HIPAA privacy

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed, and how you can get access to that information. Please review it carefully.

Our commitment

Waymaker Health is required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. PHI is information — including demographic details — that can identify you and relates to your health, your care, or payment for your care.

How we may use and share your information

We may use or disclose your PHI without your written authorization for the purposes below. Whenever we do, we share the minimum information reasonably necessary.

Treatment

We share your information with the practitioners, imaging centers, therapists, and specialists involved in your care so that everyone works from the same findings.

Payment

We use your information to bill and collect from you, your auto or health insurer, an adjuster, or an attorney operating under a letter of protection.

Health care operations

We use your information for quality review, practitioner training and credentialing, scheduling, and internal administration of our practice.

Appointment and follow-up contact

We may contact you by phone, text, email, or secure message about appointments, results, and care instructions using the contact details you give us.

As required by law

We disclose information when required by federal, state, or local law, including to public health authorities, in response to a valid subpoena or court order, and to prevent a serious threat to health or safety.

Business associates

Vendors that support our practice — such as our electronic records, secure email, telehealth, and billing providers — may handle your information under written agreements requiring them to protect it.

Independent examinations

When an examination is arranged by an attorney, insurer, or employer, the resulting report is prepared for and released to the party that requested it. We will tell you at the outset who will receive the report, and we still protect your information from any use beyond that purpose. Records from your own treatment with us are never released to a third party without your written authorization or a lawful order.

Your rights

Inspect and copy your records

You may request a paper or electronic copy of your medical and billing records. We will respond within 30 days and may charge a reasonable, cost-based fee.

Request a correction

If you believe information in your record is incorrect or incomplete, you may ask us to amend it. If we deny the request, we will explain why in writing.

Get a list of disclosures

You may request an accounting of certain disclosures we made in the six years before your request, excluding those for treatment, payment, and operations.

Request restrictions

You may ask us to limit what we use or share. We are not required to agree, except where you pay for a service in full out of pocket and ask us not to bill your health plan.

Request confidential communication

You may ask us to contact you at a specific phone number or address. We will accommodate reasonable requests.

Be notified of a breach

We will notify you promptly if a breach occurs that compromises the privacy or security of your protected health information.

Uses that always require your written permission

  • Marketing communications that are not about your own treatment
  • Sale of your protected health information (we do not sell it)
  • Most sharing of psychotherapy notes
  • Release of records to a third party you designate, including an employer or opposing counsel

You may revoke an authorization in writing at any time. Revocation does not affect disclosures we already made while it was in effect.

How we protect your information

  • Records are stored in access-controlled systems and shared over encrypted connections.
  • Staff access is limited to what each role needs to do its job.
  • Telehealth visits are conducted over a secure, private video connection.
  • Vendors handling PHI on our behalf sign business associate agreements.
  • Records are retained for the period required by Texas and Florida law, then securely destroyed.

Questions or complaints

To exercise a right, request records, or file a privacy complaint, contact our Privacy Officer. You may also file a complaint directly with the U.S. Department of Health and Human Services, Office for Civil Rights. We will never retaliate against you for filing a complaint.

Privacy Officer, Waymaker Health
1400 N Coit Rd #302, McKinney, TX 75071
(214) 494-0217 waymakerhealth@gmail.com
Fax (214) 975-1700
HHS Office for Civil Rights
200 Independence Avenue SW, Washington, D.C. 20201
File a complaint with OCR

Changes to this notice

We may change this notice and apply the revised terms to information we already hold as well as information we receive in the future. The current version is always posted on this page, and a copy is available at our clinic on request.

Effective date: July 30, 2026. See also our website privacy & cookie policy.