protective services

Respond to lawsuits and legal actions:

• We can share health information about you in response to a court or administrative order, or in response to a subpoena.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html

Changes to the Terms of This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our website.

This Notice of Privacy Practices applies to:

Health Solutions Clinic • 3660 Flat Shoals Rd, Suite 180 • Decatur, GA 30034