HIPAA Policy

HIPAA NOTICE OF PRIVACY PRACTICES

Effective Date: September 3, 2025

This Notice of Privacy Practices (“Notice”) is issued by Oaktree Health and Wellness, LLC, doing business as Everest Diabetes & Endocrinology, Everest Diabetes & Weight Loss, and Everest Eclinic (collectively referred to herein as “Everest”). It describes how Everest may use and disclose your protected health information (PHI) to carry out treatment, payment, or health care operations (TPO) and for other purposes that are permitted or required by law. It also describes your rights to access and control your PHI.

1. Uses and Disclosures of Protected Health Information

Your protected health information may be used and disclosed by your provider, our office staff, and others outside of our office that are involved in your care and treatment for the purpose of providing health care services to you, obtaining payment, supporting practice operations, and any other use required by law.

Treatment
We will use and disclose your protected health information to provide, coordinate, or manage your health care and related services. This includes coordination with third parties. For example, we may disclose PHI to a provider to whom you have been referred to ensure continuity of care.

Payment
Your protected health information will be used as needed to obtain payment for health care services. For example, obtaining approval for medication or laboratory services may require disclosure of PHI to your health plan.

Health Care Operations
We may use or disclose your PHI in order to support the business activities of our practice. These activities include, but are not limited to, quality assessment, employee training, licensing, and conducting business operations. For example, we may use PHI to remind you of upcoming appointments.

Telehealth
As a telehealth practice, we may create, transmit, and store your protected health information electronically. We use only HIPAA-compliant platforms for telehealth visits, electronic records, and secure messaging.

Business Associates
 We may share PHI with vendors (business associates) who perform functions for us under contracts requiring HIPAA safeguards.

Minimum Necessary
When using, disclosing, or requesting PHI, we make reasonable efforts to limit PHI to the minimum necessary to accomplish the intended purpose.

 
2. Other Uses and Disclosures Without Authorization

We may use or disclose your PHI in the following situations without your authorization: as required by law, for public health activities, communicable disease reporting, health oversight, abuse or neglect reporting, FDA requirements, legal proceedings, law enforcement, coroners/funeral directors, organ donation, research, criminal activity, military and national security purposes, workers’ compensation, correctional institutions, and when required by the Secretary of the Department of Health and Human Services.

 
3. Other Permitted and Required Uses and Disclosures

Other uses and disclosures will be made only with your written authorization or opportunity to object, unless otherwise required by law. You may revoke such authorization in writing at any time, except to the extent that action has already been taken in reliance on it.

 
4. Your Rights

You have the following rights regarding your protected health information:

1. Inspect and Copy: You may inspect and obtain a copy of your PHI, including an electronic copy upon request. Federal law prohibits inspection of psychotherapy notes, information prepared for legal proceedings, or PHI restricted by other laws.
2. Request Restrictions: You may request restrictions on use or disclosure of your PHI for treatment, payment, or operations. We are not required to agree to most restrictions. However, if you pay for services out-of-pocket in full, we must honor your request not to disclose PHI to your health plan unless otherwise required by law.
3. Confidential Communications: You may request to receive communications from us by alternative means or at alternative locations.
4. Paper Copy: You have the right to obtain a paper copy of this notice upon request, even if you previously agreed to receive it electronically.
5. Amendments: You may request that we amend your PHI. If denied, you may submit a statement of disagreement, and we may prepare a rebuttal, which will be provided to you.
6. Breach Notification: You have the right to be notified following a breach of your unsecured PHI
7. Accounting of Disclosures: You may request an accounting of certain disclosures of your PHI made by our practice.

5. Changes to This Notie

We reserve the right to change the terms of this notice. If changed, a revised Notice of Privacy Practices will be posted on our website and made available upon request.

 
6. Complaints

You may complain to us or to the Secretary of Health and Human Services if you believe your privacy rights have been violated. You may file a complaint with us by contacting our Privacy Officer. Filing a complaint will not affect your care or treatment in any way.

We are required by law to maintain the privacy of your protected health information and provide you with this Notice of our legal duties and privacy practices. If you have questions or concerns, please contact our practice at:

203-689-0558
[email protected]