Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. Who We Are

This Notice of Privacy Practices (“Notice”) describes the privacy practices of RIVO, LLC and its affiliates, including certain affiliated professional entities, their physicians, health care practitioners, and other personnel (“we” or “us”).

II. Our Privacy Obligations

We are required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”) and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI. We are also obligated to notify you following a Breach of unsecured PHI. When we use or disclose your PHI, we are required to abide by the terms of this Notice (or other notice in effect at the time of the use or disclosure).

III. Permissible Uses and Disclosures Without Your Written Authorization

In certain situations, which we describe in Section IV below, we must obtain your written authorization in order to use and/or disclose your PHI. We do not need any type of authorization, however, for the following uses and disclosures:

A. Uses and Disclosures For Treatment, Payment and Health Care Operations

We may use and disclose PHI, but not your “Highly Confidential Information” (defined in Section IV.B below), in order to treat you, obtain payment for services provided to you, and conduct our “Healthcare Operations” as detailed below:

Treatment. We may use and disclose your PHI to provide treatment, for example, to diagnose and treat your injury or illness. We may also disclose PHI to other health care providers involved in your treatment.

Payment. In most cases, we may use and disclose your PHI to obtain payment for services that we provide to you.

Healthcare Operations. We may use and disclose your PHI for our healthcare operations which include internal administration and planning and various activities that improve the quality and cost effectiveness of the care that we deliver to you.

B. Disclosure to Relatives, Close Friends and Other Caregivers

We may use or disclose your PHI to a family member, other relative, a close personal friend, or any other person identified by you when you are present for, or otherwise available prior to the disclosure, if we:

1. obtain your agreement

2. provide you with the opportunity to object to the disclosure and you do not object

3. reasonably infer that you do not object to the disclosure

If you are not present, or the opportunity to agree or object cannot practicably be provided because of your incapacity or an emergency circumstance, we may exercise professional judgment to determine whether a disclosure is in your best interests.

C. Public Health Activities

We may disclose your PHI for public health activities such as reporting disease, injury, abuse, exposure risks, and workplace-related illnesses as permitted by law.

D. Victims of Abuse, Neglect or Domestic Violence

If we reasonably believe you are a victim of abuse, neglect, or domestic violence, we may disclose your PHI to a governmental authority authorized by law to receive such reports.

E. Health Oversight Activities

We may disclose your PHI to a health oversight agency responsible for monitoring the health care system and compliance with government health programs.

F. Judicial and Administrative Proceedings

We may disclose your PHI in the course of a judicial or administrative proceeding in response to a legal order or other lawful process.

G. Law Enforcement Officers

We may disclose your PHI to law enforcement officials as required or permitted by law.

H. Decedents

We may disclose your PHI to a coroner, medical examiner, or funeral director as authorized by law.

I. Research

We may use or disclose your PHI if an Institutional Review Board approves a waiver of authorization.

J. Health or Safety

We may disclose your PHI to prevent or lessen a serious and imminent threat to a person’s or the public’s health or safety.

K. Specialized Government Functions

We may disclose PHI for specialized government functions such as military or national security activities.

L. Workers’ Compensation

We may disclose PHI as necessary to comply with workers’ compensation laws.

M. As Required By Law

We may disclose PHI when required by law.

IV. Uses and Disclosures Requiring Your Written Authorization

We must obtain written authorization for marketing uses, sales of PHI, or other disclosures not described in this Notice.

You may revoke your authorization at any time by submitting a written request to hello@rivohealth.co

V. Your Rights Regarding Your Protected Health Information

You have the right to:

• Request restrictions on PHI disclosures

• Receive confidential communications

• Inspect and copy your health information

• Request amendments to your records

• Receive an accounting of disclosures

Requests regarding your records or amendments can be submitted to:

hello@rivohealth.coe and Duration of This Notice

Effective Date: January 1, 2024

We may update this Notice at any time. Updated versions will be posted on our website.

VII. Privacy Officer

For questions about this Notice or your privacy rights, please contact:

RIVO, LLC
hello@rivohealth.co