Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Sleeptopia, Inc. is committed to protecting the privacy and security of your Protected Health Information ("PHI").

PHI includes individually identifiable information concerning your health, healthcare, payment for healthcare, sleep testing, prescriptions, medical equipment, treatment, and related services.

We are required by law to:

• Maintain the privacy and security of your PHI;
• Provide you with this Notice describing our legal duties and privacy practices;
• Follow the terms of the Notice currently in effect; and
• Notify affected individuals following a breach of unsecured PHI when notification is required by law.

We may use and disclose your PHI to provide, coordinate, or manage your healthcare.

For example, we may share appropriate information with physicians, sleep specialists, respiratory therapists, pharmacies, laboratories, equipment providers, or other healthcare professionals involved in your care.

We may use and disclose your PHI to bill and obtain payment for healthcare services and equipment.

This may include communicating with your health insurance plan regarding eligibility, benefits, authorization, claims, medical necessity, payment, and related activities.

We may use and disclose PHI for healthcare operations, including:

• Quality assessment and improvement
• Patient service and care coordination
• Staff training
• Credentialing
• Compliance activities
• Auditing
• Business management
• Accreditation
• Legal and regulatory compliance
• Evaluating and improving our services

We may work with outside organizations known as Business Associates that perform services involving PHI on our behalf. When required by HIPAA, these organizations are contractually required to appropriately safeguard your information.

We may use your information to contact you regarding appointments, Home Sleep Tests, equipment, supplies, compliance, follow-up care, or other healthcare services.

We may contact you regarding treatment alternatives, healthcare services, equipment, supplies, or other health-related services that may be relevant to your care.

When permitted by law, we may disclose relevant PHI to a family member, friend, caregiver, or other person involved in your healthcare or payment for your healthcare.

We will use professional judgment and comply with applicable privacy requirements when making these disclosures.

We may use or disclose PHI without your written authorization when permitted or required by law, including certain circumstances involving:

• Public health activities
• Reporting abuse, neglect, or domestic violence
• Health oversight activities
• Judicial or administrative proceedings
• Law enforcement
• Coroners, medical examiners, and funeral directors
• Organ and tissue donation
• Workers' compensation
• Certain military and veterans' activities
• Correctional institutions
• National security activities
• Prevention of a serious threat to health or safety

Any such disclosure will be limited and made in accordance with applicable law.

Other uses or disclosures of your PHI that are not permitted or required by law generally require your written authorization.

When applicable, this includes certain uses or disclosures for marketing purposes and other purposes specifically requiring authorization under HIPAA.

If you provide written authorization, you may revoke that authorization in writing at any time, except to the extent we have already acted in reliance upon it.

You generally have the right to inspect and obtain a copy of PHI maintained about you in a designated record set, subject to certain exceptions permitted by law.

Requests should be submitted to Sleeptopia using the contact information provided below.

Reasonable, cost-based fees may apply when permitted by law.

If you believe information in your medical record is incorrect or incomplete, you may request that Sleeptopia amend the information.

We may deny certain amendment requests when permitted by law. If a request is denied, you may have additional rights regarding the disputed information.

You may request restrictions on certain uses or disclosures of your PHI.

We are generally not required to agree to all requested restrictions. However, where required by HIPAA, we will comply with a request to restrict disclosure of information to a health plan for payment or healthcare operations when you have paid the applicable healthcare item or service completely out-of-pocket.

You may request that Sleeptopia communicate with you about medical matters using a particular method or at a particular location.

We will accommodate reasonable requests as required by law.

You may request a list of certain disclosures Sleeptopia has made of your PHI.

The accounting does not include every type of disclosure. For example, certain disclosures related to treatment, payment, and healthcare operations generally are not included.

You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.

You have the right to receive notification if a breach of your unsecured PHI occurs and notification is required by applicable law.

If you believe your privacy rights have been violated, you may submit a complaint to Sleeptopia.

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services.

Sleeptopia will not retaliate against you or penalize you for filing a privacy complaint.

Sleeptopia reserves the right to change this Notice and its privacy practices as permitted by law.

Any revised Notice may apply to PHI Sleeptopia already maintains as well as information created or received in the future.

The current Notice will be available on Sleeptopia's website, and a paper copy may be requested at any time.

For questions about this Notice, requests involving your health information, or privacy complaints, contact:

Sleeptopia, Inc.
Phone: (316) 573-5699