Your Information. Your Rights. Our Responsibilities.
Notice of Privacy Practices of TwelveStone Health Partners (and all affiliated entities including but not limited to TwelveStone Infusion Centers, TwelveStone Medical, TwelveStone Infusion Support, etc.)
This Notice describes:
- How health information about you may be used and disclosed
- Your rights with respect to your health information
- How to file a complaint concerning a violation of the privacy or security of your health information, or of your rights concerning your information
You have a right to receive a copy of this Notice of Privacy Practices (in paper or electronic form) and to discuss it with our Compliance Officer at 615-278-3135 or compliance@12stonehealth.com if you have any questions.
Your Rights
You have the right to:
- Authorize certain uses and disclosures of your health information and revoke your authorization at any time, as permitted by law.
- Ask us to limit the information we share
- Get a copy of this privacy Notice
- Ask questions about this Notice or our privacy practices
- Receive an accounting of certain disclosures of your health information
- Get a list of health care providers who have received your information through certain third parties
- Choose in advance whether to receive fundraising communications
- File a complaint if you believe your privacy rights have been violated
When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
Uses and Disclosures Requiring Your Written Authorization
Certain uses and disclosures of your protected health information require your written authorization. For example, we will obtain your authorization before using or disclosing your information for marketing purposes (where required by law), the sale of protected health information, or other uses and disclosures not otherwise permitted by HIPAA. You may revoke your authorization at any time in writing, except to the extent we have already relied on it.
Electronic Communications
To help coordinate your care and improve your experience, TwelveStone Health Partners may communicate with you electronically through text messages, email, and our patient application (app).
These communications may be used to:
- Confirm or remind you of appointments.
- Provide information about your treatment or medications.
- Notify you of prescription or status updates.
- Share educational materials or patient-specific information.
- Respond to your questions or requests.
- Provide other information related to your care.
While TwelveStone takes reasonable administrative, technical, and physical safeguards to protect your health information, electronic communications may not always be completely secure. By providing your email address, mobile phone number, or enrolling in our patient app, you acknowledge and accept the risks associated with electronic communications as permitted by applicable law.
You may request to receive communications through an alternative method or at an alternative location, or you may opt out of certain electronic communications by notifying TwelveStone. Please note that we may still contact you by telephone or other means when necessary to provide treatment, coordinate your care, or meet legal or regulatory obligations.
Ask us to limit what we use or share
- You may request restrictions on certain uses or disclosures of your health information for treatment, payment, or health care operations. While we will carefully consider your request, we are not required to agree to it if the restriction could interfere with your care or if we are otherwise permitted or required by law to use or disclose the information. If we approve your request, we may still use or disclose your health information when necessary to provide emergency treatment.
- If you pay for a health care item or service out of pocket in full, you may request that we not disclose information about that item or service to your health plan for payment or health care operations. We will honor your request unless we are required by law to make the disclosure.
Get a copy of this privacy Notice
You can ask for a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically. We will provide you with a paper copy promptly.
Discuss this Notice with someone at TwelveStone
You can ask questions or obtain more information about this Notice and our privacy practices by calling or emailing the contact person at the top of this Notice.
Choose in advance about fundraising
You have the right to a clear and obvious Notice in advance of, and a choice about whether to receive, fundraising communications for TwelveStone.
File a complaint if you feel your rights are violated
- You can complain if you feel we have violated your rights by contacting us using the information on page 1.
- You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Information about filing a complaint is available on the OCR website.
- We will not retaliate against you for filing a complaint.
Your Choices
In the following situations, you have both the right and the choice to tell us whether we may share your information:
- Sharing information with family members, friends, or others involved in your care.
- Sharing information in disaster relief situations.
- Contacting you for fundraising activities (you may opt out at any time).
We typically use and disclose your health information without your written authorization for the following purposes, as permitted by HIPAA:
- Treatment
- Payment
- Health care operations
Treat you
We can use your health information and share it with other professionals who are treating you.
Example: A doctor treating you for a chronic condition asks an employee at TwelveStone about your health condition and medications you are taking, for example, to avoid complications.
Conduct Health Care Operations
We may use and disclose your health information to conduct our health care operations, improve the quality of care we provide, evaluate the performance of our workforce, and contact you when necessary regarding your care.
Example: We use health information about you to manage your treatment and services.
Bill for your services
We can use and share your health information to bill and get payment from health plans or other entities.
Example: We give information about you to your health insurance plan so it will pay for your services.
You can choose someone to act for you.
- If someone has authority to act as your personal representative, such as if someone has your medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
- We will make sure the person has this authority and can act for you before we take any action.
Our Uses and Disclosures
We may use and share your information without your consent as we:
- Communicate within TwelveStone and with our contractors
- Help with medical emergencies
- Help with public health
- Report crimes (and threats of crimes) on our premises and suspected child abuse and neglect
- Aid scientific research
- Respond to audits and evaluations of TwelveStone
- Assist cause of death inquiries
- Respond to court orders
In all these circumstances, we must protect your information and limit how we use and share it.
How else can we use or share your health information?
We are allowed or required to share your information in certain ways without your consent – usually in ways that contribute to the public good, such as public health and research. We must meet many conditions in the law before we can share your information for these purposes.
To communicate within TwelveStone and with contractors
We can share your information within TwelveStone, with organizations that have administrative control over TwelveStone, and with business associates and contractors who perform services on our behalf.
For medical emergencies
We can share your information during a bona fide medical emergency with the personnel and health care providers responding to your emergency, even when you are unable to consent because of the emergency.
We can also share your identifying information to assist the federal Food and Drug Administration in notifying you or your doctor about unsafe products you may be using.
Help with public health
We can share health information that does not identify you for certain situations such as:
- Preventing disease
- Reporting adverse reactions to medications
Aid scientific research
We can use or share your information to conduct or help with health research. Research disclosures are made only as permitted by applicable federal and state law, and appropriate privacy safeguards are maintained.
Respond to management and financial audits and program evaluations
We can use or share your information to improve the quality of our services, obtain needed credentials, and cooperate with oversight agencies for activities authorized by law, as long as those who view or receive the information agree to destroy or return the information when they are finished and agree not to use it against you.
Assist with cause of death inquiries
We can share patient identifying information about a deceased patient as required or allowed by laws that collect information relating to cause of death.
Report suspected child abuse and neglect
We will only report the information required by law.
Prevent or reduce crime in TwelveStone
We may report to law enforcement when a patient commits or threatens to commit a crime within TwelveStone or against our staff.
Legal Proceedings and Court Orders
We may disclose your health information in response to a court order, subpoena, discovery request, or other lawful process when permitted or required by applicable law.
Our Responsibilities
- Protect the privacy and security of your health information.
- Provide you with this Notice of Privacy Practices.
- Follow the privacy practices described in this Notice.
- Notify you if a breach of your unsecured protected health information occurs.
- Comply with applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA).
- Not use or disclose your information except as described in this Notice or otherwise permitted or required by law.
Nondiscrimination Statement
TwelveStone provides language assistance services, interpreter services, translated materials when available, and appropriate auxiliary aids and services at no cost to patients who need them to ensure meaningful access to our services and communications.
Changes to the Terms of this Notice
We are required to follow the terms of this Notice that are currently in effect. We can change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available upon request at any TwelveStone location and on our website.
Effective Date
This Notice is effective as of 7/30/2026.
