Our Commitment to Your Privacy
This Notice is provided by the affiliated, independently licensed healthcare providers and professional medical entities that deliver clinical care through the Revana Health platform (the “Practice,” “we,” “us,” or “our”), which are the “covered entities” responsible for your protected health information (“PHI”) under HIPAA. Revana Health, LLC is a management services organization (MSO) that provides administrative and technology support to the Practice and acts as a “business associate” with respect to your PHI; Revana Health, LLC does not practice medicine or make clinical decisions. We are required by law to maintain the privacy of PHI, to provide this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. This Notice applies to all records relating to your care created or retained by the Practice and its affiliated providers, including information collected through our telehealth platform and patient portal.
How We May Use and Disclose Your Health Information
Treatment
We may use your PHI to provide, coordinate, or manage your healthcare and related services — for example, disclosing your PHI to a licensed physician for a telehealth consultation, or to a pharmacy to fulfill a prescription.
Payment
Because our Services operate on a cash-pay basis, we generally do not use or disclose PHI for insurance billing. However, we may use PHI to process your payment, verify financial information, and send billing communications. If you seek reimbursement from your insurer independently, we may provide documentation of services rendered at your request.
Healthcare Operations
We may use and disclose PHI for healthcare operations, including quality assessment and improvement, reviewing provider performance, licensing and accreditation, training, and general administrative activities.
Appointment Reminders and Treatment Alternatives
We may use PHI to contact you about appointments or follow-up consultations, and to tell you about treatment alternatives or health-related benefits that may interest you.
Required by Law; Public Health; Oversight; Legal Proceedings; Law Enforcement
We will disclose PHI when required by federal, state, or local law, including to state licensing boards and mandatory reporting obligations. We may disclose PHI for public health activities (communicable disease reporting; reporting abuse, neglect, or domestic violence; adverse medication reactions); to health oversight agencies for audits, investigations, inspections, and licensure; in judicial or administrative proceedings in response to a court order, subpoena, or lawful process; and for law enforcement purposes as required by law.
Serious Threat to Health or Safety
We may use and disclose PHI when necessary to prevent a serious and imminent threat to the health or safety of a person or the public, to someone reasonably able to prevent or lessen the threat.
Business Associates
We may disclose PHI to third-party business associates that perform services on our behalf (billing, data storage, platform infrastructure, analytics). We require all business associates to enter into a Business Associate Agreement (BAA) that requires them to protect the privacy and security of your PHI.
Uses and Disclosures Requiring Your Authorization
Other uses and disclosures not covered by this Notice or required by law will be made only with your written authorization, which you may revoke in writing at any time. The following always require written authorization: uses of psychotherapy notes (where applicable); uses for marketing; sale of PHI; most uses for research; and uses not otherwise permitted by this Notice or applicable law.
Your Rights Regarding Your Health Information
To exercise any of these rights, submit a written request to support@myrevana.com.
Right to Access: inspect and obtain a copy of PHI used to make decisions about your care; provided within 30 days (or as required by law), subject to a reasonable cost-based fee. Right to Request Amendment: ask us to amend information you believe is incorrect or incomplete; we may deny under certain conditions. Right to an Accounting of Disclosures: request a list of disclosures made during the six years prior to your request (excluding treatment, payment, and operations). Right to Request Restrictions: request restrictions on certain uses and disclosures; we must agree only where the request is to restrict disclosure to a health plan for a service you paid for in full out of pocket. Right to Request Confidential Communications: request that we communicate with you in a specific way or at a specific location. Right to a Paper Copy of This Notice: at any time. Right to Be Notified of a Breach: of unsecured PHI affecting you, per the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414) and applicable state law.
Our Duties
We are required by law to maintain the privacy of your PHI, provide this Notice, and notify you following a breach of unsecured PHI. We reserve the right to change this Notice and make the revised Notice effective for PHI we already have as well as information we receive in the future. We will post the current Notice on our website and make it available upon request.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. To file with us: Sean Flynn, Privacy Officer, Revana Health, LLC — support@myrevana.com. To file with OCR: U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201 · 1-877-696-6775 · www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.
How to Contact Us
For questions about this Notice or to exercise any of your rights: support@myrevana.com · 3230 Southgate Circle, Suite 77, Sarasota, Florida 34239.