Our Commitment to Your Privacy

The Marche Method is committed to protecting the privacy of your health information. This Notice of Privacy Practices describes how we may use and disclose your protected health information (PHI) and how you can get access to this information. Please review it carefully.

We are required by law to maintain the privacy of your protected health information, provide you with this notice of our legal duties and privacy practices, and notify you following a breach of unsecured protected health information.

What Is Protected Health Information (PHI)?

Protected Health Information (PHI) is any information about your health status, provision of healthcare, or payment for healthcare that can be linked to you as an individual. This includes information in your medical records, conversations between you and your provider, billing information, and any other health data that identifies you.

How We May Use and Disclose Your Information

Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with other providers involved in your care when clinically appropriate.

Payment: We may use and disclose your PHI so that services you receive may be billed and payment collected from you or a third party.

Healthcare Operations: We may use and disclose your PHI for our internal operations, including quality assessment, staff training, and administrative functions necessary to run our practice.

As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law, including reporting requirements related to public health, abuse, neglect, or law enforcement activities.

Business Associates: We may share your PHI with third-party vendors and partners (called Business Associates) who perform services on our behalf, such as our patient portal provider (Athenahealth) and billing services. These partners are required by law to protect your PHI.

Uses and Disclosures Requiring Your Authorization

We will not use or disclose your PHI for purposes beyond treatment, payment, and operations without your written authorization, except as required by law. This includes:

— Marketing communications — Sale of your health information — Most uses of psychotherapy notes — Any other use not described in this notice

You may revoke any authorization you have given us at any time in writing. The revocation will not apply to uses or disclosures already made in reliance on your prior authorization.

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in our records. Requests must be made in writing. We may charge a reasonable fee for copies.

Right to Amend: You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.

Right to an Accounting of Disclosures: You have the right to request a list of disclosures we have made of your PHI, other than for treatment, payment, or operations purposes.

Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to all restrictions, but we will comply with any restriction agreed upon.

Right to Confidential Communications: You have the right to request that we communicate with you in a specific way or at a specific location.

Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this notice upon request.

Right to be Notified of a Breach: You have the right to be notified if there is a breach of your unsecured PHI.

How We Protect Your Information

We maintain physical, electronic, and procedural safeguards that comply with federal and state regulations to protect your PHI. All clinical communications are conducted through our HIPAA-compliant Athenahealth patient portal. Our staff is trained on privacy practices and is required to protect your information.

We do not collect or store PHI through our general website contact form. Please use your secure patient portal for all clinical communications.

Changes to This Notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have about you as well as any information we receive in the future. We will post the current notice on our website and make copies available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

To file a complaint with us, contact: The Marche Method 4758 Woodmere Blvd, Suite J, Montgomery, AL 334-223-4858 Themarchemethod@gmail.com

To file a complaint with the U.S. Department of Health and Human Services: Office for Civil Rights U.S. Department of Health and Human Services 200 Independence Avenue, S.W. Washington, D.C. 20201 Toll-free: 1-877-696-6775 Website: www.hhs.gov/ocr/privacy/hipaa/complaints

We will not retaliate against you for filing a complaint.

Effective Date

This Notice of Privacy Practices is effective as of January 1, 2025.