This Notice of Privacy Practices ("Notice") describes how medical information about you may be used and disclosed and how you can access this information.
This Notice applies to Thinnex, LLC ("Thinnex," "we," "us," or "our") and to licensed healthcare providers and affiliated entities who participate in your care through our platform.
We are required by law to maintain the privacy of your Protected Health Information ("PHI"), provide you with this Notice, and follow its terms.
PHI includes any health information that can identify you and relates to:
We collect PHI when you complete your health intake form, communicate with our care team, receive a prescription, or otherwise interact with our platform.
We may use or disclose your PHI for the following purposes:
We may share your information with licensed healthcare providers involved in your care to evaluate, diagnose, and treat you. This includes sharing information with telehealth providers, compounding pharmacies, and other clinicians coordinating your treatment.
We may use your information to bill and receive payment for services provided, including communicating with payment processors and verifying insurance coverage where applicable.
We may use PHI to operate and improve our services, including quality assessment, customer support, and administrative activities. This may include reviewing provider performance and conducting training.
We will disclose PHI when required by federal, state, or local law, including to public health authorities, law enforcement when legally required, or in response to valid legal process such as a court order or subpoena.
We may disclose PHI to public health authorities authorized to collect or receive such information for purposes such as preventing or controlling disease, injury, or disability.
We may disclose PHI to a health oversight agency for oversight activities authorized by law, such as audits, investigations, and inspections necessary for oversight of the healthcare system.
We may share your PHI with third-party "business associates" who perform services on our behalf, such as billing companies, IT providers, and telehealth platforms. These associates are required by contract to protect your PHI in accordance with HIPAA.
Certain uses and disclosures of your PHI require your written authorization, including:
You may revoke any authorization you have given us at any time in writing. Revocation will not affect any actions we took before receiving your revocation.
You have the following rights with respect to your Protected Health Information:
You may request to inspect or obtain a copy of your PHI maintained in our records, including electronic records.
You may request that we amend PHI you believe is incorrect or incomplete. We may deny your request in certain circumstances.
You may request a list of certain disclosures of your PHI made by us in the six years prior to your request.
You may request restrictions on how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree to all requests.
You may request that we communicate with you about your PHI in a certain way or at a certain location (e.g., only by email).
You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
To exercise any of the above rights, please submit a written request to our Privacy Officer using the contact information below.
We are required by law to:
We reserve the right to change this Notice at any time. We reserve the right to make the revised or changed Notice effective for PHI we already have about you as well as any information we receive in the future. We will post the current Notice on our website with the effective date. You may request a copy of the most current Notice at any time.
If you believe your privacy rights have been violated, you may file a complaint with Thinnex or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with HHS, visit:
We will not retaliate against you for filing a complaint.
If you have questions about this Notice or wish to exercise any of your rights, please contact us:
Company: Thinnex, LLC
Website: thinnex.com
Email: privacy@thinnex.com
All written requests should be sent via email with the subject line "HIPAA Privacy Request." We will respond within 30 days of receiving your request.