Notice of Privacy Practices

HERE TOMORROW, INC. NON-HCP
NOTICE OF PRIVACY PRACTICE

THIS NOTICE DESCRIBES HOW INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

At Here Tomorrow, Inc. (“Here Tomorrow”), we are committed to treating and using personal health information (“PHI”) about you responsibly. This Notice of Privacy Practices (“Notice”) describes the personal information we collect, and how and when we use or disclose that information. Here Tomorrow is not a licensed provider of clinical health care and does not do so in any fashion. We work to bridge the gap to connect you with mental health resources, and engage in collaborative efforts with those resources to improve your overall experience.

Understanding Your Health Record/Information

Each time you visit or speak with Here Tomorrow or visit or speak with Here Tomorrow personnel, whether virtually or in person, a record of your visit or conversation may be made. This record may contain information collected from your visit or conversation, including your symptoms, and any third-party diagnoses, treatment, and information about your care, treatment options, or referrals discussed. This information may be used or disclosed to:

• Plan your care and treatment options.
• Communicate with providers who contribute, or may contribute, to your care.
• Serve as a legal document.
• Assess and continually work to improve the services we render and the outcomes we achieve.
• Comply with state and federal laws that require us to disclose your health information.
• Students or Trainees as part of our operations training.

Understanding what is in your record and how information about your health is used helps you to: ensure its accuracy, better understand who, what, when, where, and why others may access your health information, and make more informed decisions when authorizing disclosure to others.

Your Health Information Rights

Although your records are the physical property of Here Tomorrow, the information belongs to you. You have the right to request to:

• Access, inspect and copy your records. Here Tomorrow maintains a records system. You have the right to access your records in a machine-readable electronic format. You have the right to request an electronic copy of your records be given to you or transmitted to another individual or entity. Here Tomorrow may charge you a reasonable, cost-based fee for the labor and supplies associated with copying or transmitting the electronic records.
• Amend your records which you believe are not correct or complete. Here Tomorrow is not required to agree to the amendment if you ask us to amend information that is in our opinion: (i) accurate and complete; (ii) not part of the PHI kept by or for Here Tomorrow; (iii) not part of the PHI which you would be permitted to inspect and copy; or (iv) not created by Here Tomorrow, unless the individual or entity that created the information is not available to amend the information. If we deny your request, you may submit a written statement of disagreement of reasonable length. Your statement of disagreement will be included in your record, but we may also include a rebuttal statement.
• Obtain an accounting of disclosures of your PHI. We are not required to list certain disclosures, including (i) disclosures made for treatment, payment, and health care operations purposes, (ii) disclosures made with your authorization, (iii) disclosures made to create a limited data set, and (iv) disclosures made directly to you. The first list you request within a 12-month period is free of charge, but Here Tomorrow may charge you for additional lists within the same 12-month period. Here Tomorrow will notify you of the costs involved with additional requests, and you may withdraw your request before you incur any costs.
• Communications of your health information by alternative means (e.g., e-mail) or at alternative locations (e.g., post office box).
• Place a restriction to certain uses and disclosures of your information. In most cases, Here Tomorrow is not required to agree to these additional restrictions, but if Here Tomorrow does, Here Tomorrow will abide by the agreement (except in certain circumstances where disclosure is required or permitted, such as an emergency, for public health activities, or when disclosure is required by law). Here Tomorrow does not bill or otherwise seek reimbursements from health plans; however, by law, Here Tomorrow must comply with a request to restrict the disclosure of PHI to a health plan for purposes of carrying out payment or health care operations if the PHI pertains solely to a health care item or service for which we have been paid out of pocket in full.
• Revoke your authorization to use or disclose health information except to the extent that action has already been taken.
• Obtain a copy of your health care information in paper or a machine-readable electronic format.

Our Responsibilities

Although Here Tomorrow is not a licensed provider of clinical health care, Here Tomorrow strives to:

• Maintain the privacy of your health information.
• Provide you with this Notice as to our privacy practices with respect to information we collect and maintain about you.
• Abide by the terms of the Notice currently in effect.
• Notify you in writing if we are unable to agree to a requested restriction.
• Accommodate reasonable requests you may have to communicate health information by alternative means or at alternative locations.
• Notify you in writing of a breach where your Unsecured PHI has been accessed, acquired, used or disclosed to an unauthorized person. “Unsecured PHI” refers to PHI that is not secured through the use of technologies or methodologies that render the PHI unusable, unreadable, or indecipherable to unauthorized individuals.

We reserve the right to change our practices and to make the new provisions effective for all PHI we maintain. Should our information practices change, such revised Notices will be made available to you.

We will not use or disclose your health information without your written authorization, except as described in this Notice.

For More Information or to Report a Problem

If have questions and would like additional information, you may contact the Here Tomorrow Privacy Officer at:

Here Tomorrow, Inc.
Attn: Privacy Officer
910 3rd Street
Neptune Beach, FL 32266
Telephone: (904) 372-9087

Treatment: Information obtained by a provider, specialistor other member of your team which third -party Here Tomorrow collaborates with on your behalf,, will be recorded in your record and used to determine the potential course of action that should work best for you. Here Tomorrow operates a records system. This is an electronic system that keeps information about you. Here Tomorrow may also provide a third-party healthcare provider with health information about you (e.g., copies of various reports) that should assist him or her in treating you in the future. Here Tomorrow may also disclose health information about you to, and obtain your health information from, electronic health information networks in which community healthcare providers may participate to facilitate the provision of care to individuals such as yourself.

Health Care Operations: We may use information in your record to collaborate with external health care providers involved in your care, and assess the care and outcomes in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of the services we provide.

Business Associates: We may contract with third parties to provide services on our behalf and disclose your health information to our business associate so that they can perform the job we’ve asked them to do. We require the business associate to appropriately safeguard your information.

Notification: We may use or disclose information to notify or assist in notifying a family member, personal representative, or another person responsible for your care, your location, and general condition.

Communication from Offices: We may call your home or other designated location and leave a message on voice mail, or in person, in reference to any items that assist Here Tomorrow in collaboration with others for your Treatment and Health Care Operations, such as appointment reminders and follow-ups. We may mail to your home or other designated location any items that assist Here Tomorrow in coordinating Treatment and Health Care Operations such as appointment reminders and satisfaction surveys.

Communication with Family/Personal Friends: Professionals, using their best judgment, may disclose to a family member, other relative, close personal friend or any other person you identify, information relevant to that person’s involvement in your care. When a family member(s) or a friend(s) accompany you to a visit, it is considered implied consent that a disclosure of your PHI and personal information is acceptable.

Open Areas: Sometimes services are provided in an open area. While special care is taken to maintain privacy, others may overhear some information while receiving services. Should you be uncomfortable with this, please bring this to the attention of our Privacy Officer.

To Avert a Serious Threat to Health or Safety: We may use your health information or share it with others when necessary to prevent a serious threat to your health or safety, or the health or safety of another person or the public.

Research: We may disclose information to researchers when their research has been approved by an institutional review board that has reviewed the research proposal and established protocols to ensure the privacy of your PHI. Even without that special approval, we may permit researchers to look at PHI to help them prepare for research, for example, to allow them to identify individuals who may be included in their research project, as long as they do not remove, or take a copy of, any PHI. We may use and disclose a limited data set that does not contain specific readily identifiable information about you for research. But we will only disclose the limited data set if we enter into a data use agreement with the recipient who must agree to (1) use the data set only for the purposes for which it was provided, (2) ensure the security of the data, and (3) not identify the information or use it to contact any individual. Here Tomorrow may use a single compound authorization to combine conditioned and unconditioned authorizations for research (e.g., participation in research studies, creation or maintenance of a research database or repository), provided the authorization: (i) clearly differentiates between the conditioned (provision of research related treatment is conditioned on the provision of a written authorization) and unconditioned research components; and (ii) provides the individual with an opportunity to opt in to the unconditioned research activities.

Coroners, Medical Examiners and Funeral Director: In the unfortunate event of your death, we may disclose your health information to a coroner or medical examiner. This may be necessary, for example, to determine the cause of death. We may also release this information to funeral directors as necessary to carry out their duties.

Deceased Individuals: In the unfortunate event of your death, we are permitted to disclose your PHI to your personal representative and your family members and others who were involved in your care prior to your death, unless inconsistent with any prior expressed preference that you provided to us. PHI excludes any information regarding a person who has been deceased for more than 50 years.

Organ Procurement Organizations: Consistent with applicable law, we may disclose health information to organ procurement organizations, federally funded registries, or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.

Marketing: We may contact you by mail, e-mail or text to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you. However, we must obtain your prior written authorization for any marketing of products and services that are funded by third parties. You have the right to optout by notifying us in writing.

Fund Raising: We may contact you as part of a fundraising effort. We may also disclose certain elements of your PHI, such as your name, address, phone number and dates you received services at Here Tomorrow, to a business associate or a foundation related to Here Tomorrow so that they may contact you to raise money for Here Tomorrow. If you do not wish to receive further fundraising communications, you should follow the instructions written on each communication that informs you how to be removed from any fundraising lists. You will not receive any fundraising communications from us after we receive your request to opt out, unless we have already prepared a communication prior to receiving notice of your election to opt out.

Sale of your PHI: Here Tomorrow may not “sell” your PHI (i.e., disclose such PHI in exchange for remuneration) to a third party without your written authorization that acknowledges the remuneration unless such an exchange meets a regulatory exception.

Health Oversight Activities: We may release your health information to government agencies authorized to conduct audits, investigations, and inspections of our facility. These government agencies monitor the operation of the health care system, government benefit programs, such as Medicare and Medicaid, and compliance with government regulatory programs and civil rights laws.

Food and Drug Administration (FDA): We may disclose to the FDA health information relative to adverse events with respect to food, supplements, product and product defects, or post marketing surveillance information to enable product recalls, repairs, or replacement.

Public Health: As required by law, we may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability.

Workers’ Compensation: We may disclose health information to the extent authorized by and to the extent necessary to comply with laws relating to workers’ compensation or other similar programs established by law.

Law Enforcement: We may disclose health information for law enforcement purposes as required by law.

Inmates and Correctional Institutions: If you are an inmate or you are detained by a law enforcement officer, we may disclose your health information to the prison officers or law enforcement officers if necessary to provide you with health care, or to maintain safety at the place where you are confined.

Lawsuits and Disputes: We may disclose your health information if we are ordered to do so by a court that is handling a lawsuit or other dispute. We may also disclose your information in response to a subpoena, discovery request, or other lawful request by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain a court order protecting the information from further disclosure.

As Required by Law: We may use or disclose your health information if we are required by law to do so.

Issued November 2022.