Version 3
Effective August 8, 2026 · Version 3
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This notice is provided by the UpLiftRx-affiliated medical practices and the licensed clinicians who care for you (together, "we" or "the Practice"), and by UpliftRX LLC acting as their business associate for the technology platform through which your care is delivered.
We are required by law to maintain the privacy of your protected health information ("PHI"), to give you this notice of our legal duties and privacy practices, to notify you if a breach affects your unsecured PHI, and to follow the terms of the notice currently in effect.
You have the following rights with respect to your health information. To exercise any of them, message your care team in the portal or email privacy@upliftrx.co.
Get an electronic or paper copy of your record. You may ask to see or receive a copy of your medical and billing records. We will provide a copy, usually within 30 days of your request, in the electronic form you request if we can readily produce it. We may charge a reasonable, cost-based fee.
Ask us to correct your record. If you believe information in your record is incorrect or incomplete, you may ask us to amend it. We may deny your request, but we will tell you why in writing within 60 days, and you may submit a statement of disagreement that becomes part of your record.
Request confidential communications. You may ask us to contact you in a specific way — for example, only by portal message, or at a particular phone number or address. We will accommodate all reasonable requests, and we must accommodate your request if you tell us that disclosure would endanger you.
Ask us to limit what we use or share. You may ask us not to use or share certain information for treatment, payment, or our operations. We are not required to agree, and may decline if it would affect your care. However, if you pay for a service in full out of pocket, you have the right to require that we not share information about that service with a health plan for payment or operations purposes, and we must honor that request. Because our services are cash-pay and we do not bill insurance, we do not disclose information to health plans for payment in the ordinary course at all.
Get a list of those with whom we've shared information. You may request an accounting of disclosures we made in the six years before your request, other than disclosures for treatment, payment, and healthcare operations, and certain other exceptions. We will provide one accounting per 12-month period free of charge.
Get a copy of this notice. You may request a paper copy at any time, even if you agreed to receive it electronically.
Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will verify that person's authority before we act.
File a complaint. If you believe your privacy rights have been violated, you may file a complaint with us at privacy@upliftrx.co or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201, by calling 1-877-696-6775, or at hhs.gov/hipaa/filing-a-complaint. We will never retaliate against you for filing a complaint.
For certain information, you can tell us your preferences, and we will follow your instructions:
If you are not able to tell us your preference — for example, in an emergency — we may share information when we believe it is in your best interest or necessary to lessen a serious and imminent threat to health or safety.
We never share the following without your written authorization: marketing communications that are paid for by a third party, the sale of your information, and most psychotherapy notes. We do not and will not sell your health information. You may revoke a written authorization at any time, in writing, except to the extent we have already acted on it.
Treatment. We use your information to provide, coordinate, and manage your care, and we share it with the other professionals involved in your treatment — for example, we send your prescription and the information necessary to fill it to the dispensing pharmacy, and we send test orders to and receive results from the laboratory.
Payment. We use your information to bill and collect payment for services, and we share the limited information necessary with our payment processors. Because we are a cash-pay practice, we do not submit claims to insurers or to any federal or state healthcare program.
Healthcare operations. We use your information to run the practice, improve care, evaluate clinician performance, train staff, conduct quality-assurance review, and support business planning, including through our business associates.
Business associates. We share information with vendors who perform services for us — hosting, secure messaging, e-prescribing, telehealth video, laboratory interfaces, payment processing, and customer support tooling — only under written business associate agreements that require them to protect your information and use it only for the permitted purpose.
As required or permitted by law, we may also use or share your information to:
De-identified information. We may create and use information from which all identifiers have been removed in accordance with HIPAA standards, for research, analytics, quality improvement, and product development. De-identified information is no longer PHI.
UpliftRX LLC is not a covered entity. When we handle PHI on behalf of the Practice, the pharmacies, or the laboratories, we act as a business associate and are bound by HIPAA and by our written agreements with them.
Some information you give us is not PHI — for example, your name and email address when you sign up for our newsletter without becoming a patient, or your marketing preferences. That information is governed by our Privacy Policy, our Cookie Policy, and applicable state privacy law rather than by HIPAA. State laws — including consumer health data laws in Washington, Nevada, and Connecticut and the confidentiality of medical information laws in California and other states — may give you additional protections, and we follow the law that is most protective of you.
We encrypt information in transit and at rest, restrict access to the minimum necessary for each role, log access to patient records, require multi-factor authentication for staff, keep our vendors under written agreement, and train our workforce on privacy and security. No system is perfectly secure, but if a breach affects your unsecured PHI we will notify you as the law requires.
We retain medical records for at least the period required by the law of the state where you received care — commonly seven to ten years from your last visit, and longer for patients who were minors. We retain billing records as required by tax and healthcare regulations. When a record reaches the end of its retention period, it is securely destroyed.
We may change this notice and make the new terms apply to all information we maintain. The current notice is always posted at upliftrx.co/legal/privacy with its effective date, and we will notify you in the portal of material changes.
Privacy Officer, UpliftRX LLC 8 The GRN, STE R, Dover, DE 19901 privacy@upliftrx.co