Privacy policy and Notice of Privacy Practices
Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Tonies Health is required by law to protect the privacy of your health information, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. "Health information" means information that identifies you and relates to your past, present or future physical or mental health, the care you receive, or payment for that care.
How we use and share your health information
For treatment
We use your information to evaluate and treat you, and we share it with others involved in your care. For example, we send prescriptions to your pharmacy, order tests from laboratories, refer you to specialists, and consult with our collaborating physician where state law requires one.
For payment
We use your information to bill your health insurance and collect payment for your visits, which includes sharing it with our billing partner and your health plan. If you pay for a visit yourself, we can give you a receipt or documentation for HSA, FSA or out-of-network reimbursement.
For health care operations
We use your information to run our practice and improve care, such as scheduling, quality review, record keeping, and working with vendors that support us. Vendors that handle your health information on our behalf, including our scheduling, electronic health record, video visit and email providers, must sign a business associate agreement that requires them to protect it.
Other uses and disclosures allowed or required by law
We may share your information without your written permission in limited situations, including:
- When required by federal, state or local law
- For public health activities, such as reporting certain diseases or adverse reactions to medications
- To report suspected abuse, neglect or domestic violence to government authorities as the law requires
- To prevent a serious and imminent threat to the health or safety of you or others
- For health oversight activities, such as audits and licensing reviews
- In response to a court order, subpoena or other lawful process
- To law enforcement in specific, limited circumstances permitted by law
- To coroners, medical examiners or funeral directors
- For workers' compensation claims, as permitted by law
- For specialized government functions, such as military or national security purposes
- To the U.S. Department of Health and Human Services when it investigates our compliance with privacy law
People involved in your care
Unless you object, we may share information relevant to your care with a family member, friend or other person you identify as involved in your care or in paying for it. You can tell us at any time not to do this.
Stricter state law
Where state law gives you more privacy protection than federal law, we follow the stricter law. This includes the California Confidentiality of Medical Information Act and similar laws in the other states where we see patients, which can add protections for information such as mental health, HIV status, substance use treatment and reproductive or sexual health care.
When we need your written permission
We will not use or share your health information for any purpose not described in this notice without your written authorization. In particular, we need your written permission to:
- Use or share psychotherapy notes, in most cases
- Use your information for marketing
- Sell your health information
- Use your name, photo or story in testimonials or promotional materials
You may revoke an authorization in writing at any time. Revoking it stops future uses and disclosures, but it does not undo anything we already did in reliance on it.
Your rights
See and get a copy of your records
You can ask to see or receive an electronic or paper copy of your medical and billing records. We will respond within 30 days, and we may charge a reasonable, cost-based fee.
Ask us to correct your records
If you believe information in your record is incorrect or incomplete, you can ask us in writing to amend it. We may say no, but we will tell you why in writing within 60 days.
Request confidential communications
You can ask us to contact you in a specific way, such as only by email or at a different address. We will agree to all reasonable requests.
Ask us to limit what we use or share
You can ask us not to use or share certain information for treatment, payment or operations. We are not required to agree in most cases. If you pay for a visit in full out of pocket, you can ask us not to share information about that visit with your health insurer, and we will agree unless the law requires us to share it.
Get a list of those we've shared information with
You can ask for an accounting of certain disclosures we made in the six years before your request. It will not include disclosures for treatment, payment or operations, or ones you asked us to make. One accounting a year is free.
Choose someone to act for you
If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
Get a copy of this notice
You can ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
Our responsibilities
- We maintain administrative, technical and physical safeguards to protect your health information.
- We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
- We can change the terms of this notice, and the changes will apply to all information we have about you. The current notice will always be posted on this page, and we will give you a copy on request.
Complaints
If you believe your privacy rights have been violated, you can file a complaint with us using the contact information below. You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints or by calling 1-877-696-6775. We will not retaliate against you for filing a complaint.
Website privacy policy
This section covers tonieshealth.com. Your medical care is covered by the Notice of Privacy Practices above.
Information we collect
This website does not have forms, accounts or patient portals, and it does not ask you for health information. If you email us, we receive the information you choose to send. Please do not send detailed medical information by email; we can discuss it securely during your visit.
No tracking or advertising pixels
We do not use advertising pixels, cross-site tracking, or analytics tools that share your activity with advertisers or social media companies. We do not sell or rent your personal information.
Third-party services
When you load this site, your browser retrieves fonts from Google Fonts, which receives your IP address as part of that request. When you choose to book a visit, you leave this site for Zocdoc, which has its own privacy policy. Our hosting provider may keep standard server logs, such as IP address and browser type, for security and reliability.
Your choices
Depending on where you live, including California, you may have rights to know, correct or delete personal information a business holds about you. To make a request, contact us below. Health information in your medical record is governed by the Notice of Privacy Practices and medical records laws, which may require us to keep it for a set period.
Children
This website is intended for adults and is not directed to children under 13.
Contact our privacy officer
Lucas Tonies, MSN, FNP-C, Privacy Officer
Tonies Health, A Nursing Professional Corporation
490 Post Street, Suite 500
San Francisco, CA 94102
appointment@tonieshealth.com