HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

Crossing, LLC (“Crossing,” “we,” “us,” or “our”) is committed to maintaining the privacy and security of your protected health information (“PHI”) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state laws.

Our Responsibilities

Crossing is required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of Privacy Practices
• Follow the terms of the notice currently in effect
• Notify you if a breach of your unsecured PHI occurs

Treatment

We may use and share your PHI with licensed providers, pharmacies, laboratories, and other healthcare professionals involved in your care. For example, your provider may share your health history with a partner pharmacy to fulfill a prescription.

Payment

We may use and share your PHI for billing and payment purposes, including processing insurance claims or verifying coverage. For example, we may share information with a payment processor to collect fees for services rendered.

Healthcare Operations

We may use and share your PHI to support and improve our business operations, including quality assessments, staff training, compliance reviews, and service improvement activities.

Other Permitted Disclosures

We may also use or disclose your PHI in the following circumstances:

• With your written authorization: for purposes not covered by this notice, such as marketing or sale of PHI
• As required by law: to comply with federal, state, or local laws
• Public health and safety: to report communicable diseases, injuries, or public health threats
• Law enforcement and legal proceedings: in response to court orders, subpoenas, or official law enforcement requests
• Health oversight activities: with government agencies for audits, inspections, and investigations
• Business associates: with contracted vendors (such as hosting providers or billing services) who agree to maintain the privacy and security of your information

We do not sell PHI.

Your Rights Regarding Your Health Information

You have the right to inspect and obtain a copy of your records; request amendments to information you believe is incorrect or incomplete; request restrictions on how we use or disclose your PHI; request confidential communications (e.g., contact only by email); request an accounting of certain disclosures made in the past six years; and receive a paper copy of this notice at any time.

How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with Crossing or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Crossing, LLC

450 S 400 E, Suite 706, Bountiful, UT 84010

Email: care@joincrossing.com

U.S. Department of Health & Human Services, Office for Civil Rights. Phone: 1-877-696-6775. Web: www.hhs.gov/ocr/privacy

Data Protection

Crossing employs industry-standard administrative, physical, and technical safeguards to protect the privacy and security of your PHI from unauthorized access, use, or disclosure. While we strive to protect your information, no method of transmission or storage is completely secure.

Changes to This Notice

Crossing reserves the right to change the terms of this Notice at any time. We will post the updated notice on our website and make it available upon request. Changes will apply to all PHI we maintain.

Contact Us

Email: care@joincrossing.com

Address: 450 S 400 E, Suite 706, Bountiful, UT 84010