HIPAA Notice of Privacy Practices for

Protected Health Information (PHI)

Effective Date: February 27, 2026
Anna Massage Therapy P.C.
Plainview, NY 11803

This notice describes how medical information about you may be used and disclosed and how you can get access to this information; please review it carefully. This Notice of Privacy Policy covers all Anna Massage Therapy P.C. entities. We have summarized our responsibilities and your rights on this page. For a complete description of our privacy practices, please review this entire notice.

Our Responsibilities

Our facility is required to:

• Maintain the privacy of your health information

• Provide you with this notice of our legal duties and privacy practices with respect to information we collect and maintain about you

• Abide by the terms of this notice

Your Rights

As a patient of Anna Massage Therapy P.C., you have several rights regarding your health information, including the following:

• The right to request that we do not use or disclose your health information in certain ways

• The right to request to receive communications in an alternative manner or location

• The right to access and obtain a copy of your health information

• The right to request an amendment to your health information

• The right to an accounting of disclosures of your health information

We reserve the right to change our privacy practices and to make the new provisions effective for all health information we maintain. Should our privacy practices change, we will post the changes on the bulletin board in our facility, as well as on our website. A copy of the revised notice will be available after the effective date of the changes upon request.

We will not use or disclose your health information without your authorization, except as described in this notice. If you have questions and would like additional information, you may contact our Officer. The Privacy Officer for Anna Massage Therapy p.c. and all entities covered under this policy is Anna Oh.

Understanding Your Health Record/Information

Each time you visit our facility, a record of your visit is made. Typically, this record contains your symptoms, examination and test results, diagnosis, treatment, and a plan for future care or treatment. This information, often referred to as your health or medical record, serves as a basis for planning your care and treatment; communication among the health professionals who contribute to your care; legal documentation of the care you received; billing verification; education of health professionals; data for medical research; information for public health officials; facility planning and marketing; and quality assessment and improvement.

Understanding what is in your record and how your health information is used helps you ensure its accuracy, better understand who may access your health information and why, and make more informed decisions when authorizing disclosure to others.

How We Will Use or Disclose Your Health Information

• Treatment — We will use or disclose your health information for treatment purposes, including coordination among members of your healthcare team.

• Payment — We will use or disclose your health information for payment purposes, including billing you or a third-party payer such as Medicare or Medicaid.

• Health Care Operations — We will use or disclose your health information for operations such as quality assessment, training, accreditation, licensing, credentialing, and compliance activities.

• Business Associates — We may disclose your health information to business associates such as accountants, consultants, attorneys, IT providers, or billing companies. They are required to appropriately safeguard your information.

• Directory — Unless you notify us that you object, we may use your name and general condition for directory purposes.

• Notification and Communication with Family — We may use or disclose information to notify or assist in notifying a family member or person involved in your care of your location or general condition.

• Research — We may disclose information to researchers when required conditions have been met.

• Transfer of Information at Death and Organ Procurement — We may disclose information to funeral directors, medical examiners, coroners, or organ procurement organizations as permitted by law.

• Marketing — We may contact you regarding treatment alternatives or health-related products or services. Marketing requiring authorization will only occur with your written permission.

• Fundraising — We may contact you as part of a fundraising effort.

• FDA, Workers Compensation, Public Health, Correctional Institutions, Law Enforcement, and Reports — We may disclose health information as required by law for public health, safety, oversight, law enforcement, workers' compensation, or reporting unlawful conduct.

Reproductive Health Care Privacy Protections (2026 Update)

We will not use or disclose your protected health information for the purpose of investigating or imposing liability on any person for seeking, obtaining, providing, or facilitating lawful reproductive health care. If we receive a request for protected health information that may relate to reproductive health care from law enforcement, a court, a health oversight agency, or another governmental authority, we may be required to obtain a signed attestation from the requestor confirming that the information is not being sought for a prohibited purpose before making any disclosure.

Substance Use Disorder Records (42 C.F.R. Part 2)

Certain records related to substance use disorder diagnosis, treatment, or referral may be protected by federal confidentiality law. If we maintain such records, they may be subject to additional restrictions on use and redisclosure under federal law beyond standard HIPAA protections.

Your Health Information Rights

Although your health record is the physical property of our facility, the information in your health record belongs to you. You have the following rights:

• You may request in writing that we do not use or disclose your health information for a particular reason related to treatment, payment, or health care operations.

• You may request that we communicate with you by alternative means or at alternative locations by submitting a written request to the Privacy Officer.

• You may request to inspect and/or obtain copies of your health information. A reasonable fee may apply.

• You may request an amendment to your health record in writing, with a reason supporting the request.

• You may request a written accounting of disclosures made during a period not to exceed six years. The first request in any 12-month period is free; subsequent requests may incur a reasonable fee.

• You may revoke an authorization in writing, except to the extent action has already been taken.

Breach Notification

We will notify you without unreasonable delay and no later than 60 days following the discovery of a breach of your unsecured protected health information. The notice will include a description of the breach, the types of information involved, steps you should take to protect yourself, a description of our mitigation efforts, and our contact information.

Changes to This Notice

We may change the terms of this Notice at any time. Revised notices will apply to all health information we maintain and will be posted in our office and on our website.

Other Uses of Medical Information

Other uses and disclosures of medical information not covered by this Notice will be made only with your written authorization. You may revoke that authorization in writing at any time.

For More Information or to Report a Problem

If you have questions or would like additional information, please contact our Officer: Anna Oh, 347-738-3251.

If you believe your privacy rights have been violated, you may file a complaint with us in writing or with the U.S. Department of Health and Human Services. There will be no retaliation for filing a complaint.