Notice of Privacy Practices (NPP) Effective Date: February, 2026

Our commitment: The Qi Spot Health Inc (“we,” “our,” or “us”) is committed to protecting the privacy and security of your health information. This notice describes how we may use and disclose your protected health information (PHI) to treat you, obtain payment for services, and operate our practice, as well as your rights regarding your PHI. It also explains how you can file a privacy complaint.
What is PHI? Protected Health Information (PHI) is any information about your health condition, treatment, or payment for services that identifies you or could reasonably identify you, and that is created or received by us in any form (paper, electronic, or other).
How We May Use and Disclose PHI: We may use or disclose PHI without your written authorization for:

A. Treatment

To provide acupuncture treatment and related services.
To coordinate care with other health care providers (e.g., referrals to or from other clinicians) when appropriate.

B. Payment

To obtain payment for services (e.g., billing insurers, patient statements, determining benefits, verifying coverage).
To determine eligibility and benefits and to obtain prior authorization when required.

C. Health Care Operations

To improve the quality and efficiency of our practice (e.g., scheduling, performance improvement, training staff).
To contact you about appointments, treatment alternatives, or other health-related services that may be of interest to you.

D. Business Associates and Referrals

We may disclose PHI to business associates (e.g., insurers, billing services, IT/software vendors, and clearinghouses) who perform services on our behalf and who are bound by contractual obligations to protect privacy.
We may refer you to other health care providers for treatment or receive referrals from other providers to coordinate your care. In such cases, PHI may be shared with the referred provider(s).

E. Required by Law

We may disclose PHI when required by law (e.g., court orders, subpoenas, or mandated disclosures).

F. Public Health and Safety

We may disclose PHI as permitted by law for public health activities, safety to prevent harm, or other allowed purposes.

G. Other Limited Uses and Disclosures

For any other uses and disclosures not described above, we will seek your written authorization when required by law.

Use or disclosure of psychotherapy notes (if applicable) requires your explicit authorization.
Other uses and disclosures not described in this notice require your written authorization, unless permitted or required by law.

Your Rights Regarding PHI: You have the following rights, with certain limits under federal and Oregon law:

A. Right to Inspect and Copy

You may request access to your PHI maintained by us, with some exceptions. We may charge a reasonable fee for copies and postage.

B. Right to Amend

You may request to correct PHI you believe is inaccurate or incomplete. We may deny under certain circumstances.

C. Right to an Accounting of Disclosures

You may request a list of disclosures of your PHI outside of treatment, payment, or health care operations, or disclosures to you or your personal representatives, with certain exceptions.

D. Right to Request Restrictions

You may request limits on uses or disclosures for treatment, payment, or health care operations. We are not required to agree to all restrictions, except as required by law or when you pay out of pocket in full.

E. Right to Confidential Communications

You may request that we communicate PHI in a specific manner or to a designated location (e.g., by mail only, or to a specific phone number).

F. Right to a Paper Copy of This Notice

To exercise any right, contact: The Qi Spot Health Inc — Privacy Officer (or Designee) Phone: [Phone] Email: [Email] Address: [Clinic Address]
We may require your requests to be in writing. We may charge reasonable fees as allowed by law.

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR).
- OCR Complaint Hotline: 1-800-368-1019
- OCR Website: https://www.hhs.gov/ocr
We will not retaliate against you for filing a complaint.

This Notice is effective as of the date above. We may update our privacy practices. When material changes occur, we will provide an updated notice as required by law.

Oregon practices align with HIPAA requirements for privacy and security of PHI. We will protect your information with reasonable safeguards and disclose PHI only as permitted by law.
If you participate in state or federal programs (e.g., workers’ compensation, state health programs), we will comply with any related obligations regarding PHI disclosures.

We implement administrative, physical, and technical safeguards to protect PHI, including secure storage, access controls, encryption for electronic records where appropriate, and staff training on privacy and confidentiality.

By signing below, you acknowledge receiving a copy of our Notice of Privacy Practices and understand your rights and our privacy practices.