HIPAA Notice of Privacy Practices
Professional Healthcare Services Under:
Nurys Diaz, RN
Florida RN License # RN9404977
Effective Date: September 9, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU MAY ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Notice of Privacy Practices Introduction
This Notice of Privacy Practices describes how health information about you may be used and disclosed and how you may obtain access to that information where the Health Insurance Portability and Accountability Act (HIPAA) and applicable healthcare privacy regulations apply.
ND PROFESSIONAL SERVICES, INC is committed to protecting the confidentiality, integrity, and privacy of patient health information in accordance with applicable federal law and Florida law.
Protected Health Information (PHI)
Protected Health Information, commonly referred to as PHI, may include individually identifiable information relating to:
ND PROFESSIONAL SERVICES, INC handles all PHI in strict accordance with applicable privacy, security, and healthcare regulatory requirements.
How Health Information May Be Used & Disclosed
Where permitted by law, health information may be used or disclosed for the following core purposes:
1. Treatment
Information may be used or shared with healthcare professionals involved in a patient's care when appropriate and legally permitted. This may include:
- Physicians
- Nurses (including clinical oversight by Nurys Diaz, RN)
- Therapists (physical, occupational, speech)
- Other healthcare providers
- Appropriate care coordinators
2. Payment
Information may be used, where applicable, for healthcare payment activities such as billing, insurance verification, eligibility determination, claims coordination, and payment processing.
Note: Payment procedures vary by agreement. ND PROFESSIONAL SERVICES, INC does not represent acceptance of Medicare, Medicaid, or specific private insurance plans without separate, case-by-case verification.
3. Healthcare Operations
Information may be used for legitimate healthcare operations, including:
- Quality assessment and improvement
- Care coordination and case management
- Administrative and management activities
- Compliance and regulatory audits
- Staff training and credentialing
- Business operations and secure recordkeeping
Other Permitted or Required Uses and Disclosures
PHI may also be used or disclosed where permitted or required by federal, Florida, or local law without specific individual authorization, including:
- Public health activities and disease prevention
- Mandatory reporting required by law (e.g., vital statistics, neglect)
- Health oversight activities and state regulatory inspections
- Judicial or administrative proceedings where legally authorized by court order
- Law enforcement where legally required or permitted
- Workers' compensation programs where applicable
- Preventing serious, imminent threats to health or safety
- Other disclosures specifically required by federal or state law
Authorization for Other Uses
Uses or disclosures of PHI that are not otherwise permitted by law generally require the patient's (or personal representative's) written authorization.
An individual may revoke an authorization in writing at any time, subject to applicable legal exceptions and actions already taken in reliance on that authorization prior to receipt of written revocation.
Marketing and Health Information
PHI will not be sold or used for third-party marketing in a manner prohibited by applicable law.
Agreeing to receive home healthcare services does not automatically provide consent for marketing SMS communications. Consent for marketing SMS communications must be obtained separately whenever required by law.
Patient Privacy Rights
Subject to applicable law, individuals have specific legal rights regarding their health information:
Right to Inspect and Obtain Copies
Individuals may have the right to inspect or request paper or electronic copies of certain health records in a designated record set.
Right to Request Corrections
Individuals may request an amendment or correction to health information they believe is incorrect or incomplete.
Right to Request Restrictions
Individuals may request certain restrictions on uses or disclosures of their PHI for treatment, payment, or operations. While we carefully consider each request, not every requested restriction is legally required to be accepted unless required by law (such as certain out-of-pocket payment restrictions).
Right to Request Confidential Communications
Individuals may request communications regarding their health information through reasonable alternative methods or locations (e.g., at an alternative address or specific phone number).
Right to an Accounting of Certain Disclosures
Individuals may have the right to request information regarding certain disclosures of their PHI made outside of routine treatment, payment, and operations.
Right to a Paper Copy
Individuals may request a paper copy of this Notice of Privacy Practices at any time, even if they previously agreed to receive it electronically.
Right to Be Notified of Certain Breaches
Individuals may have the right to receive timely notification following a breach of unsecured PHI when notification is required by law.
Company Responsibilities
ND PROFESSIONAL SERVICES, INC is committed to:
- Maintaining the privacy and confidentiality of PHI as required by applicable law
- Using reasonable and appropriate administrative, technical, and physical safeguards to protect PHI
- Providing applicable privacy notices to patients
- Following the privacy practices described in the current Notice
- Notifying affected individuals of certain breaches when legally required
While rigorous safeguards are enacted, no healthcare provider can guarantee that unauthorized access or security incidents can never occur.
Business Associates
ND PROFESSIONAL SERVICES, INC may use outside service providers to assist with legitimate healthcare or business operations. Where those providers handle PHI on behalf of the company and HIPAA requires it, appropriate agreements (Business Associate Agreements) and safeguards are utilized. Not every vendor or public communications service is automatically a HIPAA Business Associate.
Website and Electronic Communications
"The general website and website chat should not be used to transmit highly sensitive medical information or Protected Health Information unless the communication technology has specifically been designated and configured for secure healthcare communications."
Examples of information visitors should avoid submitting through an unsecured general chat include:
General questions about services may be submitted through the website chat. If secure patient communication is required, the patient should follow the secure communication instructions provided directly by ND PROFESSIONAL SERVICES, INC.
SMS and HIPAA
Standard SMS/text messaging may not be appropriate for transmitting sensitive PHI unless the messaging process and technology are appropriately configured and permitted under applicable standards.
SMS marketing consent must remain separate from healthcare privacy authorizations.
HIPAA and A2P Consent Are Different
HIPAA authorization, healthcare treatment consent, website Terms acceptance, and A2P/SMS marketing consent are separate and distinct concepts:
- They are not combined into a single checkbox or bundled consent.
- Signing a HIPAA form, receiving healthcare services, providing medical information, using this website, using chat, or providing a telephone number does not automatically constitute marketing SMS consent.
- Where marketing SMS consent is collected, it is obtained separately and voluntarily.
Privacy Complaints and Questions
"Individuals who have questions about privacy practices or believe their privacy rights have been violated may contact ND PROFESSIONAL SERVICES, INC using the website chat to request information regarding the appropriate privacy contact or complaint process."
Right to File a HIPAA Complaint
Where HIPAA applies, individuals also have the right to submit a complaint to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
ND PROFESSIONAL SERVICES, INC will not retaliate against an individual for exercising applicable privacy rights or filing a good-faith privacy complaint.
Changes to this Notice
ND PROFESSIONAL SERVICES, INC reserves the right to update its Notice of Privacy Practices as permitted or required by applicable law. Any updated notice will apply to all PHI maintained and will be posted on this website with its updated effective date.
Current Effective Date: September 9, 2026