HIPAA Notice of Privacy Practices

Notice of Privacy Practices describing how your medical information may be used and disclosed under HIPAA.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: March 19, 2026

To Know One Self Optimized Wellness LLC ("To Know Oneself") is required by law to maintain the privacy of your protected health information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice currently in effect.

HIPAA Privacy Officer: Dr. Joseph Palumbo, D.O., Medical Director

Understanding Your Protected Health Information (PHI)

Protected Health Information (PHI) is information that may identify you and that relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for healthcare services. PHI includes demographic information such as your name, address, date of birth, Social Security number, and other data that could reasonably be used to identify you.

We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to notify you in the event of a breach of your unsecured PHI.

How We May Use and Disclose Your PHI

The following categories describe the ways we may use and disclose your PHI without your written authorization:

Treatment: We may use your PHI to provide, coordinate, or manage your healthcare and related services. This includes coordination and management of your healthcare with third parties, consultation between healthcare providers relating to your treatment, or referral of your treatment to another provider.
Payment: We may use and disclose your PHI for all activities related to billing and collecting payment for your treatment and services. This includes billing, claims management, insurance eligibility and coverage determinations, medical necessity reviews, utilization review, and collection activities.
Healthcare Operations: We may use and disclose your PHI for activities related to our healthcare operations, including quality assessment and improvement, treatment alternatives, review of healthcare professional qualifications, training programs, accreditation, certification, licensing, credentialing activities, legal services, compliance auditing, business planning, and customer service.

Uses and Disclosures That Do Not Require Your Authorization

We may use or disclose your PHI without your authorization in the following circumstances, as permitted or required by law:

Public Health Activities: For public health purposes, including disease prevention, injury or disability reporting, reporting births and deaths, reporting child abuse or neglect, reporting adverse reactions to medications or medical products, notifying individuals who may have been exposed to a disease or condition, and notifying appropriate government authorities regarding potential abuse, neglect, or domestic violence.
Healthcare Oversight: To health oversight agencies for activities authorized by law, including audits, civil, administrative, or criminal investigations, inspections, licensure, and disciplinary actions.
Abuse or Neglect Reporting: To government authorities if we believe you are a victim of abuse, neglect, or domestic violence, as required or permitted by law.
Food and Drug Administration (FDA): To the FDA for activities related to the quality, safety, or effectiveness of FDA-regulated products or activities.
Legal Proceedings: In response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement: For law enforcement purposes, including reporting certain types of wounds or physical injuries, locating or identifying suspects, fugitives, material witnesses, or missing persons, and responding to a law enforcement official's request for information about a victim or suspected victim of a crime.
Coroners, Funeral Directors, and Organ Donation: To coroners, medical examiners, funeral directors, and organ procurement organizations for identification, determination of cause of death, or carrying out duties authorized by law.
Research: For research purposes under certain conditions, subject to approval by an institutional review board or privacy board.
Threats to Health or Safety: To prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public or another person.
Military and National Security: For military, veterans, national security, intelligence, and protective services activities as required by law.
Workers' Compensation: As authorized by and to the extent necessary to comply with workers' compensation laws.
Inmates and Law Enforcement Custody: If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release PHI to the institution or official as necessary for your health, the health and safety of others, or law enforcement purposes.
Required by Law: When required to do so by any other federal, state, or local law.

Uses and Disclosures That Require Your Written Authorization

WITHOUT YOUR WRITTEN AUTHORIZATION, WE ARE EXPRESSLY PROHIBITED FROM USING OR DISCLOSING YOUR PROTECTED HEALTH INFORMATION FOR MARKETING PURPOSES.

We will not sell your PHI without your written authorization. We will not use or disclose your PHI for fundraising purposes without your authorization. We will not use or disclose psychotherapy notes (if applicable) without your authorization, except as permitted by law.

Any other uses and disclosures of your PHI not described in this Notice will require your written authorization. You may revoke any authorization you have provided at any time by submitting a written request to our Privacy Officer. Your revocation will not affect any uses or disclosures already made in reliance on your prior authorization.

Your Rights Regarding Your PHI

You have the following rights with respect to your protected health information:

Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI contained in a designated record set. Your request must be submitted in writing. We may charge a reasonable, cost-based fee for copies. We may deny your request in certain limited circumstances, and if so, you may request a review of the denial.
Right to Request Amendments: You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. Your request must be in writing and must state the reason for the amendment. We may deny the request if the information was not created by us, is not part of the designated record set, is not available for inspection, or is accurate and complete. If denied, you have the right to file a statement of disagreement.
Right to Request Restrictions: You have the right to request restrictions on certain uses and disclosures of your PHI. You must make your request in writing. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan for payment or healthcare operations purposes if you have paid for the service in full out of pocket.
Right to Receive Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that we contact you only at work or by mail. Your request must be in writing and must specify how or where you wish to be contacted.
Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI. The list will not include disclosures for treatment, payment, or healthcare operations, or disclosures you authorized in writing. Your request must be in writing and must state the time period (which may not be longer than six years).
Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice at any time, even if you have agreed to receive this Notice electronically.
Right to Be Notified of a Breach: You have the right to be notified if we discover a breach of your unsecured PHI.

Breach Notification

We will notify you if a reportable breach of your unsecured protected health information is discovered. Notification will be made without unreasonable delay, and no later than 60 calendar days after the discovery of the breach. The notification will include a description of the breach, the types of PHI involved, steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and contact information for you to ask questions or obtain additional information.

AI-Powered Chatbot Disclaimer

Our website may utilize an AI-powered chatbot to assist you with general inquiries, appointment scheduling, and basic information about our services. Please be aware of the following:

The chatbot is an artificial intelligence tool and does not provide medical advice, diagnoses, or treatment recommendations.
Information provided by the chatbot is for general informational purposes only and should not be considered a substitute for professional medical advice from a licensed healthcare provider.
Do not share sensitive personal health information, Social Security numbers, insurance information, or other protected health information through the chatbot interface.
If you have a medical emergency, call 911 or go to your nearest emergency room immediately. Do not rely on the chatbot for emergency medical guidance.
The chatbot may collect basic interaction data (e.g., questions asked, pages visited) to improve service quality. This data is handled in accordance with our Privacy Policy.
By using the chatbot, you acknowledge that it is an AI tool with limitations and that you will consult directly with our healthcare providers for any medical decisions.

Changes to This Notice

We reserve the right to change the terms of this Notice and to make new provisions regarding your PHI that we maintain, as allowed or required by law. If we make material changes to this Notice, we will post the revised Notice on our website at www.toknowoneself.co and make it available at our office. The revised Notice will be effective for all PHI we maintain at that time, including information created or received prior to the effective date of the revision.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with us, contact our HIPAA Privacy Officer:

HIPAA Privacy Officer

To Know Oneself

6490 S McCarran Blvd Ste 30 Bldg D, Reno, NV 89509

Phone: (775) 502-1000

Email: support@toknowoneself.co

To file a complaint with the U.S. Department of Health and Human Services:

Office for Civil Rights

U.S. Department of Health and Human Services

200 Independence Avenue, S.W., Washington, D.C. 20201

Phone: 1-877-696-6775

Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

Affiliated Pharmacy Information

Our affiliated pharmacy partner:

Partell Pharmacy

5835 South Eastern Ave, Suite 101

Las Vegas, NV 89119

Phone: (702) 791-3800

Fax: (702) 791-3630

Contact Information

If you have any questions about this Notice or our privacy practices, please contact us:

To Know One Self Optimized Wellness LLC

HIPAA Privacy Officer: Dr. Joseph Palumbo, D.O., Medical Director

6490 S McCarran Blvd Ste 30 Bldg D, Reno, NV 89509

Phone: (775) 502-1000

Email: support@toknowoneself.co

Website: www.toknowoneself.co

Telehealth Informed Consent

By using the services provided by To Know Oneself Optimized Wellness, you acknowledge and agree to the following regarding the delivery of healthcare services via telehealth:

Nature of Telehealth Services. Telehealth involves the delivery of healthcare services using electronic communications, information technology, or other means between a healthcare provider and a patient who are not in the same physical location. This may include assessment, diagnosis, consultation, treatment, education, care management, and self-management of a patient.
Limitations of Telehealth. Telehealth has potential limitations compared to in-person medical encounters, including but not limited to: the inability to perform a hands-on physical examination, possible technology failures, and potential delays in evaluation and treatment due to deficiencies or failures of equipment or connectivity. In rare cases, information transmitted may not be sufficient to allow for appropriate medical decision-making.
Risks and Benefits. As with any medical procedure, there are potential risks and benefits associated with telehealth. Benefits may include improved access to care, convenience, and the ability to receive care from your own location. Risks may include incomplete medical information, technology malfunctions, or unauthorized access to your health data despite reasonable safeguards.
Your Rights. You have the right to withhold or withdraw consent to telehealth services at any time without affecting your right to future care or treatment. You have the right to request an in-person consultation or referral to a local provider at any time. Your provider retains the right to determine that telehealth is not appropriate for your condition and may recommend in-person evaluation.
Privacy and Security. All telehealth interactions are conducted using technology that is designed to protect the privacy and security of your health information in compliance with HIPAA. However, as with any internet-based communication, there are risks of a security breach. For more information, please review our HIPAA Notice of Privacy Practices.
Emergency Situations. Telehealth is not appropriate for medical emergencies. If you are experiencing a medical emergency, call 911 or go to your nearest emergency room immediately. Do not rely on telehealth services or this platform for emergency care.
Prescriptions. Medications, including controlled substances, may be prescribed via telehealth when clinically appropriate and in compliance with applicable federal and state law. Your prescribing provider will exercise independent medical judgment regarding all prescription decisions. Compounded medications are prepared by licensed compounding pharmacies and are not FDA-approved drugs.

By proceeding with services from To Know Oneself Optimized Wellness, you confirm that you have read this Telehealth Informed Consent, understand the nature and limitations of telehealth, and consent to receiving healthcare services via telehealth as described above.