NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE READ IT CAREFULLY.

​

I. Our Legal Responsibility to Protect Your PHI

OneStep Clinic is required by law to maintain the privacy and security of your protected health information (“PHI”). PHI includes information that can identify you and relates to your health, healthcare services, or payment for healthcare services.

This Notice explains how we may use and disclose your PHI, and describes your rights regarding your health information. We are required to follow the terms of this Notice. We may update this Notice from time to time, and any updates will apply to PHI we already maintain as well as information we receive in the future.

This Notice is intended to comply with the Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable privacy laws.

​

II. Uses and Disclosures of Your PHI

OneStep Clinic may use or disclose your PHI for treatment, payment, healthcare operations, and other purposes permitted or required by law.

​

A. Uses and Disclosures Not Requiring Your Written Authorization

Treatment: We may use or share your PHI to provide healthcare services and coordinate your care with other healthcare providers.

Payment: We may use and disclose your PHI for billing, claims, payment collection, and related payment activities.

Healthcare Operations: We may use your PHI for clinic operations, quality assessment, compliance activities, legal review, and other administrative purposes.

Emergency Situations: If you need urgent treatment and are unable to communicate, we may use or disclose your PHI as necessary to provide care.

Appointment Reminders: We may contact you to provide appointment reminders, scheduling updates, or rescheduling information. These communications may be made by phone, email, or text message if you have provided your contact information and opted in to SMS communication.

Communication with Individuals Involved in Your Care: With your consent or as permitted by law, we may share relevant information with family members, friends, or others involved in your care or payment for your care.

​

B. Additional Disclosures Permitted Without Your Authorization

We may disclose your PHI without your written authorization when permitted or required by law, including for legal requirements, court orders, prevention of serious harm, mandatory reporting of abuse or neglect, public health activities, health oversight activities, government functions, military or national security needs, and workers’ compensation matters.

​

C. Disclosures Requiring Your Opportunity to Object

We may share information with family members, friends, or others you identify as involved in your care or responsible for payment, unless you object.

​

D. Disclosures Requiring Your Written Authorization

For uses or disclosures not described in this Notice or otherwise permitted by law, we will ask for your written authorization. You may revoke your authorization in writing at any time, except to the extent we have already relied on it.

​

III. SMS/Text Message Communications

If you voluntarily provide your mobile phone number to OneStep Clinic and opt in to receive text messages, we may send SMS messages for appointment coordination, callback follow-up, scheduling updates, and administrative clinic communication. SMS messages are not used for marketing or promotional purposes.

Message frequency may vary. Message and data rates may apply. Reply STOP to opt out of SMS messages at any time. Reply HELP for help, or contact support@onestepclinic.com.

SMS messages may not be encrypted. Please do not send sensitive medical information by text message unless specifically instructed by OneStep Clinic. If you prefer not to receive text messages, you may request communication by phone, mail, or another available method.

​

OneStep Clinic does not sell, rent, or share SMS opt-in consent, mobile phone numbers, or text messaging data with third parties or affiliates for marketing or promotional purposes. We may use service providers only as necessary to deliver and manage SMS communications.

​

IV. Your Rights Regarding Your Protected Health Information

You have the following rights regarding your PHI:

Access and Copies: You may request to view or obtain copies of your PHI. We will respond within the time required by law and may charge a reasonable fee for copies.

Request Restrictions: You may ask us to limit how we use or disclose your PHI. We are not always required to agree, but if we do agree, we will follow the restriction unless disclosure is needed for emergency treatment or otherwise permitted by law.

Confidential Communication: You may request that we communicate with you in a specific way or at a specific location.

Accounting of Disclosures: You may request a list of certain disclosures of your PHI, excluding disclosures for treatment, payment, healthcare operations, and certain other disclosures permitted by law.

Amendments: If you believe your PHI is incorrect or incomplete, you may request an amendment. We may deny your request in certain circumstances, but we will explain the reason in writing.

Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you previously agreed to receive it electronically.

Protection of Substance Use Information: We understand the sensitive nature of substance use information. Federal laws and regulations, including 42 CFR Part 2 where applicable, may provide additional protections for substance use disorder information. We will comply with applicable requirements and limit disclosures except as permitted by law or with your written consent.

Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with OneStep Clinic or with the U.S. Department of Health and Human Services. Filing a complaint will not affect your care, and we will not retaliate against you.

​

V. Our Responsibilities

OneStep Clinic is committed to protecting the privacy and confidentiality of your healthcare information, providing you with this Notice, following the terms of the Notice currently in effect, and notifying you if required by law in the event of a breach of unsecured medical information.

​

VI. Contact Information

If you have questions, concerns, or would like more information about our privacy practices, please contact:

​

OneStep Clinic
20 Commerce Drive
Cranford, NJ 07016
Phone: 848-283-9393
Fax: 716-237-3923
Email: support@onestepclinic.com

VII. Changes to This Notice

We reserve the right to modify this Notice of Privacy Practices at any time. Any material changes will be posted in our office and on our website, if applicable.