Notice of Privacy Practices

Stockheart PLLC | Effective Date: January 2025

At Stockheart Whole Health, your privacy is very important to us. This notice explains how we may use and share your protected health information (PHI), your rights regarding your information, and how to contact us.

Plain Language Summary:
We protect your health information, only share it when necessary for your care or required by law, and you have rights to see, correct, or control your information.

1. Our Legal Duty

Stockheart Whole Health, PLLC is a HIPAA-covered entity. We are required by law to:

• Protect the privacy of your PHI.

• Give you this notice explaining our privacy practices.

• Follow the terms of this notice currently in effect.

We must notify you if your PHI is breached.

2. How We May Use or Disclose Your Health Information

We use or disclose PHI for treatment, payment, and healthcare operations:

a. Treatment – To provide, coordinate, or manage your care, including communication with our providers (chiropractic, acupuncture, massage, functional medicine, health coaching).

b. Payment – To bill and collect payment for services, including insurance claims if applicable.

c. Healthcare Operations – For quality assessment, licensing, accreditation, and business management.

d. Appointment Reminders / Health Information – We may contact you to remind you of appointments or provide information about treatment options.

e. Required by Law – We may disclose PHI when required by federal, state, or local law (e.g., reporting certain diseases, abuse, or court orders).

f. Public Health & Safety – To prevent serious threats to health or safety, or for public health reporting.

g. Research – Only with appropriate approvals and safeguards.

h. With Your Written Authorization – Any other use not listed requires your written permission, which you may revoke at any time.

3. Marketing & Communications

• You may receive newsletters or educational emails if you opt in.

• PHI is never used for marketing without separate written authorization.

• You can unsubscribe from marketing communications at any time.

4. Data Retention

We retain PHI according to Minnesota law:

• Adults: 7 years from the last treatment.

• Minors: Until they turn 18, plus 7 years.

Contact form submissions and newsletter data are retained only as long as necessary to provide services or meet legal obligations.

5. Your Rights Regarding Your Health Information

You have the right to:

1. Inspect and Copy – Access your PHI in JaneApp records.

2. Request Amendment – Ask us to correct or update your PHI.

3. Request Confidential Communications – Choose alternative methods to receive communications.

4. Request Restrictions – Ask us not to use or share certain PHI (we will honor reasonable requests).

5. Accounting of Disclosures – Request a list of certain disclosures of your PHI.

6. File a Complaint – See section 7 below.

6. How We Protect Your Information

• Administrative, technical, and physical safeguards are in place.

• PHI is only shared with staff who need it to provide your care.

• Online forms do not collect or store PHI; all PHI is handled securely via JaneApp.

7. Filing a Complaint

If you believe your privacy rights have been violated:

1. Internal Complaint – Contact our Privacy Officer:
   Stockheart PLLC
   3115 Hennepin Ave S, Minneapolis, MN 55408
   hello@stockheart.com | (612) 448-4434
   

2. External Complaint – File with the U.S. Department of Health & Human Services, Office for Civil Rights: https://www.hhs.gov/ocr
   

   We will not retaliate against you for filing a complaint.

8. Third-Party Links

Our website may link to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies separately.

9. Updates to This Notice

We may update this notice at any time. The effective date at the top indicates the most recent version.

10. Acknowledgment of Receipt

By receiving care at Stockheart Whole Health, PLLC, you acknowledge that you have received this Notice of Privacy Practices.

• Acknowledgment may be completed electronically via JaneApp or in paper form at the office.