This page explains how NPOC Wellness and Aesthetics, a d/b/a of Nurse Practitioner On Call LLC ("NPOC," "we," "us," or "our"), collects and uses information through our website and communications (Part 1 — Privacy Policy), and how we protect your health information (Part 2 — HIPAA Notice of Privacy Practices). You can reach us at info@npocwellness.com or 410-246-4768.

Part 1 — Website & Communications Privacy Policy

Information We Collect
We collect information you provide directly to us and information collected automatically when you use our website.

Information you provide: When you complete a contact or booking form, subscribe to our newsletter, or communicate with us, we may collect your name, email address, phone number, and any information you include in your message. When you book or purchase services, payment is processed by our third-party payment processor (Square); we do not store full payment card numbers on our systems.

Information collected automatically: When you visit our website, we may automatically collect technical information such as your IP address, browser type, device information, pages viewed, and usage data, through cookies and similar technologies (see "Cookies and Tracking Technologies" below).

Any protected health information you provide in the course of receiving services is handled in accordance with our HIPAA Notice of Privacy Practices in Part 2.

How We Use Your Information
We use the information we collect to respond to your inquiries and provide the services you request; to schedule, confirm, and remind you about appointments; to process payments; to send you administrative and, where you have consented, marketing communications; to operate, maintain, and improve our website; and to comply with our legal obligations. We do not sell your personal information.

Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate the site, remember your preferences, analyze traffic, and improve your experience. Cookies are small files stored on your device.

We may use essential cookies (required for the site to function), analytics cookies (to understand how visitors use the site), and, where applicable, marketing cookies. Our website may also use third-party analytics services that set their own cookies, subject to their own privacy policies.

You can control or disable cookies through your browser settings. Disabling some cookies may affect the functionality of the site.

SMS / Text Messaging and Mobile Information
When you provide your mobile phone number and opt in to receive text messages from NPOC Wellness and Aesthetics, we use it to send appointment reminders and confirmations, scheduling and booking information, and — where you have consented — promotional and wellness offers.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for the aggregators and providers of the text message service, and only as needed to deliver the messages you have requested. This opt-in data is excluded from every other information-sharing category described in this policy.

Message frequency varies. Message and data rates may apply. You can opt out of text messages at any time by replying STOP; reply HELP for help, or contact us at info@npocwellness.com or 410-246-4768. Consent to receive text messages is not a condition of purchasing any goods or services.

Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, use, alteration, or disclosure. Payment transactions are processed through our payment processor (Square) using industry-standard, PCI-compliant security.

While we take steps to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. Protected health information is safeguarded in accordance with HIPAA and the Notice of Privacy Practices in Part 2.

Your Choices
You may unsubscribe from marketing emails using the link in any message, opt out of text messages by replying STOP, and control cookies through your browser settings. For your rights regarding protected health information, see Part 2. To ask a question about this policy or update your information, contact us at info@npocwellness.com.

Third-Party Services
Our website and communications may link to or rely on third-party services, including booking, payment, and financing providers. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies. We share information with service providers only as needed to deliver the services you request.

Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Your continued use of our website or services after changes take effect constitutes acceptance of the revised policy.

Part 2 — HIPAA Notice of Privacy Practices

NPOC Wellness and Aesthetics is committed to maintaining and protecting the confidentiality of the individual's PHI. NPOC Wellness and Aesthetics is required by federal and state law, including the Health Insurance Portability and Accountability Act ("HIPAA"), to protect the individual's PHI and other personal information. NPOC Wellness and Aesthetics is required to provide the individual with this Notice of Privacy Practices regarding their specific policies, safeguards, and practices. When NPOC Wellness and Aesthetics uses or discloses an individual's PHI, NPOC Wellness and Aesthetics is bound by the terms of this Notice of Privacy Practices, or the revised Notice of Privacy Practices, if applicable.

I. Our Pledge Regarding Your Personal Health Information
NPOC Wellness and Aesthetics understands that health information about you and your health care is personal. We are committed to protecting health information about you. We create a record of the care and services you receive from us. We need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated by this NPOC Wellness and Aesthetics practice. This notice will tell you about the ways in which we may use and disclose health information about you. NPOC Wellness and Aesthetics Clinic also describes your rights to the health information we keep about you and describes certain obligations we have regarding the use and disclosure of your health information. NPOC Wellness and Aesthetics Clinic is required by law to:

Make sure that protected health information ("PHI") that identifies you is kept private.

Give you this notice of our legal duties and privacy practices with respect to health information.

Follow the terms of the notice that is currently in effect.

We can change the terms of this Notice, and such changes will apply to all information we have about you. The new Notice will be available upon request, in our office, and on our website.

II. How NPOC Wellness and Aesthetics May Use and Disclose Your Health Information
The following describes the ways NPOC Wellness and Aesthetics may use and disclose PHI. Except for the purposes described below, NPOC Wellness and Aesthetics will use and disclose PHI only with the individual's written permission. The individual may revoke such permission at any time by writing to NPOC Wellness and Aesthetics, attention: Ikechukwu Obiora, Privacy Officer (info@npocwellness.com).

For Treatment: We may use and disclose PHI for the individual's services. For example, NPOC Wellness and Aesthetics may disclose PHI to doctors, nurses, technicians, or other personnel, including people outside NPOC Wellness and Aesthetics, who are involved in the individual's medical care and need the information to provide the individual with medical care.

For Payment: NPOC Wellness and Aesthetics Clinic does not participate with or bill any insurance providers. All services rendered at our clinic are provided on a self-pay basis, meaning clients are financially responsible for payment in full at the time services are rendered. Accepted forms of payment include credit or debit card payments, processed securely through Square. Because we do not accept insurance, we will not submit claims on behalf of clients, nor can we guarantee reimbursement from any third-party payer.

For Health Care Operations: We may use and disclose PHI for health care operation purposes. These uses and disclosures are necessary to make sure that all NPOC Wellness and Aesthetics patients receive quality care and to operate and manage our office.

Appointment Reminders, Treatment Alternatives, and Health Related Benefits and Services: We may use and disclose PHI to contact the individual to remind them that they have an appointment with NPOC Wellness and Aesthetics. We also may use and disclose PHI to tell the individual about treatment alternatives or health-related benefits and services that may be of interest to the individual.

Research: Under certain circumstances, NPOC Wellness and Aesthetics may use and disclose PHI for research. For example, a research project may involve comparing the health of patients who received one treatment to those who received another, for the same condition. NPOC Wellness and Aesthetics will generally ask for the individual's written authorization before using the individual's PHI or sharing it with others to conduct research. Under limited circumstances, we may use and disclose PHI for research purposes without the individual's permission.

Incidental Use and Disclosure: We are not required to eliminate every risk of an incidental use or disclosure of your PHI. Specifically, a use or disclosure of your PHI that occurs as a result of, or incident to, an otherwise permitted use or disclosure is permitted as long as we have adopted reasonable safeguards to protect your PHI, and the information being shared was limited to the minimum necessary.

III. Special Situations in Which We May Disclose PHI Without Your Consent
As Required by Law: We will disclose PHI when required to do so by international, federal, state, or local law.

To Avert a Serious Threat to Health or Safety: We may use and disclose PHI when necessary to prevent a serious threat to the individual's health and safety or the health and safety of others. Disclosures, however, will be made only to someone who may be able to help prevent or respond to the threat, such as law enforcement or a potential victim. For example, we may need to disclose information to law enforcement when a patient reveals participation in a violent crime.

Law Enforcement: We may release PHI if asked by a law enforcement official if the information is: (1) in response to a court order, subpoena, warrant, summons or similar process; (2) limited information to identify or locate a suspect, fugitive, material witness, or missing person; (3) about the victim of a crime even if, under certain very limited circumstances, NPOC Wellness and Aesthetics is unable to obtain the individual's agreement; (4) about a death NPOC Wellness and Aesthetics believes may be the result of criminal conduct; (5) about criminal conduct on NPOC Wellness and Aesthetics premises; and (6) in an emergency to report a crime, the location of the crime or victims, or the identity, description or location of the person who committed the crime.

Abuse or Neglect: We may disclose your PHI to a state or local agency that is authorized by law to receive reports of abuse or neglect. However, the information we disclose is limited to only that information which is necessary to make the required mandated report.

Essential Government Functions: We may be required to disclose your PHI for certain essential government functions. Such functions include but are not limited to: assuring proper execution of a military mission, conducting intelligence and national security activities that are authorized by law, providing protective services to the President, making medical suitability determinations for U.S. State Department employees, protecting the health and safety of inmates or employees in a correctional institution, and determining eligibility for or conducting enrollment in certain government benefit programs.

Business Associates: We may disclose PHI to any business associates that perform functions on our behalf or provide NPOC Wellness and Aesthetics with services if the information is necessary for such functions or services. All of NPOC Wellness and Aesthetics's business associates are obligated to protect the privacy of the individual's information and are not allowed to use or disclose any information other than as specified in our contract.

Lawsuits and Disputes: If the individual is involved in a lawsuit or a dispute, NPOC Wellness and Aesthetics may disclose PHI in response to a court or administrative order. NPOC Wellness and Aesthetics also may disclose PHI in response to a subpoena, discovery request, or other lawful request by someone else involved in the request or to allow the individual to obtain an order protecting the information requested.

Health Oversight: We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. Oversight agencies seeking this information include government agencies and organizations that provide financial assistance to the program (such as third-party payors) and peer review organizations performing utilization and quality control. If we disclose PHI to a health oversight agency, we will have an agreement in place that requires the agency to safeguard the privacy of your information.

IV. You Have the Following Rights with Respect to Your PHI
The Right to Request Limits on Uses and Disclosures of Your PHI: You have the right to ask NPOC Wellness and Aesthetics not to use or disclose certain PHI for treatment, payment, or health care operations purposes. We are not required to agree to your request, and we may say "no" if we believe it would affect your health care.

The Right to Request Restrictions for Out-of-Pocket Expenses Paid for In Full: Under federal law, you have the right to request that a health care provider does not disclose information about a service to your health plan if you pay for that service completely out-of-pocket. Because NPOC Wellness and Aesthetics Clinic is a self-pay practice and does not bill or share information with insurance companies, this restriction already applies to all services we provide. This right does not affect other permitted uses or disclosures of your health information under federal law, such as those for treatment, health care operations, or when disclosure is required by law.

The Right to Choose How We Send PHI to You: You have the right to ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address, and we will agree to all reasonable requests.

The Right to See and Get Copies of Your PHI: You have the right to get an electronic or paper copy of your medical record and other information that we have about you. We will provide you with a copy of your record, or a summary of it if you agree to receive a summary, within the applicable time frame in accordance with state and federal laws upon receiving your written request, and we may charge a reasonable, cost-based fee for doing so. In Maryland, your right to see and get copies of your Protected Health Information (PHI) is governed by both federal law, primarily the HIPAA Privacy Rule, and state law, which mandates that providers respond within a reasonable time. Federal law gives you the right to access and copy most of your medical and billing records, while state law specifies that health care providers must respond to a request within 21 business days.

The Right to Get a List of the Disclosures We Have Made: You have the right to request a list of instances in which we have disclosed your PHI for purposes other than treatment, payment, or health care operations, or for which you provided us with an Authorization. We will respond to your request for an accounting of disclosures within 30 days of receiving your request. The list we provide will include disclosures made during the six years prior to your request, unless you request a shorter period. We will provide the list to you at no charge, but if you make more than one request in the same year, we will charge you a reasonable cost-based fee for each additional request.

The Right to Correct or Update Your PHI: If you believe that there is a mistake in your PHI, or that a piece of important information is missing from your PHI, you have the right to request that NPOC Wellness and Aesthetics Clinic correct the existing information or add the missing information. We may say "no" to your request, but we will tell you why in writing within 60 days. If we need more time to respond, we may extend our response period by up to an additional 30 days. In that case, we will notify you in writing of the reason for the delay and provide a new date by which we will complete our review and respond. If your request is denied, our written notice will explain the basis for the denial.

The Right to Get a Paper or Electronic Copy of this Notice: You have the right to get a paper copy of this Notice, and you have the right to get a copy of this notice by e-mail. And, even if you have agreed to receive this Notice via e-mail, you also have the right to request a paper copy of it. (This notice will be available in your client portal.)

Right to Get Notice of a Breach: NPOC Wellness and Aesthetics is committed to safeguarding the individual's PHI. If a breach of the individual's PHI occurs, NPOC Wellness and Aesthetics will notify the individual in accordance with state and federal law.

Right to Request Restrictions: Individuals have the right to request a restriction or limitation on the PHI NPOC Wellness and Aesthetics uses or discloses for treatment, payment, or health care operations. Individuals also have the right to request a limit on the PHI we disclose to someone involved in the individual's care or the payment for the individual's care, like a family member or friend.

To request a restriction, the individual must make their request, in writing, to the Department in which their care was provided. NPOC Wellness and Aesthetics is not required to agree to the individual's request unless the individual is asking us to restrict the use and disclosure of the individual's PHI to a health plan for payment or health care operation purposes and such information the individual wishes to restrict pertains solely to a health care item or service for which the individual has paid NPOC Wellness and Aesthetics out-of-pocket in full. If we agree, we will comply with the individual's request unless the information is needed to provide the individual with emergency treatment or to comply with law. If we do not agree, we will provide an explanation in writing.