Compliance & Patient Rights

Notice of Privacy Practices (HIPAA)

PLEASE REVIEW CAREFULLY: THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

Last Updated: September 2026

1. Entities Covered by This Notice

This Notice of Privacy Practices applies to the clinical medical practice and its designated administrative management organization operating collaboratively:

Covered Entity: James E. Boyd, MD APMC (a California Professional Medical Corporation providing clinical oversight, medical evaluations, standing orders, and medical treatments).
Management Services Organization (Business Associate): Restore Health and Wellness, Inc. (providing non-clinical administrative, scheduling, technology, and management services to the practice under a formal Business Associate Agreement).

Both entities share protected health information (PHI) as necessary to provide care, secure payment, and carry out administrative and operational functions in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA).

2. Our Legal Duty

We are required by law to:

Maintain the privacy and security of your Protected Health Information (PHI).
Provide you with this Notice detailing our legal duties and privacy practices regarding your medical information.
Abide by the terms of the Notice currently in effect.
Promptly notify you if a breach occurs that may have compromised the privacy or security of your unsecured PHI.

3. How We May Use and Disclose Your Health Information

We use and share your health information for the following standard purposes:

For Treatment: We may disclose your PHI to physicians, nurse practitioners, registered nurses, and other clinical staff involved in your direct clinical care (e.g., medical intake evaluations, IV infusions, nutrient therapies, medication administration).
For Payment: We may use and disclose your PHI to process your payments, verify insurance eligibility (if applicable), coordinate with billing intermediaries, or collect balances owed for services rendered.
For Healthcare Operations: We may use and disclose your PHI to support practice management, quality assurance audits, clinician training, accreditation, licensing reviews, and day-to-day administrative operations.
Business Associates: We share PHI with contracted third parties (such as cloud-hosted Electronic Health Record systems, laboratory partners, accredited specialty pharmacies, and scheduling platforms) that perform services on our behalf. All Business Associates are legally bound by written agreements to safeguard your data.
Appointment Reminders & Service Communications: We may contact you via email, SMS, or phone with appointment confirmations, clinical preparation instructions, or treatment follow-ups.

4. Special Situations Permitted or Required by Law

We may share your PHI without prior written authorization in certain legally mandated circumstances:

Required by Law: When required by federal, state, or local statutes.
Public Health & Safety: To report adverse drug reactions, product recalls, communicable disease exposure, or to prevent a serious, imminent threat to your health or public safety.
Health Oversight Activities: For audits, investigations, inspections, and licensing reviews conducted by healthcare regulatory agencies (e.g., Medical Board of California, California Department of Public Health, U.S. DHHS).
Legal Proceedings & Law Enforcement: In response to a valid court order, subpoena, administrative request, or law enforcement requirement permitted under California and federal law.

5. Uses Requiring Your Explicit Written Authorization

The following uses will only be made with your signed, written authorization:

Marketing Communications: We will not sell or share your PHI with third parties for outside marketing purposes without your prior written consent.
Sale of PHI: We will never sell your personal or medical data.
Other Uses: Any other use or disclosure of PHI not outlined in this Notice requires your explicit written authorization, which you may revoke in writing at any time.

6. Your Rights Regarding Your Health Information

Under HIPAA and the California CMIA, you have the following rights:

Right to Inspect and Copy: You have the right to inspect and obtain an electronic or paper copy of your medical and billing records.
Right to Amend: If you believe information in your record is incorrect or incomplete, you may submit a written request for an amendment.
Right to Request Restrictions: You may ask us not to use or share certain PHI for treatment, payment, or operations. If you pay for a service fully out-of-pocket, you may instruct us not to share information about that service with your health insurance plan.
Right to Request Confidential Communications: You may request that we communicate with you via a specific method (e.g., email only, specific phone number, or alternative mailing address).
Right to an Accounting of Disclosures: You may request a list of certain instances where we shared your PHI outside of standard treatment, payment, and operations.
Right to a Paper Copy: You may request a physical copy of this Notice at any time, even if you previously agreed to receive it electronically.

7. Changes to This Notice

We reserve the right to revise this Notice of Privacy Practices at any time. Any changes will apply to all PHI we maintain. The revised notice will be posted on our website and made available upon request at our facility.

8. Questions and Complaints

If you have questions about this Notice, or if you believe your privacy rights have been violated, you may contact our Privacy Officer:

Privacy Officer: James E. Boyd, MD APMC / Restore Health and Wellness, Inc.
Email: Info@RestoreHealthIV.com
Phone: (858) 351-3255
Address: Restore Health and Wellness, Inc., Attn: Privacy Officer, 12220 World Trade Dr, Suite 130, San Diego, CA 92128

You may also file a formal written complaint with the U.S. Department of Health and Human Services Office for Civil Rights (OCR):

Web Portal: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
Mailing Address: U.S. Department of Health & Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201

We will not retaliate against you in any way for filing a complaint.