Effective Date: 2.23.2026
At Korma Wellness, protecting your privacy and personal health information is our top priority. This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. We comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state privacy laws.
Please review this notice carefully.
Information We Collect
We may collect your information when you:
• Schedule an appointment
• Participate in telehealth services
• Communicate with us through HIPAA-compliant text, email, phone, or patient portals
• Receive treatment or consultation services
• Complete intake forms (digitally or in-person)
• Make payments for services
This information may include:
• Name, date of birth, address, phone number, and email
• Medical history, symptoms, diagnoses, medications, and treatment information
• Insurance and billing details (if applicable)
• Communication preferences
• Location confirmation for telehealth services
Use and Disclosure of Your Information
Your Protected Health Information (PHI) may be used and disclosed for the following purposes:
1. Treatment
To provide, coordinate, and manage your healthcare services, including telehealth visits.
2. Payment
To process payments and, if applicable, submit insurance claims.
3. Healthcare Operations
To operate our practice, improve services, ensure quality care, conduct internal audits, and maintain compliance.
4. Legal and Regulatory Compliance
To comply with federal and state laws, public health reporting requirements, law enforcement requests, or court orders when legally required.
We do not sell, rent, or share your information for marketing purposes without your written authorization.
Any other use or disclosure of your PHI not described in this notice will be made only with your written authorization.
Telehealth Privacy
Telehealth services are conducted using HIPAA-compliant technology. While we take every precaution to secure your information, you acknowledge that telehealth involves electronic communication that may carry minimal security risks.
By participating in telehealth services, you consent to electronic communication of your health information for treatment, payment, and healthcare operations.
Patients must be physically located in the state(s) where our provider is licensed at the time of the telehealth visit.
Data Protection and Security
We implement administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, alteration, or disclosure.
Security measures include:
• Secure electronic medical record systems
• Encrypted communications
• Password-protected systems
• Limited access to authorized personnel only
• Ongoing staff HIPAA compliance training
Breach Notification
In the event of a breach of unsecured protected health information, we will notify affected individuals as required by HIPAA and applicable state laws.
Your HIPAA Rights
As a patient, you have the right to:
• Access and obtain a copy of your health records
• Request corrections to your medical information
• Receive a copy of this Notice of Privacy Practices
• Request restrictions on certain uses or disclosures
• Request confidential communications (e.g., by phone, text, or email)
• Receive an accounting of disclosures of your PHI
• Revoke an authorization previously given in writing
• File a complaint if you believe your privacy rights have been violated
We will not retaliate against you for filing a complaint.
Filing a Complaint
If you believe your privacy rights have been violated, you may file a complaint with us.
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.
Changes to This Notice
Korma Wellness reserves the right to update this Privacy Policy at any time. Any changes will be posted on our website with a revised effective date.
If you have any questions about this notice or your privacy rights, please contact us.
