Notice of Privacy Practices

Effective date: October 6, 2026

This Notice applies to Carawan Health PLLC, doing business as TRT-NC, and to workforce members and service providers permitted to use health information on the practice’s behalf. We are required by law to protect the privacy and security of your Protected Health Information (“PHI”), provide you with this Notice, and follow the Notice currently in effect.

How we may use and disclose your health information

We may use or disclose PHI without your written authorization when permitted or required by law, including:

• Treatment: to evaluate you, coordinate your care, order laboratory testing, send prescriptions when appropriate, and communicate with healthcare professionals involved in your care.
• Payment: to collect payment, provide receipts, process transactions, and perform related billing activities.
• Healthcare operations: for quality review, staff training, licensing, compliance, security, legal services, and management of the practice.
• Public health and safety: when reporting or action is authorized or required by law, including certain disease, adverse-event, abuse, neglect, safety, and product-related reports.
• Legal and government requirements: in response to lawful court orders, subpoenas, oversight activities, law-enforcement requests, workers’ compensation requirements, or other duties imposed by law.
• Other purposes permitted by law: such as organ and tissue donation, coroners and medical examiners, certain research, national-security activities, and correctional-institution requests when applicable.
• Business associates: with vendors that perform services involving PHI for us and are required by contract to safeguard that information.

Uses that generally require your written authorization

Uses and disclosures of PHI for purposes not described in this Notice will generally be made only with your written authorization. Most uses of psychotherapy notes, uses for paid marketing, and sales of PHI require authorization when applicable. You may revoke an authorization in writing, except to the extent we have already acted in reliance on it.

Your health-information rights

Subject to legal limits, you may:

• Inspect or obtain an electronic or paper copy of your medical and billing records.
• Ask us to correct information you believe is inaccurate or incomplete.
• Request confidential communications at a particular address, telephone number, or other reasonable location.
• Ask us to limit certain uses or disclosures. We are not required to agree to every request. When you pay in full out of pocket for an item or service, you may ask us not to disclose information about it to your health plan, and we will honor that request unless disclosure is required by law.
• Request an accounting of certain disclosures made during the period allowed by law.
• Receive a paper copy of this Notice, even if you agreed to receive it electronically.
• Choose someone with legal authority to act on your behalf.

Our responsibilities

We maintain administrative, technical, and physical safeguards appropriate to the PHI we hold. We will notify affected individuals when required after a breach of unsecured PHI. We will not use or disclose your information other than as described here unless you authorize it or the law permits or requires it.

Electronic communications and the patient portal

Please use our secure patient portal for medical histories, clinical questions, laboratory information, images, and other sensitive health information. Ordinary email, SMS, and public website forms may not be appropriate for detailed medical information. Text and email may be used for administrative communication when permitted and consistent with your preferences.

Changes to this Notice

We may revise this Notice. A revised Notice may apply to information we already hold as well as information received in the future. The current version will be available on this website and upon request.

Questions, requests, or complaints

Contact our Privacy Officer to ask questions, exercise a privacy right, or submit a complaint:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint or exercising a privacy right.

Learn how to file a HIPAA complaint with HHS.