Effective Date: July 29, 2025
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
OUR COMMITMENT TO YOUR PRIVACY
Hedfirst, LLC ("Hedfirst," "we," "us," or "our") is committed to protecting your health information. This Notice of Privacy Practices describes our legal duties and privacy practices regarding your Protected Health Information (PHI).
We are required by law to:
- Maintain the privacy and security of your PHI
- Provide you with this Notice of our privacy practices
- Follow the terms of this Notice currently in effect
- Notify you if a breach occurs that may compromise your information
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
For Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare, including:
- Telehealth consultations and medical evaluations
- Coordination with healthcare providers, pharmacies, and laboratories
- Prescription management and medication fulfillment
- AI-powered health assessments and care recommendations
- Care coordination and follow-up services
- Appointment reminders and healthcare communications
For Payment
We may use and disclose your PHI for payment activities, including:
- Billing for healthcare services provided
- Processing membership fees and service charges
- Insurance verification and claims processing
- Payment collection and account management
- Coordination of benefits with other coverage
For Healthcare Operations
We may use and disclose your PHI for healthcare operations, including:
- Quality assessment and improvement activities
- Provider performance evaluation and credentialing
- Customer service and satisfaction monitoring
- Business planning and administrative functions
- Training healthcare professionals and staff
- Legal and compliance activities
Other Permitted Uses and Disclosures
We may also use or disclose your PHI when:
Required by Law: Legal obligations, court orders, administrative orders
Public Health: Disease prevention, public health investigations, FDA reporting
Health Oversight: Medical licensing boards, healthcare regulatory agencies
Judicial Proceedings: Court orders, subpoenas, administrative hearings
Law Enforcement: Criminal investigations, identification of suspects or victims
Emergency Situations: Serious threats to health or safety, disaster relief
Research: De-identified data for medical research and clinical studies
Workers' Compensation: Job-related injury or illness claims
Specialized Functions: Military, national security, correctional institutions
USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION
We will obtain your written authorization before using or disclosing PHI for:
- Marketing communications (except appointment reminders and general health information)
- Sale of PHI
- Psychotherapy notes (if applicable)
- Most other purposes not described in this Notice
You may revoke authorization at any time by providing written notice, except to the extent we have already taken action based on your authorization.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
Right to Access Your Medical Record
- Request copies of your medical record in electronic or paper format
- Response time: We will provide copies within 30 days of request
- Fees: We may charge reasonable, cost-based fees for copying and mailing
Right to Request Amendments
- Correct information you believe is incorrect or incomplete
- Review process: We will respond within 60 days and may approve or deny the request
- Appeal rights: If denied, you may submit a statement of disagreement
Right to Request Restrictions
- Limit uses and disclosures for treatment, payment, or healthcare operations
- Special situations: We must agree to restrictions on disclosures to health plans if you pay out-of-pocket in full
- No guarantee: We are generally not required to agree to other restriction requests
Right to Confidential Communications
- Alternative contact methods: Request communications at alternative locations or by alternative means
- Reasonable requests: We will accommodate reasonable requests for confidential communications
Right to an Accounting of Disclosures
- Disclosure history: Request a list of disclosures we made for purposes other than treatment, payment, and healthcare operations
- Time period: Up to six years prior to your request
- Frequency: One free accounting per year; reasonable fees for additional requests
Right to a Copy of This Notice
- Paper copy: Request a paper copy of this Notice at any time
- Website access: Current Notice is always available on our website
Right to Designate a Personal Representative
- Legal authority: Legal guardians, healthcare proxies, and powers of attorney may act on your behalf
- Verification required: We must verify authority before recognizing personal representatives
CHANGES TO THIS NOTICE
We reserve the right to change this Notice and make new provisions effective for all PHI we maintain. When we make material changes:
- Website posting: New Notice will be posted on our website
- Direct notification: We will notify you of material changes via email or during your next service interaction
- Availability: Current Notice is always available upon request
COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint:
With Hedfirst
Privacy Officer
Hedfirst, LLC
3527 S. Federal Way, Suite 103 #459
Boise, ID 83705
Email: support@hedfirst.com
Phone: +1 888-427-1796
With the Federal Government
U.S. Department of Health and Human Services
Office for Civil Rights
Mail: 200 Independence Avenue, S.W., Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/
No Retaliation: We will not retaliate against you for filing a complaint.
ELECTRONIC COMMUNICATIONS AND TECHNOLOGY
Security Measures
We use secure, encrypted technology platforms for all electronic communications and health information transmission.
Inherent Risks
While we implement robust security measures, electronic transmission carries some inherent risks. By using our services, you acknowledge and accept these risks.
AI and Digital Health Tools
Our AI-powered health assessment tools process your PHI to provide personalized health insights. These tools operate under the same privacy protections as other healthcare services.
ADDITIONAL PROTECTIONS
State Law
When state law provides stronger privacy protections than federal HIPAA requirements, we follow the more restrictive state law.
Business Associate Agreements
We maintain appropriate Business Associate Agreements with third parties who may access your PHI in connection with services they provide to us.
Minimum Necessary Standard
We limit uses and disclosures of PHI to the minimum necessary to accomplish the intended purpose, except for treatment purposes.
CONTACT INFORMATION
For questions about this Notice or to exercise your privacy rights:
Hedfirst, LLC
3527 S. Federal Way, Suite 103 #459
Boise, ID 83705
Privacy Officer: support@hedfirst.com
Customer Support: support@hedfirst.com
Phone: +1 888-427-1796
Website: hedfirst.com
This Notice is effective as of the date listed above and remains in effect until we replace it.
