Notice of Privacy Practices

This Notice of Privacy Practices (“Notice”) describes how Focal Optical (“Focal,” “we,” “us,” or “our”) may use and disclose your protected health information ("PHI") and how you can access this information. We are committed to maintaining the privacy of your PHI and complying with applicable laws, including the Health Insurance Portability and Accountability Act of 1996 ("HIPAA").

Please review this Notice carefully.

Our Legal Duties

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you in case of a breach of unsecured PHI

What is PHI?

PHI is information that identifies you and relates to your past, present, or future physical or mental health or condition, the provision of healthcare to you, or payment for the provision of healthcare. This includes your name, contact details, health information, and prescription details.

How We Use and Disclose Your PHI

We are permitted to use and disclose your PHI without your written authorization in the following ways:

Treatment

We may use your PHI to provide you with healthcare services, including filling prescriptions for corrective lenses and providing consultations.

Payment

We may use your PHI to obtain payment for healthcare services we provide, including billing your insurance or a third party.

Healthcare Operations

We may use your PHI to operate our business, including quality assessment, training, and customer service.

Other Uses and Disclosures Without Authorization

We may also use or disclose your PHI without your consent or authorization for:

• Public health activities (e.g., reporting disease outbreaks)
• Health oversight activities (e.g., audits and inspections)
• Legal proceedings (e.g., responding to subpoenas)
• Law enforcement purposes
• Organ and tissue donation requests
• Research purposes (subject to approval and privacy safeguards)
• To prevent or reduce a serious threat to health or safety
• As required by law (e.g., for workers’ compensation claims)

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before:

• Using your PHI for marketing purposes
• Disclosing your PHI in a way not covered by this Notice
• Selling your PHI

You may revoke your authorization at any time by contacting us in writing.

Your Rights Regarding Your PHI

You have the following rights:

• Right to Access: You can request access to your PHI or request a copy.
• Right to Amend: You can request corrections to your PHI if you believe it is inaccurate or incomplete.
• Right to an Accounting of Disclosures: You can request a list of certain disclosures of your PHI.
• Right to Request Restrictions: You can ask us to limit the use or disclosure of your PHI.
• Right to Request Confidential Communications: You can request that we contact you in a specific way (e.g., only via mail).
• Right to a Paper Copy of This Notice: You can request a paper copy of this Notice at any time.
• Right to File a Complaint: You can file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at hello@focaloptical.com.

Our Responsibilities

We are required by law to maintain the privacy and security of your PHI.

We will let you know promptly if a breach occurs that may compromise the privacy or security of your PHI.

We must follow the duties and privacy practices described in this Notice.

We will not use or share your PHI other than as described here unless you tell us we can in writing.

Changes to This Notice

We reserve the right to change this Notice and make the new Notice effective for all PHI we maintain. Any changes will be posted on our website and available upon request.

Contact Us

If you have any questions or complaints regarding this Notice or our privacy practices, please contact: