NPCWoods Telemedicine

Notice of Privacy Practices

Effective date: August 19, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

1. Who we are

This notice is for NPCWoods Telemedicine, a text-based telemedicine practice. Care is provided by Chris Woods, MSN, APRN, FNP-C, a licensed nurse practitioner.

Visits are text-based and $59 cash. We are licensed in Arizona, Colorado, Georgia, Idaho, Iowa, Montana, Nevada, New Mexico, North Carolina, Oregon, and Utah. You must be physically located in one of those states at the time of the visit.

This notice applies to protected health information (PHI) we create or receive about you when you text us, complete a visit, or otherwise receive care from this practice.

2. Our duties

We are required by law to:

• Maintain the privacy and security of your protected health information
• Give you this notice of our legal duties and privacy practices
• Follow the terms of the notice that is currently in effect
• Notify you if a breach of your unsecured protected health information occurs, as required by law

We do not sell your protected health information.

3. Uses and disclosures we may make without your written authorization

HIPAA allows us to use and disclose your health information for treatment, payment, and health care operations, and for a limited set of other purposes the law permits or requires. We use only what we need for those purposes.

Treatment

We may use and share your information to provide, coordinate, or manage your care. For a text-based visit, that can include:

• Reviewing your messages, photos, and history to decide if text care is safe and what treatment is appropriate
• Sending a prescription to the pharmacy you name
• Sharing information with another clinician or facility if you need in-person or emergency care

Payment

We may use and share your information to collect the $59 cash visit fee and to keep ordinary billing records. That can include sharing limited information with a payment processor so we can take payment.

Health care operations

We may use and share your information to run the practice. That includes quality review, record-keeping, training, customer service about your visit, and working with vendors who help us operate (for example, a secure messaging or records vendor). Those vendors are business associates. They must protect your information under a written agreement.

Limited uses and disclosures allowed by HIPAA

We may also use or disclose your information without your written authorization when HIPAA permits or requires it, including:

• When required by law
• For public health activities, such as reporting certain diseases or events
• For health oversight activities, such as audits or investigations by agencies that regulate us
• To report suspected abuse, neglect, or domestic violence, as required or allowed by law
• For judicial or administrative proceedings, such as in response to a court order or other lawful process
• For limited law enforcement purposes allowed by HIPAA
• To prevent or lessen a serious and imminent threat to the health or safety of a person or the public

We do not use these permissions as a catch-all. If a use is not needed for treatment, payment, operations, or one of the limited purposes above, we ask for your authorization.

4. Uses and disclosures that require your written authorization

We will not use or disclose your protected health information for other purposes unless you give us written authorization. That includes:

• Uses and disclosures not described in this notice
• Most marketing uses that HIPAA treats as requiring authorization
• Any sale of protected health information. We do not sell PHI.

If you sign an authorization, you may revoke it in writing at any time. Revocation does not apply to disclosures we already made while the authorization was in effect.

5. Your rights

You have the following rights with respect to your protected health information. To use any of these rights, contact the privacy officer listed below.

• Right to inspect and copy. You may ask to see or get a copy of your health information. We may charge a reasonable, cost-based fee for copies. In limited cases allowed by law, we may deny the request and tell you why.
• Right to request an amendment. You may ask us to correct information you believe is wrong or incomplete. We may deny the request if we did not create the information, it is accurate, or the law does not require us to change it. If we deny the request, you may submit a statement of disagreement.
• Right to an accounting of disclosures. You may ask for a list of certain disclosures we have made. This list does not include disclosures for treatment, payment, or operations, or certain other disclosures the law excludes.
• Right to request restrictions. You may ask us to limit how we use or share your information. We will consider the request. We are not required to agree, except when the law requires us to honor a restriction on a disclosure for a service you paid for in full out of pocket and the disclosure is not otherwise required by law.
• Right to request confidential communications. You may ask us to contact you in a specific way, such as at a different phone number or email address. We will accommodate reasonable requests.
• Right to a paper copy of this notice. You may ask for a paper copy of this notice at any time, even if you received it electronically. Ask the privacy officer, and we will provide one.
• Right to breach notice. You have the right to be notified if a breach of your unsecured protected health information occurs.

6. Complaints

If you believe we have violated your privacy rights, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

To complain to us, contact the privacy officer below. To complain to the Office for Civil Rights, visit https://www.hhs.gov/hipaa/filing-a-complaint/.

Filing a complaint will not change your care. We will not retaliate against you for filing a complaint.

7. How to contact us

Use this contact information to ask questions about this notice, exercise your rights, request a paper copy, or file a complaint with us.

8. Changes to this notice

We may revise this notice. The new notice will apply to all protected health information we already have about you, as well as information we receive in the future. The effective date will appear at the top of the notice. The current notice will be posted at https://npcwoods.com/notice-of-privacy-practices/.