Notice of Privacy Practices

Effective Date: September 1, 2026
Last Revised: September 1, 2026

This Notice of Privacy Practices (this “Notice”) describes how your health information may be used and disclosed by Eclipse Health Medical Group (“Eclipse,” “We” or “Us”), and how you can get access to this information. Please review the notice carefully.

The Health Insurance Portability and Accountability Act of 1996, and its implementing regulations (“HIPAA”), requires Covered Entities (as defined by HIPAA) (each, a “CE”) to ask patients to acknowledge receipt of a document similar to this Notice.

Eclipse is committed to protecting the privacy of your health information. We are required by law to maintain the privacy of your health information. We will follow the legal duties and privacy practices described in this Notice.

CE RESPONSIBILITIES

Under HIPAA, CEs must take steps to protect the privacy of your Protected Health Information (“PHI”). PHI includes information that we have created or received regarding your health or payment for services related to your health. It includes both your medical records and personal information such as your name, social security number, financial information, address, and phone number.

Under federal law, CEs are required to:

  • Protect the privacy of your PHI. All of our employees and physicians are required to maintain the confidentiality of PHI and receive appropriate privacy training.

  • Provide you with this Notice explaining their duties and practices regarding your PHI.

  • Notify you in the case of a breach of unsecured PHI.

  • Follow the practices and procedures set forth in this Notice.

USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION THAT DO NOT REQUIRE YOUR AUTHORIZATION

Eclipse discloses PHI in a number of ways connected to your treatment, payment for your care, and our healthcare operations. Some examples of how we may use or disclose your PHI without your authorization are listed below.

Treatment

  • To our physicians, nurses, physician assistants, patient care coordinators, and others involved in your healthcare or preventive healthcare.

  • To coordinate treatment-related activities, such as prescriptions and lab work.

  • To other healthcare providers treating you who are not on our staff, such as specialists and other providers. For example (and without limitation), we may share your PHI with another physician specialist so they can provide proper care.

Payment

  • To bill you for healthcare we provide.

  • To pay others who provide items for your care.

  • To other organizations and providers for payment activities unless disclosure is prohibited by law.

Health Care Operations

  • To administer and support our operations or those of other healthcare organizations (as allowed by law), including providers and plans. For example (and without limitation), we may use your PHI to conduct quality analysis, aggregate data, review and improve our services and the care you receive, and provide training.

  • To other individuals (such as consultants and attorneys) and other companies and organizations that help us with our business activities. (Note: If we share your PHI with other organizations for this purpose, they must agree to protect your privacy.)

Other

We may use or disclose your PHI without your authorization for legal and/or governmental purposes in the following circumstances:

  • As required by law.

  • Public health and safety – To an authorized public health authority or individual to:

    • Protect public health and safety.

    • Prevent or control disease, injury, or disability.

    • Report vital statistics such as births or deaths.

    • Investigate or track problems with prescription drugs and medical devices.

  • Abuse or neglect – To government entities authorized to receive reports regarding abuse, neglect, or domestic violence.

  • Minors – In general, parents and legal guardians are legal representatives of minor patients. However, in certain circumstances, as dictated by state law, minors can act on their own behalf and consent to their own treatment. In general, we will share the PHI of a patient who is a minor with the minor’s parents or guardians, unless the minor could have consented to the care themselves (except where parental disclosure may be required under applicable law).

  • Oversight agencies – To health oversight agencies for certain activities such as audits, examinations, investigations, inspections, and licensure.

  • Legal proceedings – In the course of any legal proceeding or in response to an order of a court or administrative agency, a subpoena, a discovery request, or other lawful process.

  • Law enforcement – To law enforcement officials in certain circumstances for law enforcement purposes. By way of example and without limitation, disclosures may be made to identify or locate a suspect, witness, or missing person; to report a crime; or to provide information concerning victims of crimes.

  • Health Information Exchanges – We may participate in health information exchanges (HIEs) and may electronically share your medical information for treatment, payment, and healthcare operations purposes with other participants in the HIEs. HIEs allow us, your other healthcare providers, and other organizations to efficiently share and better use information necessary for your treatment and other lawful purposes. For example, many large health organizations participate in a HIE that allows them to share records (labs, imaging, clinical notes, etc.) to facilitate your care (such as in the emergency department). The inclusion of your medical information in an HIE is voluntary and subject to your right to opt out; if you do not choose to opt out, we may provide your medical information in accordance with applicable law to the HIEs in which we participate.  If you would like to opt out, you can do so by writing to inform us that you have chosen to opt out of participation in the sharing of information with HIEs.

We may also use or disclose your PHI without your authorization in the following miscellaneous circumstances:

  • Contacting you directly – We may use your PHI, including your email address or phone number, to contact you. For example, we may use this information to send you visit follow-ups and other communications relating to your care and treatment, or to let you know about treatment alternatives or other health-related services or benefits that may be of interest to you.

  • Family and friends – To a member of your family, a relative, a close friend—or any other person you identify who is directly involved in your healthcare—when you are either not present or unable to make a healthcare decision for yourself and we determine that disclosure is in your best interest. We will also assume that we may disclose PHI to any person you permit to be physically present with you as we discuss your PHI with you. For example, we will assume that we may discuss your healthcare with a person you bring with you to your virtual appointments.

  • De-identified information – If information is removed from your PHI so that you cannot be identified, except as prohibited by law.

  • Coroners, funeral directors, and organ donation – To coroners, funeral directors, and organ donation organizations as authorized by law.

  • Threat to health or safety – To avoid a serious threat to your health or safety or the health or safety of others.

USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION THAT REQUIRE US TO OBTAIN YOUR AUTHORIZATION

Except in the situations listed in the sections above, we will use and disclose your PHI only with your written authorization. This means we will not use your PHI in the following cases, unless you give us written permission:

  • Special legal circumstances – In some situations, federal and state laws provide special protections for specific kinds of PHI and require authorization from you before we can disclose that specially protected PHI. For example, additional protections may apply in some states to genetic, mental health, drug and alcohol abuse, rape and sexual assault, sexually transmitted disease and/or HIV/AIDS-related information, and/or to the use of your PHI in certain review and disciplinary proceedings of healthcare professionals by state authorities. In these situations, we will comply with the more stringent state laws pertaining to such use or disclosure. If you have questions about these laws, please contact the Privacy Officer at support@eclipsehealth.org. 

  • Marketing purposes – Except as allowed by HIPAA or applicable law (by way of example, marketing communications allowed by HIPAA without authorization include communications pertaining to care or treatment and/or our products or services).

  • Sale of your information – Eclipse Health will not sell your protected health information to another entity.

YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION

You have the right to:

  • Request restrictions by asking that we limit the way we use or disclose your PHI for treatment, payment, or healthcare operations. You may also ask that we limit the information we give to someone who is involved in your care, such as a family member or friend.

  • Ask that we communicate with you by another means. For example, if you want us to communicate with you at a different address, we can usually accommodate that request. We may ask that you make your request to us in writing. We will agree to reasonable requests.

  • Request an electronic or paper copy of your PHI. 

  • Ask to amend PHI we created that you feel is incorrect or incomplete. Your request for an amendment must be in writing and provide the reason for your request. In certain cases, we may deny your request in writing. You may respond by filing a written statement of disagreement with us and asking that the statement be included with your PHI.

  • Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will confirm the person has the authority and can act for you before we take any action.

  • Seek an accounting of certain disclosures by asking us for a list of the times we have disclosed your PHI. Your request must be in writing and give us the specific information we need in order to respond to your request. You may request disclosures made up to six years before your request. You may receive one list per year at no charge. If you request another list during the same year, we may charge you a reasonable fee. These lists will not include disclosures made for treatment, payment, or healthcare operations and certain other disclosures as permitted by law.

  • Request a paper copy of this Notice.

  • Receive written notification of any breach of your unsecured PHI.

  • File a complaint if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

COMMUNICATION PLATFORMS

As noted above, we may use PHI to send you appointment reminders and other communications relating to your care and treatment, or to let you know about treatment alternatives or other health-related services or benefits that may be of interest to you, via email, phone call, app, or text message. We may also make certain PHI, such as information about care or treatment, appointment histories, and medication records, accessible to you through secure online tools.

If you choose to communicate with us via email, text, app, or chat, you acknowledge that we may exchange PHI with you via email, text, app, or chat; that email, text, app, and certain chat functionality may not be secure methods of communication; and that you agree to the security risks of such communication. If you would prefer not to exchange PHI via email, text, app, or chat, you can choose not to communicate with us via those means, and you can notify us at support@eclipsehealth.org.

CHANGES TO PRIVACY PRACTICES

Eclipse may modify this Notice from time to time. The revised Notice will apply to all PHI that we maintain. We will make any such changes to this Notice by informing you in our annual Notice of Privacy Practices. If you would like an email notifying you of these changes prior to this annual update, please inform us in writing. The date of the last update will be clearly indicated at the top of this Notice. 


QUESTIONS AND COMPLIANTS

If you have any questions about this Notice or would like an additional copy, please contact our Privacy Officer at support@eclipsehealth.org.

If you think that we may have violated your privacy rights or you disagree with a decision we made about access to your PHI, you may send a written complaint to the Privacy Officer at support@eclipsehealth.org.