Notice of Privacy Practices

Farzana Badrun, MD, PC, d/b/a New Essence Health
3143 E Shadowlawn Ave NE, Atlanta, GA 30305
Effective date: October 29, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

OUR DUTIES AND CONTACT INFORMATION

We protect the privacy and security of your protected health information, provide this notice of our legal duties and privacy practices, follow the notice currently in effect, and notify affected individuals of breaches of unsecured protected health information as required by law. This notice applies to information maintained by the Practice, including electronic and paper records.

For questions, privacy requests, or complaints, contact Dr. Farzana Badrun at (770) 637- 1544, info@newessencehealth.com, or the address above. Hint Health EMR Portal can be used as a secure channel for records requests and sensitive information. We will explain any required written request and help you exercise your rights.

YOUR RIGHTS

Access to records. You may request to inspect or receive an electronic or paper copy of your medical record and other health information in our designated record set, subject to lawful exceptions. We ordinarily act within 30 days; if a lawful extension is needed, we will explain the reason and expected completion date in writing. We may charge only a lawful, reasonable, cost-based fee. If access is denied, we will explain any applicable review rights. Contact the privacy office to make a request.

Amendments. You may request correction of information you believe is inaccurate or incomplete and explain why. We may deny a request in circumstances permitted by law and will give a written explanation and information about your right to submit a statement © 2026 Farzana Badrun, MD, PC, d/b/a New Essence Health. All rights reserved. of disagreement. Original information may remain part of the record with the correction or disagreement attached.

Confidential communications. You may request that we contact you in a particular way or at a different address. We will accommodate reasonable requests. Tell the privacy office your requested alternative contact arrangement.

Restrictions. You may request limits on use or disclosure for treatment, payment, or healthcare operations. We generally are not required to agree unless the law requires it. If you pay in full out of pocket for an item or service and ask us not to disclose related information to your health plan for payment or healthcare operations, we will honor that request unless disclosure is required by law. That restriction does not automatically bind an outside provider; request it from that provider separately.

Accounting of disclosures. You may request an accounting of certain disclosures during the preceding six years. The accounting generally excludes treatment, payment, healthcare operations, disclosures to you, disclosures you authorized, and other legally excluded disclosures. One accounting in a 12-month period is free; we may charge a lawful fee for additional accountings after notifying you and permitting withdrawal or modification of the request.

Copy of this notice. You may request a paper copy at any time, even if you agreed to electronic delivery.

Personal representatives. A person with legally sufficient authority may exercise your rights on your behalf. We verify the authority and apply any lawful limitations.

Complaints. You may complain to our privacy office or the U.S. Department of Health and Human Services, Office for Civil Rights. You may use the HHS OCR complaint process or send a written complaint to HHS at 200 Independence Avenue, SW, Washington, DC 20201. We will not retaliate against you for filing a complaint.

ROUTINE USES AND DISCLOSURES

We may use or disclose information as permitted by law for the following purposes, subject to any more protective law:

Treatment. We use information to evaluate and treat you and coordinate care with other professionals. For example, we may share relevant information with a treating specialist, pharmacy, or laboratory.

Payment. We use information to collect your membership and additional-service fees and administer payments. For example, authorized billing support may process an invoice or payment. The Practice does not bill health insurance or governmental payors for © 2026 Farzana Badrun, MD, PC, d/b/a New Essence Health. All rights reserved. membership services. Any disclosures relevant to outside-provider payment activities remain subject to applicable law and your rights.

Healthcare operations. We use information to operate the Practice, improve care, train authorized staff, evaluate quality, and meet compliance obligations. For example, we may review records to evaluate the quality of care or use an authorized records-management service.

Business associates. Service providers performing functions for us may receive information subject to required business associate agreements and safeguards. The Practice will perform due diligence and execute a BAA before an AI scribe vendor handles protected health information. AI-assisted documentation requires the separate consent described in our scribe form. Any virtual assistant or automated workflow will be evaluated before access is authorized.

Communications. We may contact you about appointments, care, billing, treatment alternatives, or health-related benefits and services as permitted by law. Tell us your communication preferences and confidential-communication needs. Ordinary email or text may not be encrypted. The communication form explains your choices; this notice does not itself obtain permission for marketing texts or waive privacy protections.

Persons involved in care. We may share relevant information with people involved in your care or payment if you agree, do not object when given an opportunity, or other lawful circumstances permit it. If you cannot express a preference, we may use professional judgment to share information in your best interests as permitted by law. You may identify permitted contacts and limits on the separate communication form

OTHER USES AND DISCLOSURES PERMITTED OR REQUIRED BY LAW

We may use or disclose information, with required conditions and safeguards, for:
  • Public health and safety: disease reporting, product recalls, adverse reactions, and
    prevention or reduction of serious threats to health or safety.
  •  Abuse, neglect, or domestic violence: reports to authorized agencies when the law
    permits or requires them.
  •  Health oversight: authorized audits, inspections, licensing, or investigations.
  • Legal obligations: disclosures required by law and compliance reviews by HHS.
  • Judicial and administrative proceedings: responses to court orders, subpoenas, or
    other lawful processes only when applicable requirements are satisfied. Special
    protections below may prohibit or limit disclosure.
  •  Law enforcement: disclosures allowed by law in specified circumstances, not
    unrestricted access to your record.
    © 2026 Farzana Badrun, MD, PC, d/b/a New Essence Health. All rights reserved.
  •  Coroners, medical examiners, and funeral directors: information necessary for
    authorized duties.
  • Organ and tissue donation: permitted disclosures to organizations facilitating
    donation or transplantation.
  • Workers’ compensation: disclosures authorized by applicable workers’ compensation
    law.
  •  Special governmental functions: authorized military, national security, protectiveservice, or correctional functions where applicable.
  • Research: only under required authorization or another legally permitted process with
    applicable safeguards. [Confirm whether the Practice conducts research or remove
    operational language that implies an active program.]
  • Disaster relief: permitted information to assist with notification of persons involved in
    care.
No item grants authority broader than applicable law permits. We apply more protective legal requirements where they govern particular information.

SPECIALLY PROTECTED INFORMATION

Certain information, including psychotherapy notes, substance use disorder treatment records, HIV-related information, and other information protected by Georgia law, may require additional permission or restrictions beyond ordinary HIPAA rules.

Substance use disorder records subject to 42 CFR Part 2. When we receive or maintain records protected by Part 2, their use and disclosure are subject to that law as applicable. Those records, or testimony describing their contents, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without the required written consent or a qualifying court order after notice and opportunity to be heard. A qualifying order authorizing disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure. For example, an ordinary request for medical records in a proceeding against you does not by itself authorize disclosure of protected Part 2 records. [Confirm whether the Practice is itself a Part 2 program; if so, prepare any additional required patient notice and consent workflow.]

Information disclosed under HIPAA may be redisclosed by a recipient and no longer protected by HIPAA; other laws, including Part 2 where applicable, may still restrict its use and disclosure.

USES REQUIRING WRITTEN AUTHORIZATION

Except for limited exceptions permitted by law, we require your written authorization for use or disclosure of separately maintained psychotherapy notes, marketing involving your protected health information, and sale of protected health information. Where required, an authorization will disclose any relevant remuneration. Other uses or disclosures not © 2026 Farzana Badrun, MD, PC, d/b/a New Essence Health. All rights reserved. described in this notice will be made only with your written authorization unless permitted or required by law.
You may revoke an authorization in writing by contacting the privacy office. Revocation does not undo actions already taken in reliance on the authorization. Public photo or recording uses require a separate, voluntary authorization; membership is not conditioned on agreeing to them
Fundraising: [Confirm whether the Practice conducts fundraising. If yes, insert: We may contact you for fundraising as permitted by law, and you may opt out by contacting the privacy office. For fundraising using protected Part 2 records, we will first provide a clear and conspicuous opportunity to elect not to receive those communications. If no, state that the Practice does not use your information for fundraising.]

Changes to This Notice

We reserve the right to change this notice and make lawful new practices effective for information already maintained and information received later. We will revise the notice for material changes, make it available in the office and on our website, and provide a copy on request. The effective date will identify the current version. A change does not eliminate rights required by law.