HIPAA Notice of Privacy Practices
Effective Date: October 18, 2026
Black Diamond Chiro + Performance
Your Information. Your Rights. Our Responsibilities.
This notice describes how medical information about you may be used and disclosed, how you can access this information, and what rights you have regarding your protected health information.
Please review it carefully.
1. Your Rights
You have certain rights regarding your protected health information.
Access Your Medical Records
You have the right to request an electronic or paper copy of your medical records and other health information we maintain about you.
We will provide access within the time required by law. Reasonable, legally permitted fees may apply.
Request Corrections
You may request corrections to health information you believe is incorrect or incomplete.
We may deny certain requests but will explain the reason in writing.
Request Confidential Communications
You may ask us to contact you in a specific way, such as by phone, email, or mail.
We will accommodate reasonable requests.
Request Restrictions
You may request limitations on how we use or disclose your health information for treatment, payment, or healthcare operations.
We are not required to agree to every request.
If you pay in full out of pocket for a healthcare service, you may request that information about that service not be disclosed to your health plan for payment or healthcare operations, unless disclosure is required by law. We must honor qualifying requests.
Request an Accounting of Disclosures
You may request a list of certain disclosures of your protected health information made during the six years before your request.
Some disclosures, including many for treatment, payment, and healthcare operations, are excluded from this accounting.
Receive a Copy of This Notice
You may request a paper or electronic copy of this Notice of Privacy Practices at any time.
Choose Someone to Act for You
If someone has legal authority to make healthcare decisions on your behalf, that person may exercise applicable privacy rights for you.
We will verify the person's authority before acting on their request.
File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with Black Diamond Chiro + Performance or with the U.S. Department of Health and Human Services Office for Civil Rights.
You will not be retaliated against for filing a complaint.
Complaints may be submitted through:
https://www.hhs.gov/ocr/complaints/
2. Your Choices
For certain health information, you may tell us your preferences about what we share.
You may tell us whether you want information shared with family members, friends, or others involved in your care or payment for your care.
If you cannot communicate your preference, we may share information when permitted by law and when we determine it is in your best interest.
We will obtain your written authorization when required for:
Most uses and disclosures of psychotherapy notes, if applicable
Marketing activities requiring authorization under HIPAA
Sale of protected health information
Other uses and disclosures not otherwise permitted by law
You may revoke a written authorization at any time by notifying us in writing. Revocation will not affect actions already taken in reliance on the authorization.
3. How We Use and Disclose Your Health Information
We may use and disclose protected health information as permitted or required by law.
Treatment
We may use and share health information to provide, coordinate, or manage your healthcare.
For example, we may share relevant information with another healthcare professional involved in your treatment.
Payment
We may use and disclose information to collect payment for services provided.
Although Black Diamond Chiro + Performance operates as a cash-based clinic, payment-related disclosures may include processing payments, preparing requested superbills, or responding to authorized billing inquiries.
Healthcare Operations
We may use health information to operate our practice, evaluate quality of care, manage administrative activities, and improve our services.
Appointment Reminders and Communications
We may use contact information to send appointment confirmations, reminders, scheduling updates, and other permitted healthcare communications.
We use Jane App for scheduling and patient management and Spruce Health for patient communications.
Other Uses Permitted or Required by Law
We may disclose information when legally permitted or required for purposes including:
Public health and safety activities
Reporting suspected abuse, neglect, or domestic violence
Health oversight activities
Compliance with applicable laws
Workers' compensation matters
Certain law enforcement purposes
Judicial or administrative proceedings when legally authorized
Responding to serious threats to health or safety
Medical examiner or coroner functions
Certain government functions
We will comply with applicable legal restrictions and required conditions before making disclosures.
4. Special Protections for Certain Health Information
Some categories of medical information receive additional protection under federal or Tennessee law.
Substance Use Disorder Records
Certain substance use disorder treatment records protected by 42 CFR Part 2 are subject to additional confidentiality requirements.
If we receive or maintain records protected by Part 2, we will use and disclose them only as permitted by applicable law and any required patient consent.
Where permitted, Part 2 records disclosed with consent for treatment, payment, or healthcare operations may be redisclosed in accordance with applicable HIPAA requirements.
Part 2 records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against a patient without the patient's specific written consent or an appropriate court order meeting applicable legal requirement.
If we use or disclose Part 2 records for fundraising, we will provide any required advance notice and opportunity to opt out.
Other Sensitive Information
We will comply with applicable federal and Tennessee laws governing specially protected medical information, including mental health information and other sensitive records when relevant.
5. Our Responsibilities
Black Diamond Chiro + Performance is committed to protecting your health information.
We are required, when HIPAA applies, to:
Maintain the privacy and security of protected health information
Follow the privacy practices described in this notice
Notify affected individuals following a breach of unsecured protected health information when required by law
Provide a copy of this notice upon request
Comply with applicable federal and state privacy requirements
We will not use or disclose your protected health information for purposes requiring authorization without obtaining that authorization.
6. Electronic Communications and Third-Party Systems
We use electronic systems to support patient care and business operations.
These include:
Jane App: Scheduling, patient intake, clinical documentation, and practice management.
Spruce Health: Phone calls, text messaging, and secure patient communication options.
Squarespace: Website hosting and general website functionality.
We implement reasonable safeguards and applicable business associate agreements when required.
Standard SMS and email communications may carry privacy risks. Patients may request available secure communication methods.
7. Changes to This Notice
We may change our privacy practices and the terms of this notice as permitted by law.
Updated terms may apply to health information we already maintain, as well as information collected in the future.
The current notice will be available at our clinic and on our website.
8. Questions or Complaints
For questions regarding this notice, requests involving your protected health information, or privacy-related complaints, contact:
Privacy Officer
Black Diamond Chiro + Performance
1007 Ashland Terr Suite 104A, Chattanooga, Tennessee 37415
Phone: 423-810-8115
Email: info@bdchiroplus.com
Website: https://bdchiroplus.com/
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
We will not retaliate against you for exercising your privacy rights.
Effective Date: October 18, 2026