Notice of Privacy Practices
1. How this notice works
This page is the structured framework the effective NPP will follow. Booking flows acknowledge the applicable NPP separately from the general Privacy Policy — the two are different documents with different legal bases, and the NPP controls for protected health information (PHI) where HIPAA applies.
2. Covered entity identification counsel required
The platform is operated by Spot Now LLC, a Delaware limited liability company. To be completed by counsel: the HIPAA designation(s) applicable to Spot Now LLC (covered entity, business associate of participating providers, hybrid entity, or organized health care arrangement) and the scope of PHI each designation covers. Participating health-care providers are themselves covered entities and maintain their own NPPs for the services they deliver.
3. Uses and disclosures of PHI
The effective notice will describe, with examples: uses and disclosures for treatment, payment, and health care operations (including appointment scheduling and reminders); uses and disclosures permitted or required by law without authorization (public health, health oversight, judicial process, safety); uses requiring your written authorization (including marketing, sale of PHI, and psychotherapy notes where applicable) and your right to revoke authorization; and special protections for sensitive categories — behavioral health, substance-use-disorder records subject to confidentiality regulations, adolescent records, and reproductive health information where state law provides additional protection.
4. Your rights regarding PHI
The rights to: inspect and obtain a copy of your PHI; request corrections; receive an accounting of certain disclosures; request restrictions on certain uses and disclosures; request confidential communications by alternative means or locations; obtain a paper copy of this notice on request; and be notified following a breach of unsecured PHI.
5. Our duties
Maintain the privacy and security of PHI; provide this notice and abide by its terms; notify affected individuals following a breach of unsecured PHI; and not use or disclose PHI other than as described here without authorization.
6. Complaints
You may complain to the privacy office (privacy@getmyspotnow.com) and to the U.S. Department of Health and Human Services, Office for Civil Rights, without retaliation.
7. Effective date and contact
Effective date, privacy-official contact details, and the revision process will be completed at finalization. Acceptance and acknowledgment records are retained with legal-document versioning.