HIPAA NOTICE OF PRIVACY PRACTICES
Effective Date: June 30, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Magnus Direct Primary Care, LLC, including Sarfaraz Dhanji, M.D., staff, workforce members, and business associates who assist us in providing care and operating the practice, is committed to protecting the privacy and security of your protected health information, also called “PHI.”
Protected health information includes information that identifies you and relates to your past, present, or future physical or mental health, health care services, or payment for health care.
Our Responsibilities
We are required by law to:
Maintain the privacy and security of your protected health information.
Provide you with this Notice explaining our legal duties and privacy practices.
Follow the terms of the Notice currently in effect.
Notify you if a breach occurs that may have compromised the privacy or security of your information.
Not use or disclose your information other than as described in this Notice unless you authorize us in writing.
How We May Use and Disclose Your Health Information
Treatment
We may use and disclose your health information to provide, coordinate, or manage your medical care. This may include sharing information with other physicians, specialists, laboratories, imaging centers, pharmacies, hospitals, therapists, consultants, or other health care professionals involved in your care.
Example: We may send your medication list or lab results to a specialist to help coordinate your treatment.
Payment and Account Administration
Magnus DPC does not bill insurance for services covered under the direct primary care membership agreement. However, we may use and disclose information as needed to collect payment, manage your account, process membership fees, provide receipts, or address billing questions.
Example: We may contact you about your monthly membership payment or a charge for a service not included in your membership.
Health Care Operations
We may use and disclose your information for practice operations, including quality improvement, care coordination, staff training, compliance, credentialing, legal review, business management, technology support, and patient service improvement.
Example: We may review patient care patterns to improve appointment availability or preventive care outreach.
Appointment Reminders and Health-Related Communications
We may use your contact information to send appointment reminders, follow-up reminders, preventive care reminders, refill reminders, office updates, practice announcements, or information about services that may be relevant to your care.
These communications may occur by phone, voicemail, text message, email, patient portal message, mail, or other communication methods you have provided or authorized.
Individuals Involved in Your Care
We may share relevant information with a family member, caregiver, personal representative, or other person involved in your care or payment for your care when you give permission, when you do not object, or when we reasonably determine it is in your best interest based on professional judgment.
Emergencies and Serious Threats
We may use or disclose your information when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of another person.
Required by Law
We may use or disclose your information when required by federal, state, or local law.
Public Health and Safety
We may disclose information for public health activities, such as reporting certain diseases, injuries, vital events, adverse medication reactions, product recalls, or other public health concerns.
Abuse, Neglect, or Domestic Violence
We may disclose information to appropriate authorities if we reasonably believe a patient may be a victim of abuse, neglect, or domestic violence, as permitted or required by law.
Health Oversight Activities
We may disclose information to health oversight agencies for activities authorized by law, including audits, investigations, inspections, licensure, disciplinary actions, or compliance reviews.
Legal Proceedings
We may disclose information in response to a court order, subpoena, discovery request, administrative proceeding, or other lawful legal process, when legally required or permitted.
Law Enforcement
We may disclose information to law enforcement officials in limited circumstances, such as when required by law, to identify or locate a person, to report certain injuries, or to respond to a lawful request.
Coroners, Medical Examiners, and Funeral Directors
We may disclose information to coroners, medical examiners, or funeral directors as necessary for them to perform their duties.
Organ and Tissue Donation
We may disclose information to organizations involved in organ, eye, or tissue donation and transplantation.
Workers’ Compensation
We may disclose information as authorized by workers’ compensation laws or similar programs.
Research
We may use or disclose information for research only when permitted by law and with appropriate privacy protections, approvals, or authorizations when required.
Special Categories of Information
Certain information may receive additional protection under federal or state law, including substance use disorder treatment records, mental health records, psychotherapy notes, HIV/AIDS-related information, genetic information, reproductive health information, and other sensitive records. We will comply with applicable special protections before using or disclosing this information.
Uses and Disclosures That Require Your Written Authorization
We generally must obtain your written authorization before using or disclosing your health information for:
Marketing purposes, except for limited communications permitted by law.
The sale of your protected health information.
Most uses and disclosures of psychotherapy notes, if we maintain such notes.
Any other purpose not described in this Notice or otherwise permitted by law.
You may revoke a written authorization at any time by submitting a written request to us. Revocation will not affect actions we already took in reliance on your authorization.
Your Rights
You have the following rights regarding your protected health information.
Right to Inspect and Receive a Copy
You may request to inspect or receive a copy of your medical record and certain other health information we maintain about you. We may charge a reasonable, cost-based fee as permitted by law.
Right to Request an Electronic Copy
If your information is maintained electronically, you may request an electronic copy in a readily producible format, when available.
Right to Request Correction
You may request that we correct or amend health information you believe is incorrect or incomplete. We may deny your request in certain circumstances, but we will explain the reason in writing.
Right to Request Confidential Communications
You may request that we contact you in a specific way or at a specific location, such as only by cell phone or only through the patient portal. We will accommodate reasonable requests.
Right to Request Restrictions
You may request that we restrict certain uses or disclosures of your information. We are not required to agree to every request, but we will consider each request carefully.
If you pay out-of-pocket in full for a specific service and ask us not to disclose information about that service to your health plan, we will honor that request unless disclosure is required by law.
Right to an Accounting of Disclosures
You may request a list of certain disclosures of your health information made by us during a specific period, subject to limitations under the law.
Right to Choose Someone to Act for You
If you have given someone medical power of attorney, if someone is your legal guardian, or if someone is otherwise authorized by law to act on your behalf, that person may exercise your rights and make choices about your health information.
Right to Receive a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically. This Notice is also available on our website.
Right to File a Complaint
You may file a complaint if you believe your privacy rights have been violated.
You may contact Magnus Direct Primary Care at:
Privacy Officer: Sarfaraz Dhanji, M.D.
Magnus Direct Primary Care, LLC
8421 Baymeadows Way, Suite 1
Jacksonville, Florida 32256
Phone: (904) 490-9765
Email: info@magnusdpc.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.
We will not retaliate against you for filing a complaint.
Communication by Email, Text Message, and Patient Portal
Magnus DPC may communicate with patients by patient portal, phone, voicemail, email, text message, or other communication methods.
The patient portal is the preferred method for medical questions and clinical communication.
Standard email and text messaging may not be encrypted and may carry privacy risks, including the possibility that messages could be seen by others with access to your phone, email account, or device. By providing your email address or phone number and consenting to communication by these methods, you acknowledge these risks.
You may request a different communication method at any time.
Changes to This Notice
We may change the terms of this Notice at any time. The new Notice will apply to all health information we maintain, including information created or received before the change.
The current Notice will be posted on our website and available at our office.