Privacy Policy & HIPAA Notice of Privacy Practices

DRT Health Services LLC ("DRT," "we," "us," or "our") is a mobile healthcare provider operating in Wilmington, Xenia, Waynesville, and surrounding Ohio communities. Services are delivered by Danielle Todd, FNP, a licensed Family Nurse Practitioner.

As a covered entity under HIPAA, we are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of Privacy Practices, and to follow the terms of the notice currently in effect.

"Protected Health Information" (PHI) is information about you that identifies you and relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for that healthcare. PHI may be in paper, electronic (ePHI), or verbal form.

Examples of PHI we may collect and maintain include:

• Your full name, date of birth, address, phone number, and email address
• Health history, medical conditions, and known allergies
• Service records, clinical notes, and treatment information
• Insurance information and billing records
• Appointment dates, times, and locations
• Lab results and specimen collection records
• Payment information related to services rendered

We use and disclose your PHI only as permitted or required by HIPAA. The following describes the ways we may use your PHI without your written authorization:

You have the following rights regarding your Protected Health Information. To exercise any of these rights, submit a written request to our Privacy Officer using the contact information in Section 1.

We implement reasonable administrative, physical, and technical safeguards to protect your PHI and personal information in accordance with HIPAA's Security Rule. These measures include:

• Limiting access to PHI to authorized personnel only
• Using encrypted connections (HTTPS/TLS) for all data transmitted through this website
• Regularly reviewing our security practices and access controls
• Training staff on privacy and security obligations

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. If you suspect a security incident involving your information, please contact us immediately.

Our services are available to patients of all ages; however, our online booking forms and patient portal are intended for use by adults (18 and older) or by a parent or legal guardian acting on behalf of a minor patient. We do not knowingly collect personal information directly from children under 13 without verifiable parental consent as required by COPPA.

If you believe we have inadvertently collected information from a child under 13 without appropriate consent, please contact us and we will take steps to delete that information promptly.

We reserve the right to change this Privacy Policy and HIPAA Notice of Privacy Practices at any time. Changes will be effective immediately upon posting to our website. The revised notice will apply to all PHI we maintain, including records created before the effective date of the change. We encourage you to review this page periodically.

We will post a clear notice on our website when material changes are made. If required by law, we will provide additional notification of significant changes.

If you have questions about this Notice or wish to exercise your rights, please contact our Privacy Officer:

Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us directly or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR):

We will not retaliate against you for filing a complaint with HHS OCR or with us.