Legal

HIPAA Notice of Privacy Practices

Effective date: November 6, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

New Horizons Denver Primary Care ("we," "us," "our," or "the Practice") is required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this Notice of Privacy Practices ("Notice"), and to abide by the terms of the Notice currently in effect. This Notice applies to all PHI created or received by the Practice, whether in electronic, paper, or oral form.

We are required to follow the privacy practices described in this Notice. We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. We reserve the right to make changes in our privacy practices and the new terms of our Notice effective for all PHI that we maintain, including PHI we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this Notice and make the new Notice available upon request.

1. How We May Use and Disclose Your Health Information

The following categories describe the ways we may use and disclose your PHI. For each category, we will explain what we mean and give some examples. Not every use or disclosure in a category will be listed; however, all of the ways we are permitted to use and disclose information will fall within one of the categories.

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party. For example, we may disclose your PHI to a physician to whom you have been referred to ensure that the physician has the necessary information to diagnose or treat you. We may also disclose PHI to other health care providers who are involved in your care, such as specialists, hospitals, laboratories, pharmacies, and other treating providers.

Payment

We may use and disclose your PHI to obtain payment for services we provide to you. For example, we may contact your health insurer to certify that you are eligible for benefits and to obtain approval for a proposed treatment. We may also disclose your PHI to your insurer to obtain reimbursement for treating you. We may also share your PHI with a collection agency if a bill for services rendered to you remains unpaid.

Health Care Operations

We may use and disclose your PHI in connection with our health care operations. Health care operations include quality assessment and improvement activities, reviewing the competence or qualifications of health care professionals, evaluating practitioner and provider performance, conducting training programs, accreditation, certification, licensing or credentialing activities, and business management and general administrative activities.

Appointment Reminders and Health-Related Communications

We may use and disclose your PHI to contact you as a reminder that you have an appointment for treatment or medical care. We may contact you by telephone, text message (SMS/MMS), email, or mail. We may also use your PHI to send you information about treatment alternatives or other health-related benefits and services that may be of interest to you.

Business Associates

We may share your PHI with third-party "business associates" that perform services on our behalf, such as billing companies, IT vendors, and transcription services. We require our business associates to appropriately safeguard your PHI through written Business Associate Agreements (BAAs) as required by HIPAA.

2. Uses and Disclosures Required or Permitted by Law Without Your Authorization

We may use or disclose your PHI without your written authorization in the following circumstances:

Public Health Activities: We may disclose your PHI to public health authorities authorized by law to collect or receive such information for the purpose of preventing or controlling disease, injury, or disability.
Health Oversight Activities: We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure.
Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement: We may disclose your PHI to law enforcement officials for law enforcement purposes as required by law or in response to a valid subpoena.
Serious Threats to Health or Safety: We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Workers' Compensation: We may disclose your PHI to the extent necessary to comply with laws relating to workers' compensation or other similar programs.
Coroners, Medical Examiners, and Funeral Directors: We may disclose your PHI to a coroner or medical examiner for the purpose of identifying a deceased person or determining the cause of death.
Military and Veterans: If you are a member of the armed forces, we may release your PHI as required by military command authorities.
National Security and Intelligence: We may disclose your PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

3. Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not described above will be made only with your written authorization. You may revoke your authorization at any time by submitting a written revocation to us. The following uses and disclosures will never be made without your written authorization:

Marketing: We will not use or disclose your PHI for marketing purposes without your written authorization, except for face-to-face communications or promotional gifts of nominal value.
Sale of PHI: We will not sell your PHI without your written authorization.
Psychotherapy Notes: We will not use or disclose psychotherapy notes without your written authorization, except in limited circumstances permitted by law.
Genetic Information: We will not use or disclose your genetic information for underwriting purposes.

4. Your Rights Regarding Your Health Information

You have the following rights regarding your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer at the contact information listed at the end of this Notice.

Right to Inspect and Copy

You have the right to inspect and copy your PHI that is contained in a designated record set for as long as we maintain the PHI. We may charge a reasonable, cost-based fee for providing copies. We may deny your request in certain limited circumstances; if denied, you may request that the denial be reviewed.

Right to an Electronic Copy

If your PHI is maintained in an electronic health record, you have the right to obtain an electronic copy and to direct us to transmit a copy directly to an entity or person you designate.

Right to Request an Amendment

You have the right to request an amendment of your PHI for as long as we maintain this information. We may deny your request if the information was not created by us, is not part of the PHI we keep, or is accurate and complete.

Right to an Accounting of Disclosures

You have the right to request an accounting of disclosures — a list of certain disclosures we have made of your PHI for purposes other than treatment, payment, or health care operations.

Right to Request Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. We are not required to agree to your request, but if we do, we are bound by our agreement. We must agree to restrict disclosure to a health plan when you have paid out-of-pocket in full for the relevant service.

Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically. You may obtain a copy at our office or by contacting us.

5. HIPAA and SMS / Text Messaging

When we communicate with you via text message (SMS/MMS), we take steps to protect your PHI in accordance with HIPAA:

Minimum Necessary Standard: We limit the PHI included in text messages to the minimum necessary to accomplish the intended purpose (e.g., appointment date, time, and location — not detailed clinical information).
Consent: We obtain your consent before sending appointment reminders or health-related notifications via text. Marketing texts require your prior express written consent under both HIPAA and the TCPA. See our SMS & Text Messaging Policy for full details.
Business Associate Agreements: Any third-party messaging platform we use to send text messages is required to sign a HIPAA Business Associate Agreement (BAA) with us.
Opt-Out: You may opt out of text communications at any time by replying STOP to any message, calling us at (720) 400-8935, or emailing admin@newhorizonspc.com. Opting out of marketing texts will not affect appointment reminders unless you also request that.
Acknowledgment of Risk: Standard SMS/MMS messages are not encrypted end-to-end. By consenting to receive text messages, you acknowledge this risk. If you prefer a more secure communication method, please contact our office.

6. Our Duties

We are required by law to maintain the privacy of your PHI.
We are required to provide you with a notice of our legal duties and privacy practices with respect to your PHI.
We are required to notify you following a breach of unsecured PHI.
We must follow the privacy practices described in this Notice while it is in effect.
We reserve the right to change our privacy practices and the terms of this Notice at any time as permitted by applicable law. We will post the revised Notice on our website and make it available at our office.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS). To file a complaint with HHS, visit www.hhs.gov/hipaa/filing-a-complaint.

We will not retaliate against you for filing a complaint. To file a complaint with us, please contact our Privacy Officer using the information below.

8. Contact Our Privacy Officer

If you have questions about this Notice or wish to exercise any of your rights, please contact:

New Horizons Denver Primary Care

Privacy Officer

925 S Niagara St #480

Denver, CO 80224

Phone: (720) 400-8935

Email: admin@newhorizonspc.com

Legal Disclaimer: This Notice of Privacy Practices is provided for informational purposes and is intended to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable regulations at 45 C.F.R. Parts 160 and 164. This Notice does not constitute legal advice. New Horizons Denver Primary Care recommends that patients with specific legal questions consult a qualified attorney.