HIPAA Notice Of Privacy Practices (NPP)

Effective Date: June 23, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Practice Information

 Lauren K. Rangel, MD, PA d/b/a Rangel Dermatology

8950 SW 74th Ct, Suite 2001

Miami, FL 33156

Phone: (305) 367-8442

Email: info@rangelderm.com

Our Commitment To Your Privacy

 Rangel Dermatology understands that your medical information is personal and confidential. We are required by law to maintain the privacy and security of your Protected Health Information (“PHI”), provide you with this Notice of our legal duties and privacy practices, and follow the terms of this Notice currently in effect.

We make reasonable efforts to use, disclose, and request only the minimum necessary Protected Health Information to accomplish the intended purpose, as required by HIPAA.

We will notify you following a breach of unsecured Protected Health Information as required by law.

This Notice applies to all records of your care generated by Rangel Dermatology.

How We May Use And Disclose Your Health Information

The following categories describe different ways we may use and disclose your PHI without your written authorization.

1. Treatment

 We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services.

Examples include:

• Sharing information with your primary care physician or referring provider
• Consulting with other healthcare providers regarding your treatment
• Reviewing photographs submitted through approved patient communication platforms

2. Payment

 We may use and disclose your PHI to obtain payment for services we provide.

Examples include:

• Submitting claims to your health insurance company
• Determining insurance eligibility and benefits
• Collecting payment for services rendered

3. Healthcare Operations

 We may use and disclose your PHI to support the operation of our practice.

Examples include:

• Quality assessment and improvement activities
• Employee training and credentialing
• Business planning and administrative activities
• Compliance reviews and audits

Additional Permitted Or Required Disclosures

We may use or disclose your PHI as permitted or required by law for:

• Appointment Reminders – to remind you of upcoming appointments
• Treatment Alternatives and Health-Related Benefits – to inform you of services or options that may be of interest
• Individuals Involved in Your Care – unless you object
• Public Health Activities – disease prevention and reporting requirements
• Health Oversight Activities – audits, inspections, investigations, licensing
• Judicial and Administrative Proceedings – court orders, subpoenas, lawful requests
• Law Enforcement – when required by law
• Serious Threat to Health or Safety – to prevent harm
• Organ and Tissue Donation – as permitted by law
• Workers’ Compensation – claims and related programs
• Military and National Security Activities – as required by law
• Coroners, Medical Examiners, and Funeral Directors – as authorized
• Research – when approved by an Institutional Review Board or as permitted by law
• Business Associates – vendors assisting in our operations under HIPAA-compliant agreements

Examples include:

• Electronic health record providers
• Patient communication platforms
• Billing and payment vendors
• Information technology service providers

Electronic Communications

We may communicate with you electronically, including by:

• Text message
• Email
• Patient portal
• Telephone

We utilize secure third-party vendors, including Klara Technologies, Inc. and Modernizing Medicine, Inc., to facilitate certain communications and services.

Electronic communications may include health-related information. Although we employ reasonable safeguards, no method of electronic communication is completely secure.

You may request alternative communication methods by contacting our office.

Uses And Disclosures Requiring Your Authorization

 Except as otherwise permitted by law, we will obtain your written authorization before:

• Using or disclosing psychotherapy notes
• Selling your PHI
• Using your PHI for marketing purposes

Any other use or disclosure requiring authorization under HIPAA

You may revoke an authorization at any time in writing, except to the extent we have already relied upon it.

Your Rights Regarding Your Health Information

Right to Inspect and Receive Copies

You have the right to inspect and obtain a copy of your medical record and certain other health information. You may request a copy in paper or electronic form if readily producible.

Right to Request an Amendment

You may request that we amend your medical information if you believe it is incorrect or incomplete.

Right to an Accounting of Disclosures

You have the right to receive a list of certain disclosures we have made of your PHI.

Right to Request Restrictions

You may request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requests except where required by law.

Right to Request Confidential Communications

You may request that we communicate with you in a specific way or location.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time.

Right to Be Notified Following a Breach

You have the right to be notified if your unsecured PHI has been compromised.

Special Rule For Out-Of-Pocket Payments

If you pay for a service or item in full out-of-pocket, you may request that we not disclose information regarding that service to your health plan for payment or healthcare operations purposes, and we will comply unless otherwise required by law.

Our Responsibilities

We are required to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice
• Follow the terms of this Notice
• Notify you following a breach as required by law
• Comply with applicable federal and Florida privacy laws

Changes To This Notice

We reserve the right to revise this Notice at any time. The revised Notice will apply to all Protected Health Information we maintain, including information created or received prior to the revision. The updated Notice will be posted in our office and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Lauren K. Rangel, MD, PA d/b/a Rangel Dermatology

Attn: Privacy Officer

8950 SW 74th Ct, Suite 2001

Miami, FL 33156

Phone: (305) 367-8442

Email: info@rangelderm.com

You may also file a complaint with:

U.S. Department of Health and Human Services

Office for Civil Rights or the Secretary of the U.S. Department of Health and Human Services

You will not be retaliated against for filing a complaint.

Questions

If you have any questions about this Notice or our privacy practices, please contact our Privacy Officer using the information above.

Effective Date

This Notice of Privacy Practices is effective June 23, 2026.