Effective Date: April 20, 2026

NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Commitment to Your Privacy

Medicruz Medical Clinic is committed to protecting the privacy and security of your Protected Health Information (PHI).

We are required by the Health Insurance Portability and Accountability Act (HIPAA) to:

• Maintain the privacy of your PHI
• Provide you with this Notice
• Follow the terms currently in effect

2. What Is Protected Health Information (PHI)?

PHI includes any information that:

• Identifies you
• Relates to your physical or mental health
• Relates to healthcare services or payment

Examples include: medical records, lab results, billing details, and appointment history.

3. How We May Use and Disclose Your PHI

We may use and disclose your PHI without written authorization for:

A. Treatment

We use PHI to provide, coordinate, or manage your care.
Example: Sharing information with specialists, labs, or pharmacies.

B. Payment

We use PHI to bill and receive payment.
Example: Submitting insurance claims or verifying eligibility.

C. Healthcare Operations

We use PHI for operational activities such as:

• Quality improvement
• Staff training
• Licensing and accreditation
• Business management

4. Other Permitted Uses and Disclosures

We may disclose PHI without authorization for:

• Public Health Activities (disease reporting, prevention)
• Health Oversight (audits, inspections)
• Legal Proceedings (court orders, subpoenas)
• Law Enforcement (when required by law)
• Threats to Health or Safety
• Workers’ Compensation
• Coroners and Medical Examiners

5. Uses Requiring Your Authorization

We will obtain written authorization before:

• Marketing communications (when required)
• Sale of PHI
• Use of psychotherapy notes (if applicable)
• Any use not described in this Notice

You may revoke authorization at any time in writing.

6. Your Rights

You have the right to:

Access

Request copies of your medical records (electronic or paper)

Amend

Request corrections to inaccurate or incomplete information

Accounting of Disclosures

Request a list of certain disclosures

Restrictions

Request limits on how PHI is used or disclosed

Confidential Communications

Request communication through specific channels

Paper Copy

Request a copy of this Notice at any time

7. Our Responsibilities

Medicruz Medical Clinic is required to:

• Protect the privacy of your PHI
• Notify you of any data breach
• Follow this Notice
• Obtain authorization when required

8. Business Associates

We may share PHI with third parties (Business Associates) who help us operate our business (e.g., billing, IT, cloud storage).

All Business Associates must:

• Sign a Business Associate Agreement (BAA)
• Comply with HIPAA safeguards

9. Electronic Communications

If you communicate with us electronically:

• We take steps to secure your data
• Email and SMS may not be fully secure
• Avoid sharing sensitive medical data via unsecured channels

10. Special Situations

Minors

We comply with laws regarding minors’ health information.

Family & Caregivers

We may share PHI with individuals involved in your care unless you object.

Disaster Relief

We may disclose PHI to assist relief organizations.

11. Changes to This Notice

We reserve the right to modify this Notice at any time. Updates will be:

• Posted on our website
• Available upon request

12. Complaints

If you believe your rights have been violated, you may file a complaint.

Contact Us:

Medicruz Medical Clinic 
2309 W Dr Martin Luther King Jr Blvd STE 2, Tampa, FL 33607
Phone: (813) 348-3946
Email: info@medicruztampa.com

You may also file a complaint with the U.S. Department of Health and Human Services:
https://www.hhs.gov/hipaa/filing-a-complaint

We will not retaliate against you for filing a complaint.

13. Acknowledgment of Receipt

You may be asked to sign a form acknowledging receipt of this Notice.