Notice of Privacy Practices

Effective: October 2, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

1. Our commitment to your privacy

Mayor Health MD, PLLC ("we," "us," or "the Practice") provides telehealth care to adults physically located in Florida or Mississippi. All care is provided personally by Mark Mayoral, MD. We are required by federal law (HIPAA) and by the laws of Florida and Mississippi to maintain the privacy of your protected health information ("PHI"), to give you this Notice of our legal duties and privacy practices, to notify you following a breach of unsecured PHI, and to follow the Notice currently in effect.

PHI means individually identifiable health information about you, including demographic information, that relates to your past, present, or future physical or mental health, the care you receive, or payment for that care.

2. How we may use and disclose your health information

We may use and disclose your PHI without your written authorization in the following ways. Not every use is listed, but every use we make falls into one of these categories.

Treatment

To provide, coordinate, or manage your care, including with a specialist we refer you to, a laboratory, or the pharmacy that fills your prescription.

Payment

We are a direct-pay practice and do not bill insurance. Payment uses are limited to processing membership and consultation fees and giving you documentation you can submit to your own health plan or HSA/FSA administrator.

Health care operations

To run the Practice and ensure quality care, such as quality review, licensing, audits, and administration.

Appointment reminders and health-related services

To remind you of appointments or tell you about treatment options, by secure portal message, secure text, email, or phone using the contact information you provided.

People involved in your care

Unless you object, to a family member or friend you identify as involved in your care or payment, limited to what is relevant to their involvement.

As required by law

Including reports of abuse, neglect, or domestic violence; judicial and administrative proceedings; law enforcement as permitted by law; reports to the Florida Department of Health, the Mississippi State Department of Health, the Mississippi State Board of Medical Licensure, and other health oversight agencies; reports to the Florida Prescription Drug Monitoring Program (E-FORCSE) and the Mississippi Prescription Monitoring Program (MPMP) as required for controlled substance prescribing; communicable disease reporting; and other public health activities.

To avert a serious threat to health or safety

When necessary to prevent a serious and imminent threat to you, another person, or the public.

Business associates

We use outside vendors for our electronic health record and e-prescribing, secure communications, scheduling, and laboratory services. Each signs a Business Associate Agreement obligating it to protect your PHI.

Other permitted uses

Organ and tissue donation; approved research; coroners, medical examiners, and funeral directors; workers' compensation; military and veterans' activities; national security; and individuals in lawful custody.

3. Uses that require your written authorization

• Most uses and disclosures of psychotherapy notes, where applicable.
• Uses and disclosures for marketing.
• Any sale of PHI.
• Any other use not described in this Notice or permitted by law.

You may revoke an authorization in writing at any time, except where we have already acted on it.

4. Specially protected information

HIV/AIDS information, mental health records, substance use disorder treatment records (42 CFR Part 2, where applicable), genetic information, and sexually transmitted infection records receive extra protection. We follow whichever federal, Florida, or Mississippi law is more protective of your privacy.

5. Your rights

• Inspect and copy your records. Requests must be in writing; we respond within 30 days and may charge a reasonable cost-based fee as permitted by law.
• Electronic copies, sent to you or to a third party you designate in writing.
• Request an amendment if you believe your record is incorrect or incomplete. We will explain any denial in writing.
• An accounting of disclosures for the prior six years. The first request in 12 months is free.
• Request restrictions on uses and disclosures. We will always honor a request not to share information with a health plan about a service you paid for in full.
• Confidential communications by a method or at a location you choose.
• A paper copy of this Notice at any time.
• Breach notification if your unsecured PHI is affected.
• File a complaint with us, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue S.W., Washington, D.C. 20201, 1-877-696-6775, hhs.gov/ocr/complaints. We will never retaliate against you for filing a complaint.

6. Telehealth and electronic communications

Video visits, secure messaging, and clinical communication take place on HIPAA-compliant platforms covered by a Business Associate Agreement. We do not use standard email, standard SMS, or consumer messaging apps for clinical communication, and we do not place advertising tracking pixels on pages where you enter health information.

7. Changes to this Notice

We may change this Notice, and changes will apply to all PHI we hold. The current Notice is always posted on this page and is available on request.

8. Contact our Privacy Officer

Privacy Officer: Mark Mayoral, MD

Mayor Health MD, PLLC
3531 SW 87th Ct, Miami, FL 33165 (telehealth visits only)
Phone: 305-482-3078
Email: mark@mayorhealthmd.com