HIPAA Notice of Privacy Practices

1. Our Commitment to Your Privacy

FarmUS Health Services LLC is committed to maintaining the privacy of your Protected Health Information (PHI) as required by HIPAA. We are required by law to maintain the privacy of your PHI, provide you with this Notice, abide by its terms, and notify you in the event of a breach of your unsecured PHI.

2. How We May Use and Disclose Your PHI

Treatment

We may use and disclose your PHI to provide, coordinate, or manage forensic evaluation services, including sharing information with other providers when authorized in writing.

Payment

We may use and disclose your PHI to process payments for services rendered.

Healthcare Operations

We may use your PHI for quality assessment, legal compliance, training, and business management necessary to operate our practice.

With Your Written Authorization

Any use or disclosure not described in this Notice requires your prior written authorization, which you may revoke in writing at any time.

As Required by Law

Including public health reporting, abuse and neglect reporting, court orders, law enforcement as permitted by HIPAA, and to avert serious threats to health or safety.

3. No Legal Advice or VA Representation

FarmUS Health Services does not provide legal advice and does not represent veterans before the Department of Veterans Affairs or any other agency. Nothing in our services or communications constitutes legal counsel or representation.

4. No Guarantee of VA Outcomes

No report, opinion, or communication from FarmUS constitutes a guarantee of any VA claim approval, disability rating, or benefit. All opinions are independent medical opinions based on available records and clinical interview at the time of evaluation.

5. HIPAA-Compliant Business Associates

PHI is shared only with vendors who have executed signed Business Associate Agreements (BAAs):

• Zoho Forms — Secure intake form collection
• Zoho CRM — Case management and records
• Zoho Mail — Encrypted email communications
• Zoho Books — Invoicing and payment processing
• Doxy.me — HIPAA-compliant telehealth video platform
• Twilio — Staff alerts (no PHI transmitted via SMS)

6. Your HIPAA Rights

• Right to Access: Inspect and receive a copy of your PHI within 30 days of written request
• Right to Amend: Request corrections to inaccurate or incomplete PHI
• Right to Accounting: List of PHI disclosures made in the prior six years (excluding TPO)
• Right to Request Restrictions: We are not required to agree to all restrictions
• Right to Confidential Communications: Request alternative communication methods or locations
• Right to Paper Copy: Available upon request at any time

7. Records Retention

PHI and evaluation records are retained for a minimum of seven (7) years from the date of service, or as required by applicable law. Records are securely destroyed upon expiration of the retention period.

8. How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• FarmUS Health Services LLC — support@farmushealthservices.com
• U.S. Dept. of Health & Human Services, Office for Civil Rights — hhs.gov/ocr · 1-800-368-1019

You will not be retaliated against for filing a complaint.

9. Changes to This Notice

We reserve the right to update this Notice. Changes will be posted with a revised effective date and apply to all PHI we maintain.

10. Contact

Email: support@farmushealthservices.com
1321 Upland Drive PMB 4555, Houston, TX 77043