HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date: June 21, 2026
This notice applies to BFW Wellness and all healthcare services provided by Donnielle James, L.Ac. We are required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy of your Protected Health Information (PHI) and to provide you with this detailed description of our legal duties and privacy practices.
1. How We May Use and Disclose Your Health Information
We use and share your medical records for core operational needs, including:
For Treatment: We disclose your PHI to provide, coordinate, or manage your care. This includes analyzing your health history for acupuncture treatments, sharing relevant alignment details if your treatment shifts into a clinical Pilates movement session, or communicating with another provider (like your physician) if you give us explicit permission to coordinate care.
For Payment: We may use and disclose your PHI so that the services you receive can be billed and collected. This includes generating itemized superbills if you choose to submit them to your health insurance or HSA/FSA accounts for reimbursement.
For Healthcare Operations: We may use your information to run our practice smoothly, evaluate the quality of care, manage digital systems, or perform basic administrative audits.
Appointment Reminders: We may use your contact information to reach you via text, phone, or email to provide appointment confirmations, reminders, or scheduling updates.
2. Uses and Disclosures Require Your Explicit Authorization
We will never use or share your information for any reason outside of direct treatment, payment, or clinic operations without your signed, written authorization.
Marketing & Sales: We will never sell your personal health information or use your data for third-party marketing.
Testimonials & Reviews: Any public mention of your success or treatment (even with names removed) will only happen with your direct, explicit written consent. You have the right to revoke any authorization at any time in writing.
3. Your Rights Regarding Your Health Information
You have full ownership and specific legal rights over the medical records we maintain:
Right to Inspect and Copy: You have the right to look at or receive a digital or paper copy of your medical chart and billing history. Under California law, we will provide access to inspect records within 5 business days and copies within 15 days of a written request.
Right to Request Restrictions: You can ask us not to use or share certain health information for treatment or payment. If you pay for a service entirely out-of-pocket, you have the right to demand that we do not share this information with your health insurance company, and we will honor that request.
Right to Alternative Communication: You have the right to ask that we only contact you in a specific way (e.g., only texting your mobile number) to maintain your privacy.
4. Record Retention & Security
California Retention Law: In compliance with California medical record keeping standards, adult patient records are safely archived and maintained for a minimum of seven (7) years from the date of your last visit, after which they are destroyed via certified, unrecoverable data wiping or physical shredding.
Breach Notification: In the highly unlikely event that a security breach occurs and your unsecured health data is compromised, we will notify you immediately.
How to File a Complaint
If you believe your privacy rights have been violated, you can file a complaint directly with us by contacting Donnielle James, L.Ac at 424-216-8760. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will never retaliate against you for filing a complaint.