Notice of Privacy Practices

Hayy Medical PLLC
Effective Date: 12/10/2023
Last Updated: 4/15/2025

1. Purpose of This Notice

This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully.

Hayy Medical PLLC (“the Practice”) is required by law to maintain the privacy of your protected health information (“PHI”) and to provide you with this notice of our legal duties and privacy practices with respect to PHI.

2. Our Responsibilities

We are legally required to:

Maintain the confidentiality of your PHI
Provide you with this Notice describing our legal duties and privacy practices
Notify you if a breach occurs that may have compromised your PHI
Abide by the terms of this Notice currently in effect

3. How We May Use and Disclose Your Health Information

We may use or disclose your PHI for the following purposes without your written authorization:

a. Treatment

To provide you with medical care, coordination, or management of your healthcare and related services.

b. Payment

To bill and receive payment for services provided to you (if applicable).

c. Healthcare Operations

For administrative, quality improvement, licensing, audits, training, and general business management activities.

d. As Required by Law

When required to do so by federal, state, or local law, including public health reporting, judicial orders, or law enforcement inquiries.

e. To Avoid a Serious Threat to Health or Safety

To prevent serious harm to you or another person when required by law.

f. To Business Associates

We may disclose your information to third-party service providers (business associates) who perform functions on our behalf (e.g., lab companies, EMR providers). All business associates must agree to safeguard your PHI.

4. Other Uses Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for any purpose not listed in this notice, including:

Marketing purposes
Sale of your PHI
Most disclosures of psychotherapy notes (if applicable)

You may revoke your authorization at any time in writing.

5. Your Rights Regarding Your PHI

You have the following rights regarding the PHI we maintain about you:

a. Right to Access

You have the right to inspect and receive a copy of your medical record and other health information.

b. Right to Amend

You may request that we amend your records if you believe they are incorrect or incomplete.

c. Right to an Accounting of Disclosures

You may request a list of disclosures we have made of your PHI (excluding treatment, payment, and healthcare operations).

d. Right to Request Restrictions

You may request restrictions on how your PHI is used or shared. We are not required to agree to all restrictions.

e. Right to Request Confidential Communications

You may request that we contact you in a specific way or at a specific location (e.g., only by email or only at work).

f. Right to a Paper or Electronic Copy

You can request a paper or electronic copy of this notice at any time.

6. How to Exercise Your Rights

To request access, amendments, or any of the rights above, please contact us in writing at:

Hayy Medical PLLC
admin@malekmd.com

7. Changes to This Notice

We reserve the right to revise this Notice at any time. Any changes will apply to all existing and future PHI, and the revised notice will be posted on our website.

8. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or directly with the U.S. Department of Health and Human Services.

To file a complaint with us, contact:
admin@malekmd.com

Filing a complaint will not affect your care or legal rights in any way.

9. Contact Information

If you have questions about this Notice or your rights under HIPAA, contact: