Notice of Privacy Practices
Effective Date: September 19, 2025
Entity: Marula LLC, Administrative Office, Pleasant Grove, Utah
Applies To:
All patients receiving telehealth services administered through Marula Rehab
A. Why You’re Receiving This Notice
- This Notice explains how Marula LLC may use and share your health information, your rights under HIPAA, and our legal duties to protect your privacy. It applies to all services provided through our telehealth platform.
B. How We May Use and Share Your Health Information
- We may use or disclose your Protected Health Information (PHI) without your written permission for the following purposes:
1. Treatment
- To provide, coordinate, or manage your care. Example: sharing your intake assessment with your assigned provider.
2. Payment
- To bill Medicaid or other payers for services. Example: submitting claims for your telehealth sessions.
3. Health Care Operations
- For administrative functions like quality improvement or provider credentialing. Example: reviewing session data to improve care delivery.
4. Other Permitted Uses and Disclosures
- We may also use or disclose your PHI without your authorization in these cases:
- Public Health Reporting (e.g., communicable disease tracking)
- Health Oversight Activities (e.g., audits, inspections)
- Judicial or Administrative Proceedings (e.g., court orders)
- Law Enforcement Requests (e.g., locating missing persons)
- Research (with appropriate safeguards and IRB approval)
- To Prevent Serious Threats to Health or Safety
5. Uses Requiring Your Authorization
- We will not use or disclose your PHI for the following without your written consent:
- Marketing or sale of your health information
- Psychotherapy notes (if applicable)
- Any other use not listed above
- You may revoke your authorization at any time in writing.
6. Your Rights Under HIPAA
- You have the right to:
- Access your health records
- Request corrections to inaccurate information
- Request restrictions on certain uses or disclosures
- Receive confidential communications (e.g., alternate contact methods)
- Receive a copy of this Notice
- File a complaint with Marula LLC or the U.S. Department of Health & Human Services
7. Our Responsibilities
- Marula LLC is required by law to:
- Maintain the privacy and security of your PHI
- Provide this Notice and follow its terms
- Notify you if a breach compromises your information
- Not use or share your information other than as described here unless you authorize it in writing
8. Data Security Measures
- All PHI is encrypted using TLS 1.3
- Stored on HIPAA-compliant servers in the U.S.
- Access restricted to authorized personnel
- Regular audits and vulnerability scans performed
9. Children’s Privacy
- We do not knowingly collect data from individuals under 18 without parental or guardian consent. If such data is inadvertently collected, we will notify the guardian and delete the information immediately.
10. Changes to This Notice
- We may update this Notice at any time. The revised version will be posted on our website and will apply to all PHI we maintain
.
11. Contact Information