Privacy practices

Notice of Privacy Practices

Effective September 15, 2026 · Draft for covered-entity review

This notice describes how medical information may be used and disclosed and how you may access it. The controlling notice shown during intake will identify the responsible clinical entity.

Uses and disclosures

Health information may be used or disclosed for treatment, payment, and healthcare operations; to coordinate with providers and pharmacies; for public-health and safety activities; for health oversight; when required by law; and for other purposes permitted by HIPAA. Uses requiring authorization will not occur without that authorization unless law permits otherwise.

Your rights

Subject to law, you may request access to or copies of records, request correction, ask for restrictions, request confidential communications, receive an accounting of certain disclosures, and obtain a paper copy of the applicable notice. You may revoke an authorization in writing for future uses.

Our duties

The responsible entity must protect health information, provide notice of legal duties and privacy practices, follow the current notice, and notify affected individuals following a breach of unsecured protected health information when required.

Complaints

You may submit a privacy complaint using the contact information in the controlling clinical notice or to the U.S. Department of Health and Human Services. You will not be retaliated against for making a complaint.

Website contact

For help locating the correct privacy contact, email support@norlohealth.com or write to Tech Medics LLC, 120 Hawley St, Binghamton, NY 13901.