Notice of Privacy Practices
We Healthy™ LLC, doing business as Ekilibra™
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective date: 9/17/2026
This Notice describes how We Healthy™ LLC, doing business as Ekilibra™ ("Ekilibra," "we," "us," or "our") uses and discloses your protected health information (PHI), and how you can access this information. It applies to all PHI we maintain about you, in any form.
YOUR RIGHTS
You have the following rights regarding your health information.
Get a copy of your record. You can ask to see or get an electronic or paper copy of your medical record. We will provide a copy or summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
Ask us to correct your record. You can ask us to correct information you believe is wrong or incomplete. We may deny the request, but we will tell you why in writing within 60 days.
Request confidential communication. You can ask us to contact you in a specific way, such as a home or work phone, text message, email, or mail to a specific address. We will agree to all reasonable requests. Please note that text messages and email are not fully secure. If you allow us to use them, we cannot guarantee privacy during transmission.
Ask us to limit what we use or share. You can ask us not to use or share certain PHI for treatment, payment, or operations. We are not required to agree, and we may decline if it would affect your care. If you pay for a service or item in full out of pocket, you can require us not to share that information with your health insurer for payment or operations, and we will agree unless a law requires otherwise.
Get a list of those with whom we have shared information. You can request an accounting of disclosures for up to six years before the date of your request, except for disclosures for treatment, payment, operations, or those you authorized. We will provide one accounting per year for free; we may charge a reasonable fee for additional accountings within twelve months.
Get a paper copy of this Notice. You can ask for a paper copy at any time, even if you have agreed to receive the Notice electronically. We will provide it promptly.
Choose someone to act for you. If you have given someone medical power of attorney or have a legal guardian, that person can exercise these rights on your behalf. We will confirm authority before acting.
File a complaint. You can complain to us or to the federal government if you believe we have violated your rights:
Ekilibra Privacy Officer
Diego Ize-Ludlow
Phone: (385) 442-6729
Email: info@ekilibrahealth.com
U.S. Department of Health and Human Services, Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
We will not retaliate against you for filing a complaint.
YOUR CHOICES
For certain information, you can tell us your preferences. If you have a clear preference about how your information is shared in the situations below, talk to us. We will follow your instructions.
You have the right and choice to tell us whether to share information with your family, close friends, or others involved in your care, and whether to share information in a disaster relief situation.
If you are unable to express a preference, for example if you are unconscious, we may share information when we believe it is in your best interest. We may also share information when needed to prevent a serious and imminent threat to anyone's health or safety.
We will never share your information without your written authorization for marketing purposes, for sale of your information, or for most uses or sharing of psychotherapy notes. We do not sell PHI under any circumstances.
Fundraising. We may contact you about fundraising. Each communication will tell you how to opt out, and once you opt out we will not contact you again for fundraising.
OUR USES AND DISCLOSURES
We typically use or share your health information in the following ways.
Treatment. We use your information and share it with other professionals involved in your care. Example: a clinician treating you for a condition consults with your primary care provider.
Operations. We use and share your information to run the program, improve quality of care, train staff, and contact you about appointments or services.
Payment. We use and share your information to bill and obtain payment for your care. Ekilibra does not bill health insurance plans. Example: at your request, we provide itemized documentation of the services you received so that you can submit it to your health plan or to an HSA or FSA administrator.
We may also use or share your information in the ways below, generally in support of the public good and subject to legal conditions.
Public health and safety. We may share information to prevent disease, help with product recalls, report adverse reactions to medications, report suspected abuse, neglect, or domestic violence, or prevent or reduce a serious threat to anyone's health or safety.
Research. We may use or share your information for health research, including research conducted by Ekilibra staff or partner institutions. All research using identifiable PHI requires either your written authorization or approval by an Institutional Review Board (IRB) or Privacy Board that determines a waiver is appropriate under federal regulations. Research using only de-identified data or limited data sets does not require your individual authorization. You may ask the Privacy Officer at any time whether your information has been or may be used in research.
Compliance with the law. We will share information when required by federal or state law, including with the U.S. Department of Health and Human Services to demonstrate compliance with federal privacy law.
Organ and tissue donation. We may share information with organ procurement organizations.
Coroners, medical examiners, and funeral directors. We may share information about a person who has died.
Workers' compensation, law enforcement, and other government requests. We may use or share information for workers' compensation claims; for law enforcement purposes or with a law enforcement official; with health oversight agencies for activities authorized by law; and for special government functions such as military and national security activities.
Lawsuits and legal actions. We may share information in response to a court or administrative order, or to a subpoena.
SPECIAL PROTECTIONS UNDER FEDERAL AND STATE LAW
Some types of health information have additional protections under federal and state law. Even when HIPAA would otherwise permit a disclosure, the laws below may require your specific written authorization before we can share these records. The state law that applies generally depends on the state where you receive care.
Federal law (all patients)
Substance use disorder records. Records of substance use disorder treatment protected under federal law (42 CFR Part 2) require your specific written authorization for disclosure, and a written prohibition on re-disclosure must accompany the records.
Genetic information. Federal law (GINA) protects genetic information from use in health insurance and employment decisions.
Patients receiving care in Florida
Mental health and behavioral health records. Fla. Stat. section 394.4615 requires your written, informed consent to release mental health records, with limited exceptions. These records may not be re-disclosed without your further consent.
Substance use disorder records. Fla. Stat. section 397.501 adds state protections for substance use treatment records.
HIV and AIDS records. Fla. Stat. section 381.004 requires specific written consent before HIV test results or treatment information may be released. A statutory confidentiality notice must accompany every disclosure of these records.
Sexually transmitted infection (STI) records. Fla. Stat. section 384.30 protects information about STIs and requires specific consent for most disclosures.
Genetic information. Florida law also protects genetic information from use in insurance and employment decisions.
Patients receiving care in Utah
Genetic information. Utah's Genetic Testing and Procedure Privacy Act restricts the use of private genetic information by employers and health insurers.
When Florida or Utah law provides greater privacy protection than HIPAA, we follow the more protective law.
MINORS
If the patient is under 18, a parent or legal guardian generally controls health information. However, when a minor has lawfully consented to their own care, the minor generally controls disclosure of those specific records. We will not share them with a parent or guardian without the minor's written authorization, except where state or federal law permits or requires disclosure.
Florida. Examples of care a minor may consent to under Florida law include STI services (Fla. Stat. section 384.30), substance use treatment (section 397.601), outpatient mental health services (section 394.4784), and pregnancy-related care (section 743.065). For substance use disorder records under section 397.501, when parental consent was required for the underlying treatment, both the minor and the parent or guardian must authorize disclosure.
Utah. Examples of care a minor may consent to under Utah law include examination and treatment for sexually transmitted infections (Utah Code section 26B-7-214) and pregnancy-related care (section 78B-3-406). Minors who are married, emancipated, or unaccompanied homeless minors age 15 or older may consent to their own health care (section 78B-3-406).
OUR RESPONSIBILITIES
We are required by law to maintain the privacy and security of your protected health information.
We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this Notice and provide you a copy.
We will not use or share your information other than as described here unless you give us written authorization. You may revoke an authorization at any time in writing. Revocation does not affect disclosures already made in reliance on the authorization.
CHANGES TO THE TERMS OF THIS NOTICE
We may change the terms of this Notice at any time. The changes will apply to all information we maintain about you. The updated Notice will be available on our website and upon request.