Notice of Privacy Practices

Download Printable PDF

It is the policy of Lynn Urgent Care and Woburn Urgent Care (collectively, "the Practice") to provide you with a privacy notice that explains how your healthcare information is being used and disclosed. The Practice is required by law to maintain the privacy of your protected health information and provide a notice of its legal duties and privacy practices with respect to protected health information.

This Notice of Privacy Practices describes how the Practice may use and disclose your protected health information to carry out treatment, payment or health care operations and for other purposes that are permitted or required by state or federal law. It also describes your rights to access and control your protected health information. "Protected health information" is information related to your past, present or future physical or mental health or condition and related health care services, including demographics that may identify you.

The Practice is required to abide by the terms of this Notice of Privacy Practices currently in effect. We may change the terms of our notice, at any time. The new notice will be effective for all protected health information that we maintain at that time and will be posted at our office locations. Upon your request, we will provide you with a revised Notice of Privacy Practices.

1. Uses and Disclosures of Protected Health Information

For Treatment

We may use protected health information about you to provide you with medical treatment or services, including via telehealth. We may disclose protected health information about you to doctors, nurses, technicians, or other healthcare personnel who are involved in your treatment. We may also disclose protected health information about you to people outside the Practice who may be involved with your overall health care.

For Payment

We may use and disclose protected health information about you so that the treatment and services you receive at our facility may be billed to and payment may be collected from you, an insurance company or a third party.

For Health Care Operations

We may use and disclose protected health information about you for health care operations such as quality assessment, staff evaluation, accreditation, and business planning.

Other Permitted Uses and Disclosures Without Your Authorization

We may use or disclose your protected health information without your consent or authorization in the following situations: as required by law; in emergencies; for public health activities; reporting of communicable diseases; for health oversight activities; for abuse or neglect reporting; FDA-related reports; legal proceedings; law enforcement; criminal activity; to coroners, funeral directors, and for organ donation; for research with proper review; military and national security activities; workers' compensation; inmate care; with the Massachusetts Immunization Information System; with business associates; and to persons authorized to make decisions on your behalf.

2. Other Uses of Protected Health Information

We will not use or disclose your health information for any purpose other than those identified in the previous sections without your specific, written Authorization. Your health information will not be used and disclosed for marketing purposes or sales without your Authorization. If you give us Authorization, you may revoke that Authorization, in writing, at any time.

3. Your Rights

You have the following rights regarding protected health information we maintain about you:

Right to Inspect and Copy

You have the right to inspect and copy your protected health information. To inspect and copy your protected health information, you must submit your request in writing. We may charge a reasonable, cost-based fee.

Right to Amend

If you feel that protected health information about you is incorrect or incomplete, you may ask us to amend the information. Requests must be in writing and include a reason supporting your request.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we made of protected health information about you (excluding disclosures for treatment, payment, healthcare operations, and those you authorized). The accounting may not be longer than six (6) years and may not include dates before June 1, 2026.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree, except where you pay out-of-pocket in full and ask us not to share that with your insurance.

Right to Request Confidential Communications

You have the right to request communications about medical matters in a certain way or at a certain location (e.g., contact only by phone, mail to a different address).

Right to be Notified of a Breach

You have the right to be notified if a breach of your unsecured PHI occurs.

Right to a Paper Copy of this Notice

You have the right to a paper copy of this notice at any time. Call us during business hours to request one.

4. Telehealth-Specific Privacy Practices

For telehealth visits, additional privacy considerations apply:

• All telehealth communications occur through our HIPAA-compliant athenahealth platform, with a Business Associate Agreement (BAA) in place
• Video sessions are encrypted end-to-end during transmission
• Sessions are not routinely recorded; if recording is needed, your explicit consent is required first
• Massachusetts is a two-party consent state — neither patients nor providers may record without the other's written permission
• You are responsible for ensuring you are in a private location during your visit

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Practice or with the U.S. Department of Health and Human Services, Office for Civil Rights:

• Address: 200 Independence Avenue, S.W., Washington, D.C. 20201
• Phone: 1-877-696-6775
• Website: www.hhs.gov/hipaa/filing-a-complaint

You will not be penalized for filing a complaint.

This notice was published and becomes effective on June 1, 2026.