Every Drop Counts, LLC
Effective Date: [10/24/2025]

Every Drop Counts, LLC (“we,” “our,” or “us”) values your trust and is committed to protecting the privacy and security of your health information. This Privacy Policy describes how we may use and disclose your Protected Health Information (PHI) and explains your rights regarding that information under the Health Insurance Portability and Accountability Act (HIPAA).

Under HIPAA, we are required to:

• Maintain the privacy and security of your protected health information (PHI).
   
• Provide you with this notice of our legal duties and privacy practices.
   
• Notify you in the event of a breach involving your PHI.
   
• Follow the terms of this Privacy Policy unless updated.
   

We may collect PHI that identifies you, such as:

• Name, address, date of birth, and contact details
   
• Health information relevant to phlebotomy or laboratory services
   
• Insurance or payment details (if applicable)
   
• Medical history, test results, or physician orders related to our services
   

We are permitted to use and disclose your PHI for specific purposes, including:

To provide, coordinate, or manage your care. For example, we may share your PHI with physicians, laboratories, or other healthcare providers involved in your treatment.

To obtain payment for services provided. For example, we may disclose necessary information to your insurance company for billing or reimbursement purposes.

To support the daily activities of our business, such as staff training, quality improvement, auditing, and compliance efforts.

We may disclose PHI when required to do so by federal, state, or local laws or court orders.

We may disclose information to public health authorities or to prevent or lessen a serious threat to health or safety.

We may share PHI with third-party contractors or vendors (such as laboratories or billing services) who perform services on our behalf. All business associates are required by law and contract to protect your PHI.

We will obtain your written authorization before using or disclosing your PHI for any purpose not described above. You may revoke such authorization in writing at any time.

You have the right to:

• Access and Obtain Copies: Request access to or a copy of your health records (fees may apply).
   
• Request Amendments: Ask us to correct or update your records if you believe they are inaccurate or incomplete.
   
• Request Restrictions: Ask us to limit how your PHI is used or shared (we are not required to agree in all cases).
   
• Request Confidential Communications: Ask that we contact you through a specific method or at a certain address.
   
• Receive an Accounting of Disclosures: Request a list of certain disclosures made of your PHI within the past six years.
   
• Receive a Paper Copy: Request a paper copy of this Privacy Policy at any time, even if you’ve received it electronically.
   

To exercise any of these rights, please submit a written request using the contact information below.

We use physical, technical, and administrative safeguards to protect your PHI against unauthorized access, disclosure, or misuse. All staff are trained on HIPAA compliance and confidentiality.

We may update this policy periodically. The revised version will be effective on the date posted. You will be notified of significant changes as required by law.

If you have any questions, concerns, or complaints about this Privacy Policy or how your PHI is handled, please contact us:

Every Drop Counts, LLC

edc@everydropcountsphlebotomy.org

9196821162