HIPAA NOTICE

NOTICE OF PRIVACY PRACTICES (HIPAA)

Dr. Bobby Nourani | Total Integrative

Effective Date: October 30, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, YOUR RIGHTS REGARDING THAT INFORMATION, AND HOW YOU CAN OBTAIN ACCESS TO IT. PLEASE REVIEW IT CAREFULLY.

Our Legal Duty

Dr. Bobby Nourani | Total Integrative (“the Practice,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your protected health information (PHI).

We are required by applicable federal and California law to maintain the privacy and security of your protected health information, provide this Notice of our privacy practices and legal duties, and follow the terms of the Notice currently in effect.

We must notify affected individuals of breaches of unsecured protected health information when required by applicable law.

We may revise this Notice as permitted by law. Changes may apply to all protected health information we maintain, including information obtained before the revision. The current Notice will be available in our office, upon request, and on our websites.

Uses and Disclosures of Health Information

We may use and disclose protected health information for treatment, payment, and healthcare operations without separate written authorization when permitted by applicable law.

For Treatment

We may use and disclose health information to provide, coordinate, or manage your healthcare.

This includes medical evaluations, diagnosis, treatment recommendations, referrals, prescriptions, laboratory and imaging services, and communication with healthcare professionals involved in your care.

We may receive and maintain referral information, consultation reports, laboratory results, imaging reports, and other medical records provided by patients or healthcare professionals.

For Payment

We may use and disclose health information for authorized billing, payment processing, insurance inquiries, claims administration, and related payment activities.

For Healthcare Operations

We may use and disclose health information to support lawful healthcare operations, including quality improvement, professional evaluation, staff training, credentialing, auditing, compliance, and practice administration.

Appointments and Healthcare Communications

We may contact you regarding appointment scheduling, reminders, follow-up care, treatment alternatives, and other appropriate healthcare communications.

Communications may occur through telephone calls, voicemail, mail, email, secure patient portals, or text messaging, as permitted by law and consistent with applicable communication preferences and confidentiality requirements.

Our Practice may use authorized electronic medical record, scheduling, and communication service providers to support these activities.

Standard email and SMS communications may present confidentiality risks. Patients may request reasonable alternative communication methods.

Our separate Privacy Policy & SMS Terms and Conditions provides additional information about optional text messaging, automated missed-call responses, message frequency, charges, and opt-out instructions.

Family Members and Others Involved in Care

We may disclose relevant health information to family members, friends, personal representatives, caregivers, or others involved in your care or payment for care when permitted by law.

When appropriate, we will provide you with an opportunity to agree or object.

If you are unable to express your preferences, we may use professional judgment to determine whether a limited disclosure is in your best interests.

Additional protections may apply to information concerning minors or other legally protected categories of healthcare.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose health information as required or permitted by applicable law, subject to any additional restrictions.

Public Health and Safety

We may disclose information for legally authorized public health activities, disease reporting, medication safety, reporting of abuse or neglect, and prevention or reduction of serious threats to health or safety.

Health Oversight

We may disclose information to authorized oversight agencies for audits, inspections, investigations, licensing, and other legally permitted activities.

Judicial and Administrative Proceedings

We may disclose information in response to lawful court orders, subpoenas, or other legal processes when applicable requirements are satisfied.

Law Enforcement

We may disclose information to law enforcement officials when required or permitted by applicable law.

Workers' Compensation

We may disclose health information as authorized by workers' compensation laws and similar programs.

Decedents

We may disclose relevant health information to coroners, medical examiners, and funeral directors as permitted by law.

Organ and Tissue Donation

We may disclose information to authorized organizations involved in organ or tissue donation and transplantation when applicable.

Research

We may use or disclose health information for research when legally required authorizations, approvals, waivers, or other safeguards are satisfied.

Special Government Functions

We may disclose information for certain legally authorized military, national security, protective, or other government activities.

Additional Protections for Sensitive Health Information

Certain categories of health information may receive additional protection under federal or California law.

These may include certain mental health records, psychotherapy notes, substance use disorder treatment records, HIV-related information, genetic information, and confidential records involving minors.

We will follow applicable laws that impose greater restrictions on the use or disclosure of such information.

Substance Use Disorder Records Protected Under 42 CFR Part 2

Our Practice is not a specialized substance use disorder treatment program. However, if we receive or maintain patient records subject to 42 CFR Part 2, additional confidentiality requirements may apply.

Such records may be used or disclosed only as permitted under applicable consent and legal requirements.

Part 2-protected records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against a patient without the patient's required written consent or the appropriate court order and legal process.

Additional protections may apply to redisclosure, certain counseling notes, and other specially protected information.

If fundraising communications involving Part 2-protected information are undertaken where legally permitted, applicable advance notice and opt-out requirements will be followed.

Uses and Disclosures Requiring Authorization

We will obtain written authorization when required by applicable law.

Examples may include certain marketing communications, sale of protected health information, most uses and disclosures of psychotherapy notes, and other disclosures not otherwise authorized by law.

We do not sell patients' protected health information.

You may revoke a written authorization at any time by notifying us in writing, except to the extent we have already relied upon it or as otherwise permitted by law.

Your Health Information Rights

Access and Inspection of Medical Records

You have the right to inspect and obtain copies of your medical records, subject to applicable legal exceptions.

Under California law, a qualifying written request to inspect records generally must be accommodated during business hours within five working days.

Copies of Medical Records

You may request paper or electronic copies of medical records that you are legally entitled to access.

Under California law, copies generally must be transmitted within 15 days after receipt of a qualifying request.

We will provide records in the requested form and format when required and reasonably producible.

Records received from other healthcare professionals, including consultation reports, laboratory results, and imaging reports maintained in your medical chart, are generally included in your access rights.

Fees and No-Charge Records

Fees for medical-record copies, when permitted, will comply with applicable federal and California requirements.

California law provides for certain records and supporting forms to be provided without charge when statutory conditions are met, including qualifying requests associated with specified public benefits, disability claims, and other legally protected purposes.

Amendment of Medical Records

You may request an amendment to health information that you believe is incorrect or incomplete.

We may deny a request under circumstances permitted by law. If denied, we will provide the applicable explanation and information about your rights.

Accounting of Disclosures

You may request an accounting of certain disclosures of protected health information during the six years preceding your request.

Certain disclosures, including those for treatment, payment, healthcare operations, and other legally excluded categories, generally are not included.

One accounting during a 12-month period will be provided without charge. Additional requests may be subject to a reasonable, cost-based fee following advance notice.

Request Restrictions

You may request restrictions on certain uses or disclosures of your health information.

We are not generally required to agree to every requested restriction.

However, when you pay in full out of pocket for a particular healthcare item or service, you may request that information about that item or service not be disclosed to your health plan for payment or healthcare operations. We must honor that request when applicable legal requirements are satisfied, unless disclosure is required by law.

Confidential Communications

You have the right to request communication through alternative means or at alternative locations.

For example, you may request that we communicate with you using a specific telephone number, mailing address, or other reasonable method.

We will accommodate reasonable requests as required by law.

Personal Representatives

An individual legally authorized to act on your behalf may exercise applicable rights concerning your health information.

We may verify the person's authority and will follow applicable restrictions, including those concerning minors and specially protected information.

Receive a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Breach Notification

You have the right to receive notification of breaches of unsecured protected health information when required by applicable law.

Questions and Complaints

You may contact our Practice regarding privacy questions, concerns, or complaints.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

We will not retaliate against you for exercising your privacy rights or filing a complaint.

Federal complaint information is available at: https://www.hhs.gov/hipaa/filing-a-complaint/

Medical Record Retention

We maintain medical records in accordance with applicable federal and California requirements.

California generally requires physicians to retain medical records for at least seven years after the patient's last date of service, beginning under the requirements effective January 1, 2024.

Longer retention periods may apply under particular laws, programs, or circumstances, including certain records involving minors and specific government healthcare programs.

Technology and Business Associates

Our Practice may use electronic medical records, patient portals, administrative systems, and authorized technology providers to support healthcare services.

When a vendor or service provider qualifies as a business associate under HIPAA, we maintain the required contractual protections governing the handling of protected health information.

We implement applicable administrative, physical, and technical safeguards for the protection of health information.

California Medical Privacy Protections

In addition to HIPAA, our Practice follows applicable California laws protecting medical information, including the Confidentiality of Medical Information Act and California patient medical-record access laws.

California law may impose stricter requirements concerning access, confidentiality, authorization, disclosure, or records involving minors and specially protected healthcare services.

Where an applicable California requirement provides greater protection than federal law, we will comply with the governing requirement.

Changes to This Notice

We reserve the right to revise this Notice as permitted by law.

Material revisions will be made available in accordance with applicable notice requirements.

The current version will be available in our office, upon request, and on our websites.

Contact Information

Dr. Bobby Nourani | Total Integrative

23101 Lake Center Drive, Suite 315
Lake Forest, CA 92630

Phone: (562) 546-2811
Fax: (810) 202-7549
Email: [email protected]

Websites:
https://drnourani.com/
https://totalintegrative.com/

Privacy Contact: Privacy Office, Dr. Bobby Nourani | Total Integrative
Office phone: (562) 546-2811
Office email: [email protected]

You may contact our office to discuss this Notice, request medical records, exercise applicable privacy rights, or submit privacy-related concerns.