Notice of Privacy Practices

Effective Date: January 1, 2026 · This notice is provided to you as required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Who We Are

Gold Coast Physio LLC ("Gold Coast Physio," "we," "us," or "our") provides physical therapy, occupational therapy, and speech-language pathology services in senior living communities, outpatient clinics, and patients' residences. We are a covered entity under HIPAA and are committed to protecting the privacy and security of your protected health information (PHI).

How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without requiring your authorization:

Treatment

We may use and share your health information to provide, coordinate, or manage your therapy care. For example, your physical therapist may share your evaluation findings with your occupational therapist or speech-language pathologist to coordinate your care. We may also share your information with physicians, specialists, home health agencies, or other providers involved in your treatment.

Payment

We may use and share your health information to bill for services and collect payment. For example, we may submit claims to Medicare, Medicare Advantage plans, or your private insurance company and share the information needed to process and receive payment for services provided to you.

Healthcare Operations

We may use and share your health information for activities necessary to run our business and ensure quality care, including quality assessment and improvement, clinical supervision, staff training, accreditation and licensing activities, legal and compliance functions, and business management activities.

Other Uses and Disclosures Permitted by Law

In certain situations, we may use or disclose your health information without your written authorization, including:

• When required by law (e.g., mandatory reporting of certain communicable diseases or abuse/neglect)
• For public health activities and oversight
• In response to a court order, subpoena, or other lawful process
• To prevent or lessen a serious and imminent threat to health or safety
• For workers' compensation or similar programs
• To a coroner, medical examiner, or funeral director as required by law
• For organ and tissue donation purposes
• To family members or close friends involved in your care, when you are present and do not object, or when necessary in an emergency
• For limited research purposes under specific HIPAA-compliant protocols
• To the U.S. Department of Health and Human Services for compliance investigations

Uses and Disclosures Requiring Your Authorization

For any use or disclosure not described above, we will request your written authorization before sharing your information. This includes most marketing activities, the sale of PHI, and the use of psychotherapy notes. You may revoke your authorization at any time in writing, except to the extent we have already taken action in reliance on it.

Your Rights Regarding Your Health Information

Right to Access Your Records

You have the right to inspect and receive a copy of your health information maintained in our designated record set, including your medical record and billing records. We will respond to your request within 30 days. We may charge a reasonable cost-based fee for copies.

Right to Request Amendment

If you believe information in your records is incorrect or incomplete, you may request that we amend it. We may deny your request if the information was not created by us, is not part of the records we maintain, or is already accurate and complete. We will respond to your request within 60 days.

Right to an Accounting of Disclosures

You have the right to request a list of disclosures we have made of your PHI during the prior six years (other than disclosures for treatment, payment, and operations, and certain other exceptions). We will respond within 60 days of your request.

Right to Request Restrictions

You may request that we limit how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree to your request except in one case: if you request that we restrict disclosure to a health plan for a service you paid for in full out of pocket, we must agree to that restriction.

Right to Confidential Communications

You may request that we contact you by alternative means or at an alternative location. For example, you may ask us to contact you only at a specific phone number or address. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

Even if you received this notice electronically, you have the right to a printed copy of this Notice of Privacy Practices. Please contact us and we will provide one at no charge.

Our Duties

Gold Coast Physio is required by law to:

• Maintain the privacy of your health information
• Provide you with this notice of our legal duties and privacy practices
• Notify you following a breach of unsecured PHI
• Abide by the terms of the notice currently in effect

We reserve the right to change this notice and the revised notice will apply to PHI we already hold as well as PHI we receive in the future. We will post the current notice on our website and make copies available at our offices.

How to Exercise Your Rights or File a Complaint

To exercise any of the rights described above, or if you believe your privacy rights have been violated, please contact our Privacy Officer:

This Notice of Privacy Practices is effective January 1, 2026. Gold Coast Physio LLC reserves the right to revise this notice. The most current version will be available at our locations and on our website.