NOTICE OF PRIVACY PRACTICES
Effective Date: August 19, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Sessions Wellness Center (“Sessions,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your health information.
This Notice of Privacy Practices (“Notice”) describes how we may use and disclose your Protected Health Information (“PHI”), the rights you have regarding your health information, and our legal responsibilities concerning that information.
This Notice applies to healthcare services provided by Sessions Wellness Center and healthcare professionals providing care through or on behalf of Sessions Wellness Center to the extent those services and providers are subject to applicable healthcare privacy laws.
YOUR RIGHTS
When it comes to your health information, you have certain rights.
Get a Copy of Your Medical Record
You may request an electronic or paper copy of your medical record and other health information we maintain about you.
We will generally provide a copy or summary of your health information within the timeframe required by applicable law. We may charge a reasonable, cost-based fee when permitted by law.
Ask Us to Correct Your Medical Record
If you believe health information we maintain about you is incorrect or incomplete, you may ask us to correct it.
We may deny your request in certain circumstances permitted by law. If we deny your request, we will explain the reason in writing and describe any additional rights you may have.
Request Confidential Communications
You may ask us to contact you in a specific way, such as only at a particular telephone number or email address, or to send mail to a different address.
We will accommodate reasonable requests as required by law.
Ask Us to Limit What We Use or Share
You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.
We are generally not required to agree to all requested restrictions.
However, if you pay for a healthcare service or item completely out-of-pocket, you may ask us not to disclose information about that service to your health insurer for purposes of payment or healthcare operations. We will honor that request unless disclosure is otherwise required by law.
Get a List of Certain Disclosures
You may request an accounting of certain disclosures of your health information.
Generally, you may request information regarding certain disclosures made during the six years before the date of your request.
The accounting generally will not include disclosures made for treatment, payment, or healthcare operations or certain other disclosures excluded by law.
We will provide one accounting during a 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests when permitted by law.
Get a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.
Choose Someone to Act for You
If you have given someone medical power of attorney, or if someone is your legal guardian or otherwise legally authorized to act on your behalf, that individual may exercise your privacy rights and make choices about your health information as permitted by law.
We may verify that the individual has authority to act on your behalf before taking action.
File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with Sessions Wellness Center using the contact information provided at the end of this Notice.
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
Sessions Wellness Center will not retaliate against you for filing a privacy complaint.
YOUR CHOICES
For certain health information, you may tell us your preferences regarding what we share.
In certain circumstances, you may have the right to tell us whether we may:
- Share information with family members, friends, or others involved in your care;
- Share information in a disaster-relief situation;
- Contact you for certain marketing or promotional purposes; or
- Make other disclosures for which your authorization or consent is required by law.
If you are unable to communicate your preference, such as during a medical emergency, we may disclose information when we reasonably believe it is in your best interest and the disclosure is permitted by law.
Marketing and Sale of Information
We will obtain your written authorization before using or disclosing PHI for marketing when authorization is required by law.
Sessions Wellness Center does not sell your PHI.
We will not sell PHI without your express written authorization where such authorization is required by law.
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
HIPAA and other applicable laws allow healthcare providers to use and disclose health information for certain purposes without obtaining a separate authorization for every disclosure.
Examples include:
Treatment
We may use and disclose your health information to provide, coordinate, or manage your healthcare.
For example, a Sessions healthcare provider may review your medical history, medications, laboratory results, or previous treatments when determining whether a treatment or service is appropriate.
We may also share relevant information with another physician, laboratory, pharmacy, or healthcare professional involved in your care when permitted by law.
Payment
We may use and disclose health information to bill for healthcare services and obtain payment.
For example, we may provide information to a payment processor, health plan, or other responsible party when necessary to process or collect payment and when permitted by law.
Healthcare Operations
We may use and disclose your health information for activities necessary to operate our healthcare services.
Examples may include:
- Quality assessment and improvement;
- Staff training;
- Reviewing provider performance;
- Compliance activities;
- Auditing;
- Credentialing;
- Business planning;
- Customer and patient service;
- Legal and regulatory compliance; and
- Improving our healthcare services.
Business Associates and Service Providers
We may share health information with companies that perform services on our behalf when those services require access to PHI.
Examples may include electronic health record providers, patient management platforms, billing services, technology providers, laboratories, and other vendors.
Where required by HIPAA, these organizations enter into agreements requiring them to appropriately safeguard PHI.
Appointment Reminders and Treatment Information
We may contact you regarding appointments, follow-up care, treatment alternatives, or other health-related services that may be relevant to your care, as permitted by law.
Public Health and Safety
We may disclose health information for certain public health and safety purposes when authorized or required by law.
These may include:
- Preventing or controlling disease;
- Reporting suspected abuse, neglect, or domestic violence;
- Reporting adverse reactions or product safety issues;
- Preventing or reducing a serious threat to health or safety; or
- Complying with public health reporting obligations.
Comply With the Law
We may disclose health information when federal or state law requires us to do so.
Health Oversight
We may disclose information to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, licensing, and regulatory activities.
Legal Proceedings
We may disclose health information in response to a valid court or administrative order, subpoena, discovery request, or other lawful process when permitted or required by law.
Law Enforcement
We may disclose health information to law enforcement officials under circumstances permitted or required by law.
Workers' Compensation
We may disclose health information as authorized by and to the extent necessary to comply with workers' compensation laws and similar programs.
Coroners, Medical Examiners, and Funeral Directors
We may disclose health information to coroners, medical examiners, and funeral directors as permitted by law.
Research
We may use or disclose health information for certain research activities when the requirements of applicable law have been satisfied.
SENSITIVE HEALTH INFORMATION
Certain categories of health information may receive additional protection under federal or state law.
When laws provide greater protection than HIPAA, Sessions Wellness Center will comply with the more protective applicable requirement.
This may include certain information involving mental health treatment, substance use disorder treatment, genetic information, reproductive healthcare, communicable diseases, or other specially protected categories of information where applicable.
We will obtain an authorization or consent before using or disclosing such information when required by applicable law.
ELECTRONIC COMMUNICATIONS AND TELEHEALTH
Sessions Wellness Center may communicate with patients electronically and may provide or facilitate certain healthcare services through telehealth.
Health information exchanged through patient portals, telehealth platforms, electronic health records, laboratories, pharmacies, and other healthcare technology systems will be handled in accordance with applicable privacy and security requirements.
Email and SMS text messaging may not always be completely secure. We take reasonable precautions when communicating electronically and encourage patients not to send highly sensitive medical information through unsecured communication methods unless instructed to do so.
OUR RESPONSIBILITIES
Sessions Wellness Center takes its responsibility to protect your health information seriously.
To the extent required by applicable law:
- We are required to maintain the privacy and security of your PHI.
- We maintain reasonable administrative, physical, and technical safeguards designed to protect PHI.
- We will notify affected individuals following a breach of unsecured PHI when notification is required by law.
- We must follow the duties and privacy practices described in the Notice currently in effect.
- We will provide you with a copy of this Notice upon request.
- We will not use or disclose your PHI in a manner not described in this Notice unless you provide written authorization or another legal basis permits or requires the use or disclosure.
- If you provide written authorization, you generally may revoke that authorization in writing at any time, subject to applicable legal limitations.
PROTECTION OF YOUR INFORMATION
Sessions Wellness Center uses reasonable administrative, physical, and technical safeguards designed to protect health information from unauthorized access, use, disclosure, alteration, or destruction.
These safeguards may include:
- Limiting access to patient information based on job responsibilities;
- Password-protected systems and access controls;
- Secure patient and healthcare technology systems;
- Employee privacy and security training;
- Policies regarding handling of patient information;
- Appropriate agreements with vendors handling PHI;
- Physical safeguards for records and workspaces; and
- Procedures for responding to suspected privacy or security incidents.
SUBSTANCE USE DISORDER RECORDS
Certain substance use disorder treatment records may be subject to additional confidentiality protections under federal law, including 42 CFR Part 2.
If Sessions Wellness Center creates, receives, or maintains records subject to these additional requirements, those records will be used and disclosed in accordance with applicable federal law.
Where patient consent is required for a use or disclosure of such records, Sessions Wellness Center will obtain the required consent.
WEBSITE AND ADVERTISING TECHNOLOGIES
Sessions Wellness Center maintains a website and may use technology providers to operate, secure, analyze, and improve its online services.
We take reasonable measures designed to avoid impermissible disclosure of PHI through website analytics, advertising technologies, tracking technologies, or similar tools.
Information collected through healthcare intake forms, patient portals, telehealth systems, or other systems containing PHI will not knowingly be disclosed for advertising purposes in a manner prohibited by applicable healthcare privacy laws.
For additional information regarding information collected through our public website, cookies, analytics technologies, and other online services, please review the Sessions Wellness Center Privacy Policy.
CHANGES TO THIS NOTICE
We reserve the right to change the terms of this Notice and our privacy practices as permitted by law.
Changes may apply to health information we already maintain as well as information we receive in the future.
When this Notice is materially revised, the current version will be made available at Sessions Wellness Center and on our website as required by applicable law.
QUESTIONS OR COMPLAINTS
If you have questions regarding this Notice, would like to exercise your privacy rights, or believe your privacy rights have been violated, please contact:
Privacy Officer
Sessions Wellness Center
Knoxville, Tennessee
Website: sessionswellnesscenter.com
Email: lissa@sessionsknox.com
Phone: 865-307-2068
You may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.
Sessions Wellness Center will not retaliate against you for filing a complaint.
EFFECTIVE DATE
This Notice is effective August 19, 2026.
