Notice of Privacy Practices

This Notice applies to Crescent Health, a service of Crescent Community Care LLC ("Crescent Health," "we," "us"), a covered entity under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA").

We are required by law to:

• Maintain the privacy of your Protected Health Information ("PHI")
• Provide you with this Notice of our legal duties and privacy practices regarding PHI
• Notify you following a breach of unsecured PHI as required by the HIPAA Breach Notification Rule
• Abide by the terms of the Notice currently in effect

Treatment. We may use and disclose your PHI to provide, coordinate, or manage your healthcare — for example, sharing information with a pharmacist to fill your prescription, a laboratory to process labs, or a specialist to whom we refer you.

Payment. We may use and disclose your PHI to obtain payment for services — for example, processing your credit card transaction through our payment processor.

Healthcare Operations. We may use and disclose your PHI for quality improvement, training, credentialing, compliance, and similar internal operations.

Business Associates. We may share your PHI with vendors who perform services on our behalf (e.g., video platform, scheduling, cloud storage) under a signed Business Associate Agreement.

As Required by Law. We may disclose your PHI when required by federal, state, or local law, including in response to subpoenas and court orders.

Public Health and Safety. We may disclose PHI to public health authorities to prevent or control disease, to report suspected abuse or neglect, to avert a serious threat to health or safety, and as otherwise permitted by law.

Health Oversight. We may disclose PHI to health oversight agencies for audits, investigations, inspections, and licensure actions.

Coroners, Medical Examiners, Funeral Directors. As permitted by law.

Workers' Compensation. As authorized by workers' compensation laws.

Military and Specialized Government Functions. As required by law for military personnel, national security, and similar lawful purposes.

We will obtain your written authorization before:

• Using or disclosing psychotherapy notes (if any)
• Using or disclosing PHI for marketing purposes
• Selling your PHI
• Any other use or disclosure not described in this Notice or otherwise permitted by law

You may revoke an authorization at any time in writing, except to the extent we have already acted in reliance on it.

You have the following rights regarding your PHI:

• Right to Inspect and Copy: You may request access to and copies of your medical records. We will respond within 30 days and may charge a reasonable cost-based fee for copies.
• Right to Amend: You may request that we amend PHI you believe is inaccurate or incomplete. We may deny the request under limited circumstances and will provide a written explanation.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI, typically for the six years prior to the request.
• Right to Request Restrictions: You may request restrictions on certain uses and disclosures. We are not required to agree except that we must comply with a request to restrict disclosure to a health plan for an item or service you paid for in full out of pocket.
• Right to Request Confidential Communications: You may request that we communicate with you about medical matters in a specific way or at a specific location (for example, by a specific email address or phone number).
• Right to a Paper Copy of This Notice: You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
• Right to Be Notified of a Breach: You have the right to be notified of a breach of your unsecured PHI.

To exercise any of these rights, email us at admin@crescent-telemed.com.

We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain. The current Notice will always be posted on this website with the effective date. Upon request, we will provide you with any revised Notice.

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

To file a complaint with Crescent Health:
Email: admin@crescent-telemed.com

To file a complaint with HHS:
hhs.gov/ocr/complaints

Questions about this Notice or our privacy practices should be directed to our Privacy Officer:

Crescent Community Care LLC
Attn: Privacy Officer
P.O. Box 3179, Lilburn, GA 30048
Email: admin@crescent-telemed.com
Phone: (770) 923-2740