Notice of Privacy Practices
Last updated: August 22, 2024
Introduction
This Notice of Privacy Practices (NPP) describes how Small Step Inc.(“we," "our," or "us") may use and disclose your Protected Health Information (PHI) and your rights concerning that information. PHI includes any information about your health, the healthcare services you receive, and payment for those services, which can be used to identify you. We are committed to protecting your privacy and will only use or disclose your PHI as permitted by law and as described in this notice.
How We May Use and Disclose Your PHI
1. For Treatment
We may use your PHI to provide, coordinate, or manage your care. This includes sharing your PHI with your peer support specialist, other healthcare providers, or specialists involved in your care.
2. For Payment
We may use and disclose your PHI to bill and collect payment for the services provided through our app. For example, we may need to share information about your treatment with your health plan to receive payment.
3. For Healthcare Operations
We may use and disclose your PHI for our internal operations, such as quality assessment, staff training, licensing, and other administrative purposes. This helps us to improve our services and ensure high-quality care.
4. With Your Authorization
We will obtain your written authorization before using or disclosing your PHI for purposes not described in this notice. You may revoke your authorization at any time, in writing, except to the extent that we have already acted based on it.
5. As Required by Law
We may use or disclose your PHI when required by law. This includes disclosures to public health authorities, law enforcement, or as part of legal proceedings.
6. For Public Health and Safety
We may disclose your PHI to prevent or control disease, report abuse or neglect, or avert a serious threat to health or safety.
7. For Health Oversight Activities
We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, and inspections.
8. For Research
We may use or disclose your PHI for research purposes, subject to certain conditions and approvals. Where required, your information will be de-identified or your authorization will be obtained.
9. For Fundraising
We may contact you to raise funds for our organization. You have the right to opt out of receiving such communications.
Your Rights Regarding Your PHI
1. Right to Access
ou may request access to your PHI. To do so, please email us at contact@onesmallstep.io. We will respond to your request within 30 days
2. Right to Request Amendment
If you believe your PHI is incorrect or incomplete, you may request an amendment by emailing contact@onesmallstep.io
3. Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures of your PHI made by us in the last six years, , please email contact@onesmallstep.io
4. Right to Request Restrictions
YYou can request restrictions on certain uses or disclosures of your PHI by contacting us at contact@onesmallstep.io
5. Right to Request Confidential Communications
To request that we communicate with you in a specific way or at a certain location, please email contact@onesmallstep.io
6. Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this notice upon request, even if you have agreed to receive it electronically, please email contact@onesmallstep.io
Our Duties
Changes to This Notice
We reserve the right to change the terms of this notice at any time. Any changes will apply to all PHI we maintain. The new notice will be available upon request, in our office, and on our website.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.
Contact Information
If you have any questions about this notice or need further information, please contact: contact@onesmallstep.io