This notice describes how medical and protected health information (PHI) about you or your child may be used and disclosed and how you can get access to this information. Please review it carefully.

Chroma Early Start is required by law to maintain the privacy of PHI, provide this notice of legal duties and privacy practices, and follow the terms of the notice currently in effect.

We may use and disclose PHI without your written authorization for treatment, payment, and health care operations, and in other situations permitted or required by law.

• Treatment: to coordinate clinical care and related services
• Payment: to bill and receive payment from health plans or other payors
• Operations: to improve quality, staff training, compliance, and audits

For certain uses and disclosures, including most marketing purposes and disclosures not otherwise permitted by HIPAA, we will request your written authorization. You may revoke authorization at any time in writing, subject to legal limits.

You have rights regarding PHI, including the right to request access, amendments, an accounting of disclosures, and restrictions, and to request confidential communications.

Some requests may be denied as allowed by law, but you will receive a written response.

If a breach of unsecured PHI occurs, we will provide notice in accordance with applicable law and regulatory requirements.

We reserve the right to change this notice and make revised terms effective for all PHI we maintain. The current notice will be posted on this page with an updated date.

If you have questions or wish to file a privacy complaint, contact us at privacy@chromaearlystart.com. You may also file a complaint with the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.