HIPAA Notice of Privacy Practices

Effective Date: June 20, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Medical services provided through DermOnDemand are rendered by Joel Kopelman, MD, FACS, and his affiliated medical practice, or by other appropriately licensed healthcare professionals affiliated with the practice.
This Notice describes how your Protected Health Information (“PHI”) may be used and disclosed and explains your rights regarding your medical information in accordance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and other applicable laws.

1. Our Responsibilities

We are required by law to:
  • Maintain the privacy and security of your Protected Health Information;
  • Provide you with this Notice describing our legal duties and privacy practices;
  • Notify you following a breach of unsecured Protected Health Information when required by law;
  • Follow the terms of this Notice currently in effect.

2. How We May Use and Disclose Your Health Information

Treatment
We may use and disclose your health information to provide, coordinate, or manage your medical care. This may include communication with:
  • Physicians and other healthcare professionals;
  • Pharmacies;
  • Laboratories;
  • Specialists;
  • Hospitals;
  • Emergency departments;
  • Other providers involved in your treatment.

Payment
We may use and disclose your information to obtain payment for healthcare services, including:
  • Billing and collections;
  • Payment processing;
  • Insurance verification and claims processing when applicable;
  • Credit card processing vendors and billing companies.

Healthcare Operations
We may use and disclose information for:
  • Quality improvement activities;
  • Staff training and education;
  • Credentialing and peer review;
  • Compliance activities;
  • Audits;
  • Practice management;
  • Administrative operations.

3. Additional Uses and Disclosures Allowed by Law

We may disclose your information:

Public Health Activities

To public health authorities for disease reporting, drug recalls, adverse events, and other legally authorized activities.

Health Oversight Activities

To licensing boards, accreditation organizations, government agencies, and regulatory authorities.

Legal Proceedings

In response to court orders, subpoenas, warrants, or other lawful processes.

Law Enforcement

As required by law or to assist law enforcement investigations.

Serious Threat to Health or Safety

When necessary to prevent or lessen a serious threat to your health or the safety of others.

Workers’ Compensation

As authorized by applicable workers’ compensation laws.

Coroners, Medical Examiners, and Organ Donation

When authorized by law.

Military and National Security Activities
When required by applicable law.

4. Business Associates

We may share information with third-party vendors and service providers who assist in operating the practice and who are required by law or contract to safeguard your Protected Health Information. These may include:
  • Electronic medical record providers;
  • Cloud storage providers;
  • Pharmacy partners;
  • Laboratory vendors;
  • Billing companies;
  • Payment processors;
  • Communication vendors;
  • Information technology providers.

5. Your Rights

You have the right to:

Obtain Copies of Your Records

You may inspect and obtain copies of your medical records and billing records, subject to certain legal limitations.

Request Corrections

You may request amendments to your medical records if you believe information is incomplete or incorrect.

Request Confidential Communications

You may request that we communicate with you through alternative means or at alternative locations.

Request Restrictions

You may request restrictions on certain uses or disclosures of your information. Although we will consider such requests, we are not required to agree to every request.

Receive an Accounting of Disclosures

You may request a list of certain disclosures of your Protected Health Information.

Obtain a Copy of This Notice
You may obtain a paper or electronic copy of this Notice at any time.

6. Electronic Communications

By using DermOnDemand, you acknowledge that communications may occur through secure portals, email, telephone, text messaging, or other electronic means.

Although commercially reasonable safeguards are utilized, electronic communications carry inherent risks, including unauthorized access or interception. You acknowledge and accept these risks.

7. Telemedicine

Medical services are provided through telemedicine technologies.

Information, photographs, videos, questionnaires, prescriptions, laboratory information, and communications may be maintained electronically and may be shared with healthcare providers involved in your treatment.

Medical services are only provided by providers licensed in the state where you are physically located during the encounter.

8. Marketing and Sale of Information

We do not sell your Protected Health Information.

Your Protected Health Information will not be used for marketing purposes or disclosed for the marketing purposes of third parties without your authorization, except as permitted by law.

Photographs or identifiable information will not be used for educational or marketing purposes without separate written authorization.

9. Data Security

We employ commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption, secure servers, access controls, and HIPAA-compliant vendors.

Despite these efforts, no system can guarantee absolute security, and we cannot guarantee protection against unauthorized access, cyberattacks, data breaches, or other events beyond our reasonable control.

10. Breach Notification

If a breach involving unsecured Protected Health Information occurs, we will notify affected individuals as required by applicable federal and state laws.

11. Changes to This Notice

By using DermOnDemand, you acknowledge that communications may occur through secure portals, email, telephone, text messaging, or other electronic means.

Although commercially reasonable safeguards are utilized, electronic communications carry inherent risks, including unauthorized access or interception. You acknowledge and accept these risks.

12. Questions or Complaints

If you have questions about this Notice or believe your privacy rights have been violated, please contact DermOnDemand through the contact information listed on our website.

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

13. Acknowledgment

By using DermOnDemand and receiving services through Joel Kopelman, MD, FACS, and his affiliated medical practice, you acknowledge that you have received or have had the opportunity to review this HIPAA Notice of Privacy Practices.