HIPAA Notice of Privacy Practices
Thrive Medical, LLC | thrivewyo.com
Effective date: September 29, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This notice applies to Thrive Medical, LLC and the members of our workforce, including Alison Brady, PA-C. It covers the health information we create, receive, maintain, or transmit about you — called "protected health information" or "PHI" — including information you provide through our intake forms, consultations, and communications with us. We maintain your PHI in our secure electronic medical record (EMR) and related systems, not on our public website.
We are committed to protecting the privacy of your health information and follow the standards of the federal HIPAA Privacy Rule and applicable Wyoming law. Where Wyoming law provides greater privacy protection than federal law, we follow Wyoming law.
We provide you with this notice at your first visit. When your first service is delivered electronically, we provide the notice electronically at the time you request services. We ask you to sign an acknowledgment that you received this notice. This notice is also posted on our website, and a printed copy is available on request at any time.
Our duties
•We are required by law to maintain the privacy and security of your PHI.
•We are required to provide you with this notice explaining our legal duties and privacy practices.
•We must follow the terms of the notice currently in effect.
•We must notify you if a breach occurs that may have compromised the privacy or security of your PHI.
•We will not use or disclose your PHI other than as described in this notice without your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
How we may use and disclose your PHI without your authorization
Treatment. We may use your PHI to provide, coordinate, and manage your care. For example, we share the prescription and related information needed with the licensed pharmacy that dispenses your medication, and we may communicate with other health care providers you ask us to involve in your care.
Payment. We may use and disclose your PHI to bill and be paid for the care we provide, including processing payments through our payment processors.
Health care operations. We may use and disclose your PHI to run our practice — for example, quality assessment, licensing, training, business management, customer service, and resolving complaints.
Appointment reminders and health-related communications. We may contact you by phone, text, email, or secure message to remind you of appointments and to tell you about treatment options or health-related services we offer that may interest you. You may tell us your preferred contact methods at any time.
As required or permitted by law. We may disclose your PHI in the following situations, among others: when required by law; for public health and safety activities; for health oversight activities; to report suspected abuse, neglect, or domestic violence; for judicial and administrative proceedings; for law enforcement purposes; to coroners, medical examiners, and funeral directors; for organ and tissue donation; for certain research approved by an institutional review board or privacy board; to prevent or lessen a serious and imminent threat to health or safety; for specialized government functions; and for workers' compensation programs.
People involved in your care. We may share relevant information with a family member, friend, or other person you identify as involved in your care or payment for your care — with your agreement or the opportunity to object. If you are not able to tell us your preference (for example, in an emergency), we may share information if we believe it is in your best interest.
Uses and disclosures that require your written authorization
We will ask for your written authorization before we use or disclose your PHI for marketing purposes, before any sale of your PHI (we do not sell PHI), and for any other use or disclosure not described in this notice. We do not use your PHI for fundraising.
Your rights regarding your health information
You have the right to:
•See and get a copy of your PHI. You can ask to see or receive a copy of your medical and billing records and other health information we maintain about you. We will provide it in the form and format you request when readily producible, typically within 30 days. We may charge a reasonable, cost-based fee for copies.
•Ask us to correct your PHI. If you believe information in your record is incorrect or incomplete, you can ask us to amend it. We may deny your request in certain cases, and we will tell you why in writing. You may submit a statement of disagreement that we will include with your record.
•Get a list of disclosures. You can ask for a list (an "accounting") of when we have shared your PHI, with whom, and why, going back up to six years. Certain disclosures — such as those for treatment, payment, and health care operations, and those you authorized — are not included.
•Ask us to limit what we use or share. You can ask us not to use or share certain PHI for treatment, payment, or operations. We are not required to agree to these requests, except that we must agree to restrict disclosure to a health plan if you pay in full, out of pocket, for the item or service and the disclosure is not otherwise required by law.
•Ask for confidential communications. You can ask us to contact you in a specific way (for example, home or mobile phone) or to send mail to a different address. We will accommodate reasonable requests.
•Get a paper copy of this notice. You can ask for a paper copy at any time, even if you received this notice electronically.
•Choose someone to act for you. If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will take reasonable steps to verify that the person has this authority.
•Be notified of a breach. You have the right to be notified if we discover a breach that compromises the privacy or security of your unsecured PHI.
•File a complaint. You can complain if you feel your privacy rights have been violated (see below).
How to exercise your rights
Contact our Privacy Officer using the information at the end of this notice. We may ask you to complete a short form to help us process your request. We will not retaliate against you for exercising any of these rights.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer, or with the U.S. Department of Health and Human Services, Office for Civil Rights:
Office for Civil Rights, U.S. Department of Health and Human Services
200 Independence Avenue SW, Washington, DC 20201
Phone: 1-800-368-1019 | TTY: 1-800-537-7697
Online: www.hhs.gov/ocr/privacy/hipaa/complaints
We will not retaliate against you for filing a complaint, and your care will not be affected.
Changes to this notice
We may change this notice, and the changes will apply to all PHI we already have about you as well as any information we receive in the future. When we make a material change, we will post the revised notice on our website and make it available on request.
Contact and effective date
Privacy Officer: Alison Brady, PA-C Thrive Medical, LLC
Email: alison@thrivewyo.com | Phone: 307-363-0838 | Fax: 307-219-9199
Effective date of this notice: September 29, 2026