HIPAA Notice of Privacy Practices
Effective date: April 10, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment
[pepti] and the affiliated medical practices that provide care through the Services (collectively, the “Practice”) are committed to protecting the privacy of your health information. This Notice describes how we may use and disclose Protected Health Information (PHI) and your rights regarding PHI under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
How We May Use and Disclose Your PHI Without Your Authorization
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare. For example, we may share your information with the licensed healthcare provider reviewing your intake, with the compounding pharmacy filling your prescription, and with shipping carriers delivering your medication.
Payment
We may use and disclose your PHI to obtain payment for the services you receive. For example, we may share information with our payment processor or your insurance company (if applicable).
Healthcare Operations
We may use and disclose your PHI for healthcare operations such as quality assessment, provider performance review, training, accreditation, audits, and business management.
As Required by Law
We may disclose your PHI when required by federal, state, or local law, including for:
- Public health activities (e.g., disease reporting, adverse drug events to the FDA)
- Reports of abuse, neglect, or domestic violence
- Health oversight activities (e.g., audits, investigations)
- Judicial and administrative proceedings
- Law enforcement purposes
- Coroners, medical examiners, and funeral directors
- Organ donation
- Research (with appropriate safeguards)
- Workers' compensation
- Threats to health or safety
- Specialized government functions (e.g., military, national security)
Uses and Disclosures Requiring Your Authorization
Most uses and disclosures of PHI for marketing purposes, sales of PHI, and most psychotherapy notes require your written authorization. You may revoke an authorization at any time in writing.
Your Rights
Right to Inspect and Copy
You have the right to inspect and obtain a copy of your PHI in our designated record set, in the form and format you request if readily producible. We may charge a reasonable fee for the cost of producing copies.
Right to Amend
You have the right to request that we amend PHI you believe is incorrect or incomplete. Requests must be in writing and include the reason for the amendment. We may deny your request under certain circumstances.
Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures of your PHI made in the six years prior to your request.
Right to Request Restrictions
You have the right to request a restriction on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except in limited cases (e.g., when you pay for services in full out of pocket).
Right to Request Confidential Communications
You have the right to request that we communicate with you in a particular way or at a certain location (e.g., by mail to a specific address).
Right to a Paper Copy
You have the right to a paper copy of this Notice, even if you previously agreed to receive it electronically.
Right to Be Notified of a Breach
You have the right to be notified if there is a breach of your unsecured PHI.
Our Responsibilities
- We are required by law to maintain the privacy and security of your PHI.
- We will notify you if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this Notice and give you a copy of it.
- We will not use or share your information other than as described here unless you tell us we can in writing.
Changes to This Notice
We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain. We will post the current Notice on our website and provide a copy upon request.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us at privacy@hellopepti.com or with the U.S. Department of Health and Human Services, Office for Civil Rights at hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.
Contact
Privacy Officer
[pepti] Inc.
Email: privacy@hellopepti.com