Privacy
Practices.

Somi Health LLC HIPAA Privacy Statement: Notice of Privacy Practices for Protected Health Information (PHI)

Somi Health LLC

HIPAA Privacy Statement:

Notice of Privacy Practices for Protected Health Information (PHI)

Effective Date: 3/15/2025

This Notice of Privacy Practices ("Notice") outlines how Somi Health LLC and its affiliated licensed medical groups and healthcare providers offering medical weight loss services through the Somi Health platform ("we", "us", or "our") may use and disclose your Protected Health Information (PHI) to facilitate treatment, payment, or healthcare operations, as well as other purposes permitted or required by law. This Notice also describes your rights regarding your PHI. We are legally obliged to maintain the privacy of your PHI, provide this Notice detailing our legal responsibilities and privacy practices, and adhere to the terms of this Notice.

Uses and Disclosures of PHI:

We may use and disclose your PHI for the following purposes:

Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes communication with other healthcare providers about your treatment and coordinating your care with other providers.

Payment: We may use and disclose your PHI to obtain payment for healthcare services provided to you. This may involve sharing PHI with other healthcare providers, pharmacies, or collection agencies.

Healthcare Operations: We may use and disclose your PHI for healthcare operations, including quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.

As Required by Law: We may use and disclose your PHI when mandated by federal, state, or local law.

Public Health and Safety: We may use and disclose your PHI to prevent or control disease, injury, or disability; report child abuse or neglect; report reactions to medications or issues with products; and notify individuals who may have been exposed to a communicable disease or may be at risk of spreading a disease or condition.

Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.

Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.

Law Enforcement: We may disclose your PHI for law enforcement purposes, such as reporting certain types of wounds or injuries, or complying with a court order, warrant, or other legal process.

Research: We may use and disclose your PHI for research purposes when the research has been approved by an institutional review board and privacy protections are established.

Organ and Tissue Donation: If you are an organ donor, we may disclose your PHI to organizations responsible for organ procurement, transplantation, or donation.

Workers' Compensation:We may disclose your PHI in compliance with workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.

Military and Veterans: If you are a member of the armed forces, we may disclose your PHI as required by military authorities.

Inmates: If you are an inmate, we may disclose your PHI to the correctional institution or law enforcement official having custody of you.

Your Rights Regarding PHI:

You possess the following rights concerning your PHI:

Right to Inspect and Copy: You have the right to inspect and copy your PHI maintained by us, with certain exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for costs associated with copying, mailing, or other supplies related to your request.

Right to Amend: You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. To request an amendment, submit a written request to our Privacy Officer, specifying the information you believe is incorrect and the reasons why. We may deny your request if we believe the information is accurate and complete or if we did not create the information.

Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past six years, excluding disclosures made for treatment, payment, or healthcare operations, and certain other disclosures. To request an accounting, submit a written request to our Privacy Officer.

Right to Request Restrictions: You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment, or healthcare operations. Although we are not obligated to agree to your request, we will consider it. To request a restriction, submit a written request to our Privacy Officer, specifying the restriction and to whom it applies.

Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a specific manner or at a particular location. To request confidential communications, submit a written request to our Privacy Officer, indicating how or where you wish to be contacted.

Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you agreed to receive it electronically. To obtain a paper copy, contact our Privacy Officer.

Right to be Notified of a Breach: You have the right to be notified if we discover a breach of your PHI.

Transmission of PHI:

We are dedicated to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI adheres to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR 164). This includes using Secure-Socket Layer (SSL) or equivalent technology for transmitting PHI and adhering to all applicable security standards for online transmissions of PHI.

Changes to This Notice:

We reserve the right to revise this Notice, and any changes will apply to PHI we already have about you and any future information we receive. We will display a copy of the current Notice in our office and on our website. The Notice will include the effective date on the first page.

Complaints:

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or the Secretary of the Department of Health and Human Services. There will be no retaliation for filing a complaint.

Contact Information:

To exercise any of your rights, or if you have questions about this Notice or our privacy practices, please contact the Somi Health Privacy Officer at: Contact Information

If you have questions or need further assistance, contact:

Somi Health
Chioma Asbury, MHA/MBA
4111 E Rose Lake Dr
Charlotte NC, 28217
(704) 386-6871
support@joinsomi.com

This Notice is provided in accordance with the Notice of Privacy Practices for Protected Health Information from the Department of Health and Human Services' Model and is applicable across all US states.

Rights Specific to Jurisdictions within the US:

Certain states may offer additional privacy protections applicable to your PHI. Below are examples of specific rights within California. If you reside in a state with additional privacy protections, you may have extra rights related to your PHI.

Notice of Privacy Practices for Protected Health Information (PHI) – State-Specific Provisions:

In addition to the privacy practices outlined here, we comply with applicable state-specific privacy laws concerning PHI.

Examples of states with additional privacy protections include:

California:

For residents of California, we adhere to the Confidentiality of Medical Information Act (CMIA) and California's specific privacy laws regarding marketing, sale of PHI, and minors' rights. Written consent will be obtained before disclosing certain information, adhering to additional privacy protections required by California law.

Right to Access: Besides the rights described above, California residents may request access to their PHI in an electronically usable format, along with any additional information required by California law. Submit a written request to our Privacy Officer to request access.

Right to Restrict Certain Disclosures: California residents may request restrictions on certain disclosures of their PHI to health plans if they paid out-of-pocket for specific healthcare items or services in full. To request such a restriction, submit a written request to our Privacy Officer.

Confidentiality of Medical Information Act (CMIA): California residents receive additional privacy protections under the CMIA. Compliance with CMIA is required in addition to HIPAA.

Marketing and Sale of PHI: California residents can request that their PHI not be used for marketing purposes or sold to third parties without authorization. To restrict the use or sale of your PHI, submit a written request to our Privacy Officer.

Minor's Rights: Minors (under 18 years old) may request that certain information related to sensitive services—such as reproductive health, mental health, or substance use disorder treatment—not be disclosed to parents or guardians without consent. Submit a written request to our Privacy Officer to restrict such information.

Other States:

For residents of other states, consult specific privacy laws for information about additional rights regarding your PHI. You may also contact our Privacy Officer for more information about your rights under specific state laws.

Texas:

For Texas residents, we comply with the Texas Medical Privacy Act, offering privacy protections beyond HIPAA, including requiring consent for certain PHI disclosures, additional safeguards for electronic PHI, and specific requirements for PHI destruction. Texas privacy protections for mental health records and substance use treatment records are also followed.

Florida:

For Florida residents, we comply with Florida's privacy laws, providing additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records. Written consent will be obtained before disclosing such information, even for treatment, payment, or healthcare operations. Specific security measures to protect electronic PHI as required by Florida law are implemented.