Privacy Policy & HIPAA Notice of Privacy Practices

Effective Date: July 1, 2025

Website: www.rootedhealthga.com

Business: Rooted Health Integrative Medicine, LLC

Rooted Health GA (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website. In addition, as a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA).

1. Information We Collect

We may collect two types of information:

• Personal Information (Non-Health): Name, email, phone number, or other details you provide when contacting us through our Site, signing up for newsletters, or requesting appointments.
• Protected Health Information (PHI): Information about your health, treatment, or medical history that you provide through secure forms, patient intake, or other communications related to your care.

2. How We Use Your Information

We may use your information to:

• Provide and coordinate your healthcare services.
• Respond to appointment requests or inquiries.
• Send you health-related reminders, updates, or communications.
• Improve our website and patient experience.
• Comply with legal and regulatory obligations.

3. HIPAA Compliance & PHI Protections

As required by HIPAA, we maintain the privacy and security of your Protected Health Information (PHI). Specifically:

• We will not use or disclose your PHI without your written authorization, except for treatment, payment, or healthcare operations.
• We will provide you with access to your medical records upon request.
• You have the right to request corrections to your records.
• You may request a list of certain disclosures of your PHI.
• We implement administrative, technical, and physical safeguards to protect your PHI from unauthorized access or disclosure.

4. Sharing Your Information

We do not sell your personal information. We may share information only in the following circumstances:

• With your consent for treatment or referrals.
• With business associates (such as billing or IT services) who are contractually required to safeguard your information.
• As required by law (such as public health reporting or court orders).