THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
HIPAA Notice of Privacy Practices
Bocahealthyandfit, PLLC | Effective Date: September 10, 2026
Our Commitment to Your Privacy
Bocahealthyandfit, PLLC (the "Practice") is committed to protecting the privacy of your health information. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations to maintain the privacy of your Protected Health Information ("PHI"), to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice currently in effect.
Privacy Officer Contact
Bocahealthyandfit, PLLC
7100 W Camino Real, Suite 404, Boca Raton, FL 33433
Phone: (561) 392-3557
Email: [email protected]
What Is Protected Health Information (PHI)?
PHI is individually identifiable health information that relates to your past, present, or future physical or mental health or condition; the provision of health care to you; or the past, present, or future payment for the provision of health care to you.
How We May Use and Disclose Your PHI
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. For example, we may share your PHI with other health care providers involved in your care, such as specialists, laboratories, or hospitals.
Payment
We may use and disclose your PHI to obtain payment for services we provide to you. For example, we may submit claims to your health insurance company and include information about the services you received.
Health Care Operations
We may use and disclose your PHI for our internal operations, including quality assessment and improvement activities, training, licensing, and business management functions necessary to operate the Practice.
Other Permitted Uses and Disclosures
We may also use or disclose your PHI without your authorization in the following circumstances, as permitted or required by law:
- As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.
- Public Health Activities: To authorized public health authorities for activities such as preventing or controlling disease, injury, or disability.
- Health Oversight Activities: To government agencies for oversight activities authorized by law, such as audits, investigations, and inspections.
- Judicial and Administrative Proceedings: In response to a court or administrative order, subpoena, discovery request, or other lawful process.
- Law Enforcement: To law enforcement officials for limited purposes as permitted by law.
- Serious Threats to Health or Safety: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
- Workers' Compensation: As authorized by and to the extent necessary to comply with workers' compensation laws.
- Coroners, Medical Examiners, and Funeral Directors: As necessary to carry out their duties.
- Research: Under certain conditions, for research purposes approved by an institutional review board or privacy board.
- Military and Veterans: If you are a member of the armed forces, as required by military command authorities.
- National Security and Intelligence: To authorized federal officials for intelligence, counterintelligence, and other national security activities.
Uses and Disclosures Requiring Your Authorization
Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes, but is not limited to:
- Most uses and disclosures of psychotherapy notes
- Uses and disclosures of PHI for marketing purposes
- Sale of your PHI
- Uses and disclosures of PHI that constitute fundraising communications beyond what is permitted by law
You may revoke any authorization you have given us at any time, in writing, except to the extent that we have already taken action in reliance on the authorization.
Your Rights Regarding Your PHI
You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer at the contact information above.
Right to Access and Receive Copies
You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, including your medical and billing records. We may charge a reasonable, cost-based fee for copies. We will respond to your request within 30 days.
Right to Amend
If you believe that PHI we have about you is incorrect or incomplete, you may request that we amend it. We may deny your request under certain circumstances. If we deny your request, we will explain why in writing.
Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures we have made of your PHI. This right applies to disclosures made for purposes other than treatment, payment, or health care operations, and certain other exceptions.
Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request, except in limited circumstances (e.g., if you pay out-of-pocket in full for a service and ask us not to disclose that information to your health plan).
Right to Request Confidential Communications
You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. For example, you may ask that we contact you only at a specific phone number or address. We will accommodate reasonable requests.
Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Please contact our Privacy Officer to request a paper copy.
Right to Be Notified of a Breach
You have the right to be notified in the event of a breach of your unsecured PHI, as required by the HIPAA Breach Notification Rule.
Our Duties
We are required by law to:
- Maintain the privacy and security of your PHI
- Provide you with this Notice of our legal duties and privacy practices
- Notify you following a breach of your unsecured PHI
- Abide by the terms of the Notice currently in effect
We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all PHI that we maintain. We will post the revised Notice on our website and make it available upon request.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with:
Bocahealthyandfit, PLLC Privacy Officer
7100 W Camino Real, Suite 404
Boca Raton, FL 33433
(561) 392-3557
[email protected]
U.S. Dept. of Health & Human Services
Office for Civil Rights
200 Independence Ave., S.W.
Washington, D.C. 20201
Toll Free: 1-877-696-6775
www.hhs.gov/ocr
You will not be retaliated against for filing a complaint.
Effective Date: September 10, 2026 | Note: This Notice covers the handling of Protected Health Information (PHI) by Bocahealthyandfit, PLLC as a HIPAA covered entity. For information about how we handle data collected through our website, see our Privacy Policy.
This Notice has been prepared for informational purposes. For questions about your specific rights or circumstances, please contact our Privacy Officer or consult a qualified healthcare attorney.