Notice of Privacy Practices (HIPAA)

 

Effective Date: October 27, 2026

Last Updated: February 27, 2026

 

Your Information. Your Rights. Our Responsibilities.

​

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

​

This Notice applies to protected health information maintained by Metabolic Health MD, PLLC in connection with its U.S. healthcare services.

​

This Notice does not govern medical records created as part of care provided at C37 Medical Hub in Dubai. Dubai healthcare information is subject to applicable UAE and Dubai requirements and C37 Medical Hub policies.

​

1. Your Rights

You have the right to:

​

• obtain an electronic or paper copy of your medical record;

• ask us to correct information you believe is incorrect or incomplete;

• request confidential communications;

• ask us to limit certain uses or disclosures;

• obtain an accounting of certain disclosures;

• obtain a copy of this Notice;

• authorize another person to act for you; and

• file a complaint if you believe your privacy rights have been violated.

 

Access Your Medical Record

You may ask to see or receive an electronic or paper copy of health information we maintain about you.

​

We generally provide access within the time required by law and may charge a reasonable cost-based fee where permitted.

 

Request a Correction

You may ask us to correct health information that you believe is inaccurate or incomplete.

​

We may deny a request in circumstances permitted by law, but we will explain the decision as required.

 

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular address.

​

We will accommodate reasonable requests.

 

Request Restrictions

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

​

We are not required to agree to every request.

​

If you pay in full out-of-pocket for a healthcare item or service, you may ask us not to disclose information about that item or service to your health plan for payment or healthcare operations. We will honor such a request when required by law.

​

Accounting of Disclosures

You may request an accounting of certain disclosures of your health information for the period permitted by law.

​

Certain disclosures, including many disclosures for treatment, payment, and healthcare operations, are not included.

​

Obtain a Copy of This Notice

You may request a paper copy of this Notice at any time, including if you previously agreed to receive it electronically.

​

Personal Representatives

If another person has legal authority to act on your behalf, such as through a valid healthcare power of attorney or guardianship, that person may exercise applicable rights on your behalf after we verify the authority.

​

Complaints

You may complain directly to Metabolic Health MD if you believe your privacy rights have been violated.

​

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

​

We will not retaliate against you for filing a complaint.

​

2. Your Choices

For certain health information, you may tell us your preferences concerning disclosure.

​

Where permitted by law, you may tell us whether we may:

• share information with family members, close friends, or others involved in your care;

• share information in a disaster-relief situation; or

• make certain other disclosures where your permission or opportunity to object applies.

 

If you are unable to tell us your preference, we may disclose information where legally permitted and where we reasonably determine it is in your best interest or necessary to prevent a serious threat to health or safety.

​

3. Uses Requiring Written Authorization

Except where otherwise permitted or required by law, we will obtain your written authorization before:

​

• using your PHI for marketing purposes where authorization is required;

• selling your PHI;

• disclosing most psychotherapy notes, if we maintain any; or

• making another use or disclosure not otherwise permitted by this Notice or applicable law.

 

You may revoke an authorization in writing, except to the extent we have already relied upon it.

​

4. How We May Use and Disclose Your Information

​

Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare.

This may include sharing relevant information with other healthcare professionals involved in your care.

​

Members of your care team may include a health coach working under the direction of Metabolic Health MD where permitted by law and appropriate to your treatment.

​

Healthcare Operations

We may use and disclose health information to operate our practice, improve quality, train staff, perform compliance activities, conduct audits, manage business operations, and contact you when appropriate.

​

Payment

We may use and disclose health information for billing, payment processing, collection activities, reimbursement documentation, or other payment-related functions.

​

Public Health and Safety

We may disclose information where permitted or required for public-health activities, reporting adverse events, reporting suspected abuse or neglect, or preventing or reducing a serious threat to health or safety.

​

Health Oversight

We may disclose information to health oversight agencies for legally authorized activities such as audits, inspections, investigations, licensing, or disciplinary matters.

​

Legal Requirements

We may disclose health information where required or permitted by federal, state, or other applicable law.

​

Judicial, Administrative, and Law-Enforcement Matters

We may disclose information in response to qualifying court orders, administrative proceedings, subpoenas, law-enforcement requests, or other legal processes where permitted by law.

​

Workers' Compensation and Government Functions

We may disclose information as permitted by law for workers' compensation, military or national-security functions, correctional institutions, or other legally authorized governmental purposes.

​

Medical Examiners, Coroners, and Funeral Directors

We may disclose information as permitted by law following an individual's death.

​

Organ and Tissue Donation

We may disclose information to organizations involved in organ or tissue donation when applicable.

​

Research

Health information may be used or disclosed for research only when applicable legal requirements have been satisfied.

​

5. Substance Use Disorder Records

To the extent that Metabolic Health MD receives or maintains substance use disorder patient records protected by 42 CFR Part 2, additional federal confidentiality protections may apply.

​

Such protected Part 2 information generally may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against you unless permitted by applicable law, including where you have provided appropriate written consent or a qualifying court order and subpoena have been obtained.

​

Additional protections may also apply to fundraising communications using Part 2 information.

​

6. Telehealth and Electronic Systems

We provide U.S. healthcare through telehealth and electronic healthcare systems.

We use administrative, technical, and physical safeguards designed to protect PHI and enter into Business Associate Agreements or other required contractual protections with vendors when applicable.

​

Systems supporting care may include electronic health records, telehealth platforms, prescribing systems, secure communications, laboratory services, payment systems, and other healthcare technology.

​

7. Our Responsibilities

Metabolic Health MD is required by law to:

​

• maintain the privacy and security of your PHI;

• provide you with this Notice describing our legal duties and privacy practices;

• follow the terms of the Notice currently in effect; and

• notify affected individuals following a breach of unsecured PHI when required by law.

 

We will not use or disclose your health information other than as described in this Notice unless you authorize us in writing or another use or disclosure is permitted or required by law.

​

8. State and Other Privacy Laws

Some state or federal laws may provide additional privacy protections for particular categories of health information.

​

When another applicable law provides greater privacy protection than HIPAA, we will comply with the more protective requirement where required.

​

9. Changes to This Notice

We may change the terms of this Notice.

​

A revised Notice may apply to health information we already maintain as well as information we receive in the future.

​

The current Notice will be available on our website and upon request.

​

10. Privacy Contact and Complaints

Privacy Contact
Metabolic Health MD, PLLC
945 McKinney St #16579
Houston, TX 77002

Phone: (713) 367-1863
Email: contact@metabolichealthmd.com

​

You may also submit a complaint to the:

​

U.S. Department of Health and Human Services
Office for Civil Rights

​

Metabolic Health MD will not retaliate against you for filing a privacy complaint.

​