Notice of Privacy Practices

Effective Date: August 31st, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Cedrone Health & Wellness is committed to protecting the privacy of your health information.

This Notice of Privacy Practices (“Notice”) describes how Cedrone Health & Wellness (“we,” “our,” or “us”) may use and disclose your protected health information (“PHI”) and describes your rights concerning that information.

We are required by law to maintain the privacy and security of your PHI, provide you with this Notice of our legal duties and privacy practices, follow the Notice currently in effect, and notify affected individuals following a breach of unsecured PHI when required by law.

Your Rights

You have rights regarding your health information. Subject to applicable law, these include the following.

Get an Electronic or Paper Copy of Your Medical Record

You may ask to inspect or obtain an electronic or paper copy of your medical record and other health information we maintain about you.

We generally will provide access within the time required by applicable law. We may charge a reasonable, cost-based fee when permitted by law.

In certain limited circumstances, we may deny access to some information. If we deny a request, you may have a right to have that decision reviewed.

Ask Us to Correct Your Medical Record

If you believe health information we maintain about you is incorrect or incomplete, you may ask us to amend it.

We may deny your request in certain circumstances, but we will explain the reason in writing as required by law.

Request Confidential Communications

You may ask us to communicate with you about health matters in a particular way or at a particular location.

For example, you may ask us to contact you using a particular telephone number or mailing address.

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Disclose

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We generally are not required to agree to every requested restriction.

If you pay for a healthcare item or service in full, out of pocket, you may ask us not to disclose information concerning that item or service to your health plan for payment or healthcare operations purposes. We will honor that request when required by law unless disclosure is otherwise required by law.

Get a List of Certain Disclosures

You may request an accounting of certain disclosures of your PHI made during the period permitted by law.

The accounting does not include every disclosure. For example, certain disclosures for treatment, payment, or healthcare operations may not be included.

We will provide one accounting within a 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests during that period when permitted by law and will inform you of the cost in advance.

Get a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

If you have given someone medical power of attorney or if someone is your legal guardian or otherwise legally authorized to act for you, that individual may exercise your rights and make choices concerning your health information as permitted by law.

We may verify the person's authority before taking action.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with Cedrone Health & Wellness using the contact information at the end of this Notice.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences concerning what we disclose.

Depending on the circumstances and applicable law, you may have choices concerning disclosures to family members, close friends, or others involved in your care or payment for your care.

If you are unable to communicate your preference, such as during an emergency, we may disclose information when we determine that doing so is in your best interest and is permitted by law.

We may also disclose information when necessary to lessen a serious and imminent threat to health or safety when permitted by law.

Marketing, Sale of PHI, and Other Uses Requiring Authorization

We will obtain your written authorization before using or disclosing PHI for purposes requiring authorization under applicable law.

This generally includes certain marketing activities and the sale of PHI.

If you authorize us to use or disclose PHI, you may revoke that authorization in writing at any time, except to the extent we have already acted in reliance upon it.

Psychotherapy Notes

Most uses and disclosures of psychotherapy notes, if we maintain such notes, require written authorization except as otherwise permitted or required by law.

Substance Use Disorder Records

To the extent Cedrone Health & Wellness creates, receives, or maintains records subject to special federal or state confidentiality protections for substance use disorder treatment, those records will be handled in accordance with applicable law.

Our Uses and Disclosures

We may use or disclose your PHI without your written authorization in circumstances permitted or required by law, including the following.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare.

For example, we may disclose relevant information to another healthcare professional involved in your treatment.

Payment

We may use and disclose health information to bill for and obtain payment for healthcare services.

For example, we may provide information to a health plan or other payer when applicable.

Healthcare Operations

We may use and disclose health information to operate our practice and improve the quality of care.

This may include quality assessment, compliance, auditing, training, credentialing, administrative activities, and business management.

Business Associates

We may disclose PHI to third-party service providers that perform functions or services on our behalf involving PHI.

When required by HIPAA, these organizations are subject to contractual requirements designed to appropriately safeguard PHI.

Public Health and Safety Activities

We may disclose health information for certain public health and safety purposes when authorized or required by law, including:

  • Preventing or controlling disease

  • Reporting certain adverse events or product problems

  • Reporting suspected abuse, neglect, or domestic violence when required or permitted

  • Preventing or reducing a serious threat to health or safety

Required by Law

We may use or disclose your health information when federal, state, or local law requires us to do so.

Health Oversight Activities

We may disclose health information to authorized health oversight agencies for activities permitted by law, including audits, investigations, inspections, licensure, and disciplinary proceedings.

Judicial and Administrative Proceedings

We may disclose health information in response to certain court or administrative orders, subpoenas, discovery requests, or other lawful processes when applicable legal requirements are satisfied.

Law Enforcement

We may disclose health information for certain law-enforcement purposes when permitted or required by law.

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to coroners, medical examiners, or funeral directors as authorized by law.

Workers' Compensation

We may disclose health information as authorized by and necessary to comply with workers' compensation and similar programs.

Organ and Tissue Donation

When applicable, we may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation as permitted by law.

Research

We may use or disclose health information for research when the applicable legal requirements have been satisfied.

Reproductive Healthcare Privacy

Cedrone Health & Wellness will handle PHI relating to reproductive healthcare in accordance with applicable federal and state privacy laws.

We will not use or disclose PHI for a purpose prohibited by applicable law.

When federal law requires an attestation concerning a request for PHI potentially related to reproductive healthcare, we will obtain the required attestation before making the disclosure.

Our Responsibilities

We are required to:

  • Maintain the privacy and security of your PHI

  • Provide you with this Notice describing our legal duties and privacy practices

  • Follow the terms of the Notice currently in effect

  • Notify you if a breach occurs that may have compromised the privacy or security of your unsecured PHI, when notification is required by law

We will not use or disclose your information for purposes not described in this Notice unless you provide written authorization or another legal basis permits or requires the use or disclosure.

Changes to This Notice

We reserve the right to change this Notice and our privacy practices as permitted by law.

A revised Notice may apply to health information we already maintain as well as information we receive in the future.

The current Notice will be available through Cedrone Health & Wellness and posted on our Website when required.

Questions and Complaints

For questions regarding this Notice, to exercise your privacy rights, or to file a privacy complaint, contact:

Cedrone Health & Wellness

Privacy Officer: Elizabeth Cedrone

Cedrone Health & Wellness PLLC

10940 S. Parker Road

Suite #149

Parker, CO 80134

(720) 289-9794

admin@cedronehealth.com

You may also submit a complaint to the:

U.S. Department of Health and Human Services

Office for Civil Rights

Information about filing a HIPAA privacy complaint is available through the Office for Civil Rights.

Cedrone Health & Wellness will not retaliate against you for exercising your privacy rights or filing a complaint.