Notice of Privacy Practices

Effective 10/10/2026

This notice describes how medical information about you may be used and disclosed by Newport Integrative Medicine & Aesthetics, doing business as NIMA Wellness, and how you can get access to this information. It applies to all records of your care made or kept by NIMA Wellness — in the clinic, through video visits, and in the NIMA app.

1Our duties

• We are required by law to keep your protected health information (PHI) private and secure.
• We must give you this notice of our legal duties and privacy practices, and follow the notice currently in effect.
• We will tell you promptly if a breach occurs that may have compromised the privacy or security of your information.
• We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by telling us in writing.

2How we use and share your information

To treat you

We use your information and share it with other professionals who are treating you. For example, your provider may review your lab results, send a prescription to your pharmacy, or consult a specialist about your care.

To get paid

We use your information to bill and collect payment for your services — for example, to process a card payment, a financing plan, or a membership. Where you pay in full out of pocket, see your right to restrict sharing with a health plan below.

To run our practice

We use your information to run the clinic, improve care, train staff, and contact you when necessary — for example, appointment reminders, forms to complete before a visit, and follow-ups after a treatment.

With our business associates

Companies that perform services for us — such as our records, messaging, video-visit, payment, document-reading and hosting vendors — may receive your information to do that work. Each signs a business associate agreement requiring it to protect your information as we do.

3Other uses and disclosures

We are allowed or required to share your information in other ways — usually for the public good, such as public health and research. We have to meet many conditions in the law before we can share it for these purposes:

• Public health and safety — preventing disease, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing a serious threat to anyone's health or safety.
• Research — only under the protections the law requires.
• As required by law — including to the Department of Health and Human Services if it wants to see that we are complying with federal privacy law.
• Organ and tissue donation requests.
• Medical examiners, coroners, and funeral directors when an individual dies.
• Workers' compensation, law enforcement, and other government requests — for workers' compensation claims, law enforcement purposes or with a law enforcement official, health oversight agencies, and special government functions such as military and national security.
• Lawsuits and legal actions — in response to a court or administrative order, or a subpoena.
• Family and friends involved in your care — we may share information with someone involved in your care or payment, or to notify them in a disaster, unless you tell us not to. If you are unable to tell us, we may share it if we believe it is in your best interest.

4Uses that need your written permission

We will never do the following unless you give us written permission:

• Use or share your information for marketing.
• Sell your information.
• Share most psychotherapy notes.
• Any other use or disclosure not described in this notice.

California law (the Confidentiality of Medical Information Act) adds protections — for example, we will not share your medical information with an employer without your written authorization, and some kinds of information, such as HIV test results and certain reproductive or gender-affirming care records, receive extra protection. Where California law is stricter than HIPAA, we follow California law.

5Your rights

To use any of these rights, contact the Privacy Officer (section 8). Some requests must be made in writing; we will tell you if so.

• Get a copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide it, within 15 days of your request (California law), and may charge a reasonable, cost-based fee.
• Ask us to correct your record. You can ask us to correct health information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days, and you may then submit a statement of disagreement.
• Get a list of those we have shared with. You can ask for an accounting of the times we have shared your information for six years before the date you ask, who we shared it with, and why. It excludes disclosures for treatment, payment, and operations, and some others (such as any you asked us to make). We provide one accounting a year free and may charge a reasonable fee for more within 12 months.
• Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment, or operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service or item out of pocket in full, you can ask us not to share that information with your health insurer for payment or operations, and we will say yes unless a law requires us to share it.
• Ask for confidential communications. You can ask us to contact you in a specific way (for example, a different phone number or email) or at a different address. We will say yes to all reasonable requests.
• Get a paper copy of this notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically.
• Be notified of a breach. We will notify you if a breach occurs that may have compromised the privacy or security of your unsecured information.
• Choose someone to act for you. If you have given someone medical power of attorney, or someone is your legal guardian, that person can exercise your rights. We will confirm they have that authority first.

6Complaints

If you feel we have violated your rights, you can complain to us using the Privacy Officer contact below, or to the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

7Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, in our office, and on this page.

8Privacy Officer

How we handle information from our website and app outside your medical record is described in our Privacy Policy.