NOTICE OF PRIVACY PRACTICES

Effective Date: July 8, 2026 THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are required by federal and Missouri law to maintain the privacy of your protected health information (“PHI”), provide you with this Notice of our legal duties and privacy practices, and notify you following a breach of unsecured PHI. This Notice summarizes your rights and our responsibilities under the Health Insurance Portability and Accountability Act (HIPAA), the HITECH Act, and applicable Missouri statutes. We are required to follow the terms of the Notice currently in effect.

1. Uses and Disclosures We May Make Without Your Written Authorization

We may use or disclose your PHI without your written authorization for the following purposes, as permitted by HIPAA and Missouri law:

Treatment

We may use or disclose your PHI to provide, coordinate, or manage your healthcare. This includes sharing information with other healthcare providers involved in your care, providing appointment reminders, or discussing treatment alternatives or services we offer.

Payment

We may use or disclose your PHI to obtain payment for services provided to you. This includes contacting your insurance company, verifying benefits, or obtaining prior authorization.

Healthcare Operations

We may use or disclose your PHI for activities necessary to operate our practice and ensure quality care. Examples include staff training, quality assessment, auditing, accreditation, and business management.

Other Uses and Disclosures Permitted by Law

We may also use or disclose your PHI for the following purposes:

To prevent or reduce a serious threat to your health or safety or the health or safety of others.
As required by federal or Missouri law, including mandatory reporting of abuse, neglect, domestic violence, or certain injuries.
Workers’ compensation claims and related proceedings.
Public health activities, such as reporting communicable diseases, adverse events, or product recalls.
Health oversight activities, including audits, investigations, inspections, or licensing actions.
Judicial or administrative proceedings, in response to a court order, subpoena, or warrant.
Law enforcement purposes, including locating a suspect, victim, or witness; reporting certain crimes; or identifying a deceased person.
Specialized government functions, including military, national security, or correctional institution needs.
Research, when approved by an Institutional Review Board or privacy board and when specific safeguards are met.
Coroners, medical examiners, funeral directors, or organ procurement organizations as necessary to perform their duties.

2. Disclosures We May Make Unless You Object

Unless you instruct us otherwise, we may disclose your PHI:

To family members, relatives, friends, or other persons involved in your care or payment for care. We will limit disclosures to information relevant to their involvement.
To your insurance company when required for prior authorization, medication approval, consultations, radiology, laboratory work, or procedures.
To disability insurers (short‑term or long‑term) when you have filed a claim and signed a disclosure authorization.

You may object to these disclosures at any time.

3. Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including:

Most uses or disclosures of psychotherapy notes
Marketing communications not permitted by HIPAA
Sale of PHI

You may revoke your authorization at any time by submitting a written request to the Medical Director. Revocation will not affect actions already taken in reliance on your authorization.

4. Your Rights Concerning Your Protected Health Information

To exercise any of the rights below, submit a written request to the Medical Director.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to most restrictions, except when you pay out‑of‑pocket in full for a service and request that we not disclose that information to your health insurer.

Right to Confidential Communications

You may request that we contact you by alternative means or at alternative locations. We will accommodate reasonable requests.

Right to Inspect and Obtain Copies

You may inspect and obtain a copy of PHI used to make decisions about your care, including electronic copies. We may charge a reasonable, cost‑based fee. We may deny access in limited circumstances, such as when disclosure could endanger you or another person.

Right to Request Amendments

You may request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request if the record was not created by us or if we determine it is accurate.

Right to an Accounting of Disclosures

You may request an accounting of certain disclosures of your PHI made in the past six years. The first accounting in a 12‑month period is free; additional requests may incur a reasonable fee.

Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to electronic delivery.

Right to Be Notified of a Breach

You have the right to receive notification if a breach of your unsecured PHI occurs, as required by the HITECH Act.

5. Changes to This Notice

We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. If material changes occur, we will post the updated Notice in our office and on our website. You may request a current copy at any time.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint:

With us, by contacting our Medical Director
With the U.S. Department of Health and Human Services, Office for Civil Rights

All complaints must be submitted in writing. We will not retaliate against you for filing a complaint.

7. Contact Information

Medical Director: Chad Sharky, DO

Address: 801 NW Saint Mary Dr, Ste 210, Blue Springs, MO 64014

Email: csharky@virtuemedkc.com

Phone: (816) 200‑1533