Notice of Privacy Practices

Missouri Virtual Care LLC

Effective date: 10.28.26

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your information and this notice

Missouri Virtual Care LLC provides virtual healthcare in Missouri. This notice explains how we use and share protected health information, your rights concerning that information, and our privacy responsibilities. Protected health information is identifiable information about your health, care, or payment for care that is protected by applicable law.

This notice applies to Missouri Virtual Care LLC and its workforce. Independent healthcare providers and other organizations may have their own privacy notices. Our website Privacy Policy separately explains information collected through the public website and related business interactions. That policy does not replace this notice or reduce your health-information rights.

Questions, requests, and privacy complaints

You may contact our Privacy Official to ask about this notice, exercise your rights, request a copy, or make a privacy complaint:

Pavel Svintozelsky — Privacy Official / HIPAA Privacy Officer
Missouri Virtual Care LLC
2305 Vancouver Cir
Columbia, MO 65203-8492
Phone/Text: 573-279-3819
Email: [email protected]
Secure patient communication: https://spruce.care/missourivirtualcarellc

Spruce is our preferred channel for sensitive medical information. Ordinary email and text messaging can carry additional privacy risks. You may call us to discuss a safe way to submit a request. We may reasonably verify your identity or authority before releasing records. Do not use routine messages for emergencies; call 911 or seek emergency care.

Your rights

See or receive a copy of your records

You may request to inspect or receive an electronic or paper copy of your medical, billing, and other records covered by the right of access. Send a written request to our Privacy Official and identify the information and format you want. If we can readily produce the requested format, we will use it; otherwise, we will work with you on an available readable format.

We will act on your request within 30 days, or sooner when applicable law requires. If a permitted extension is necessary, we will explain the reason and completion date in writing within that initial period. HIPAA permits only one extension of up to 30 additional days. We may charge a reasonable, cost-based copying fee where allowed by law and will explain any charge in advance. We do not charge for inspecting your records or deny access because you owe for treatment.

Limited legal exceptions can apply. If we deny all or part of a request, we will explain the reason in writing, how to complain, and any right to have the denial reviewed. A summary will replace the requested records only if you agree in advance.

Ask for a correction

You may ask us to amend information you believe is incorrect or incomplete. Contact our Privacy Official with the information at issue and the correction you request. We will generally act within 60 days. If a legally permitted extension is necessary, we will explain it in writing within that period; only one extension of up to 30 additional days is permitted. If we deny your request, we will explain why and how to submit a statement of disagreement.

Request confidential communications

You may ask us to contact you in a particular way or at a different location, such as a different telephone number or mailing address. Tell our Privacy Official how you would like to be contacted. We will accommodate reasonable requests.

You may ask us to restrict certain uses or disclosures for treatment, payment, or healthcare operations, or sharing with people involved in your care. We are generally not required to agree. If we agree, we will honor the restriction except as permitted by law, including certain emergency-treatment situations.

If you or someone other than your health plan pays for a specific healthcare item or service in full, you may ask us not to disclose information solely about that item or service to your health plan for payment or healthcare operations. We must agree unless the disclosure is required by law. Contact our Privacy Official to arrange the restriction.

Receive an accounting of certain disclosures

You may request a list of certain disclosures made during the six years before your request, or a shorter period you choose. The list generally excludes disclosures for treatment, payment, healthcare operations, disclosures made to you or with your authorization, and other legally excluded disclosures. Contact our Privacy Official to request it. The first accounting in a 12-month period is free. We may charge a reasonable, cost-based fee for additional requests in that period, after telling you the charge and allowing you to withdraw or narrow your request.

Receive a paper copy of this notice

You may request a paper copy at any time, even if you agreed to receive it electronically. Contact our Privacy Official and we will provide a copy promptly.

Have an authorized person act for you

A person legally authorized to act as your personal representative may exercise rights concerning your health information to the extent of that authority. We will verify that authority and follow applicable legal exceptions, including protections involving abuse, neglect, or endangerment.

Make a complaint without retaliation

You may make a complaint to our Privacy Official using the contact information above. Describe your concern and how we can contact you. You may also complain directly to the U.S. Department of Health and Human Services, Office for Civil Rights, without first complaining to us:

Online: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
Telephone: 1-877-696-6775
Mail: U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201

We will not retaliate against you for making a complaint.

The examples below explain common purposes. We share information only when applicable law allows or requires it. Additional protections described later in this notice can limit these uses and disclosures.

Treatment

We use information to evaluate your health, provide care, prescribe medication when appropriate, and coordinate services. For example, we may share relevant information with a pharmacy filling your prescription, a laboratory performing an ordered test, or another clinician involved in your care.

Payment

We use or share information to bill for services, process payments, and manage memberships. For example, relevant billing information may be shared with a service provider helping process your membership payment. This notice does not change your fees, membership terms, or insurance arrangements.

Healthcare operations

We use or share information to manage the practice, review the quality of care, maintain records, address complaints, conduct audits, and meet professional responsibilities. For example, we may review a medical record to assess the quality of follow-up care. Service providers working on our behalf receive information only as allowed by law and are subject to required privacy protections, including business-associate agreements when applicable.

We may contact you about appointments, your care, treatment alternatives, or health-related services as allowed by law. Your confidential-communication requests and other applicable protections still apply.

People involved in your care and disaster relief

We may share information relevant to a family member's, friend's, or other person's involvement in your care or payment if you agree, have an opportunity to object and do not object, or the circumstances reasonably indicate that you agree. If you cannot express a preference, we may share relevant information when professional judgment indicates it is in your best interests. Similar rules may allow sharing with disaster-relief organizations to help notify someone about your condition or location. More protective laws may require written consent.

Other purposes permitted or required by law

We may use or disclose information for the purposes below only when the legal conditions for that purpose are met:

Public health and safety: reporting certain diseases, adverse drug reactions, product problems, or suspected abuse, neglect, or domestic violence; and helping prevent or lessen a serious and imminent threat to health or safety.
Health oversight: activities such as legally authorized audits, inspections, licensing, or investigations.
Research: with your authorization or when a specific legal exception and its safeguards apply, such as an approved waiver. This does not mean that you are enrolled in research.
Legal requirements and proceedings: disclosures required by law, or responses to court orders, subpoenas, or other legal processes that satisfy applicable privacy requirements. A request alone does not automatically permit disclosure.
Law enforcement and special government functions: disclosures permitted by law for qualifying law-enforcement purposes, military activities, national security, protective services, or correctional and custodial functions.
Workers' compensation: disclosures authorized by and necessary to comply with workers' compensation or similar laws.
Organ or tissue donation and death-related duties: disclosures permitted by law to organ-procurement organizations, coroners, medical examiners, or funeral directors.
Privacy enforcement: disclosures to the U.S. Department of Health and Human Services when required to determine compliance with health-information privacy requirements.

Information with additional protections

Substance use disorder treatment records

Some substance use disorder treatment records are protected by 42 CFR Part 2. When we receive or maintain such records, we follow the additional consent, use, disclosure, and redisclosure restrictions that apply. The general permissions described above do not override those protections.

Records protected by Part 2, or testimony describing their contents, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written consent or a qualifying court order after notice and an opportunity to be heard have been provided to you or the record holder as required by Part 2. A court order authorizing disclosure must also be accompanied by a subpoena or other legal requirement compelling disclosure. These protections also apply to covered investigations against you.

Missouri protections and psychotherapy notes

Missouri law places additional limits on disclosure of HIV status and HIV-test information. We disclose that information only with authorization or under an applicable legal exception, such as sharing with a healthcare professional directly involved in your care who has a reasonable need to know. Additional confidentiality rules may also apply to records from certain mental-health facilities or programs. When those rules apply, we follow their limits and obtain written permission when required.

Separately maintained psychotherapy notes have special protections under HIPAA. Most uses or disclosures of those notes require your written authorization, subject to limited legal exceptions. Ordinary mental-health visit records are not automatically psychotherapy notes.

Uses that require written permission

We obtain your written authorization for most uses or disclosures of psychotherapy notes and for other uses or disclosures that require authorization under applicable law. Using or sharing protected health information for marketing generally requires your written authorization, subject to limited legal exceptions. Missouri Virtual Care does not sell patient medical information. HIPAA separately requires authorization for a sale of protected health information unless a defined exception applies; that rule does not change our no-sale commitment.

Other uses or disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing through our Privacy Official. Revocation generally applies to future uses and disclosures, not actions already taken in reliance on your authorization.

Fundraising choices

If we contact you for fundraising, you may opt out of future fundraising communications. Your decision will not affect your treatment or payment for care. If Part 2 records would be used for fundraising, we will first give you a clear and conspicuous opportunity to choose not to receive those communications. Contact our Privacy Official with any opt-out request.

Our responsibilities

We are required by law to maintain the privacy of protected health information, provide this notice of our legal duties and privacy practices, and notify affected individuals following a breach of unsecured protected health information as required by law. We maintain safeguards required by applicable law and must follow the notice currently in effect.

We will provide this notice as required for your care, including electronic care, and make it available on request. We may ask you to acknowledge receiving it. An acknowledgment records receipt; it is not permission for uses or disclosures that require a separate authorization.

Changes and copies

We may revise this notice as allowed by law and make the revised terms apply to information we already maintain as well as information we receive later. The current notice will display its effective date, be available on our website at https://movirtualcare.com, and be available by contacting our Privacy Official. You may request a paper copy at any time.