Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Arena Foot & Ankle is committed to protecting the privacy of your health information. This notice explains how we may use and share that information, and the rights you have regarding it.

Who this notice applies to

This notice applies to Arena Foot & Ankle and to the physicians, staff, and other personnel who are involved in handling the health information we keep about you. Everyone working with us is required to protect your information as described here.

How we may use and share your health information

In the course of your care, we may use and share your health information in the following ways without asking for your written permission:

For treatment

We may use your information to provide and coordinate your care, and share it with others involved in your treatment — for example, sending records to your primary care physician, coordinating with a surgical facility, or consulting another specialist about your condition.

For payment

We may use and share your information to bill and collect payment for your care — for example, confirming coverage with your insurer, obtaining prior authorization for a procedure, or submitting a claim.

For health care operations

We may use and share your information to run the practice — for example, reviewing the quality of care, training staff, and handling general administration.

Other ways we may use or share information without your authorization

The law also permits or requires us to use or share your health information, without your authorization, in certain other situations:

• Business associates — with outside companies that perform services for us, such as billing or records management, under agreements that require them to protect your information.
• When required by law — where a federal, state, or local law requires the use or disclosure.
• Public health activities — to public health authorities for purposes such as preventing disease, reporting injuries, or tracking products regulated by the FDA.
• Health oversight — to agencies that oversee the health care system, for activities such as audits, inspections, and licensure.
• Law enforcement and to avert a serious threat — in limited circumstances defined by law, and to prevent or lessen a serious and imminent threat to someone's health or safety.
• Legal proceedings — in response to a court order, subpoena, or other lawful process.
• Workers' compensation — as authorized by and necessary to comply with workers' compensation laws.
• Coroners, medical examiners, and funeral directors — as necessary for them to carry out their duties, and for organ or tissue donation.
• Research — for approved research that follows a review process protecting the confidentiality of your information.
• Military, veterans, and specialized government functions — as authorized by law for members of the armed forces and certain other government activities.
• Incidental disclosures — minor disclosures that may occur naturally while we care for you, such as calling your name in the waiting area. We take reasonable steps to limit these.
• Idaho Health Data Exchange (IHDE) — we may participate in the IHDE, a secure exchange that lets treating providers and payers share information for treatment, payment, and operations. You may ask us to restrict sharing of your information through the IHDE.

Situations where you can tell us not to share

• Family and friends involved in your care — unless you object, we may share information relevant to their involvement with a family member, friend, or other person you identify as helping with your care or payment. Just let our staff know your preference.
• Disaster relief — we may share limited information with a relief organization so your family can be notified of your location and condition.

Information with extra protection

Certain kinds of information — such as records relating to mental health, substance use treatment, sexually transmitted disease, HIV, or genetic testing — receive additional protection under state or federal law. Unless the law requires otherwise, we will obtain your written permission before sharing this kind of information.

Uses that require your written authorization

Other than the situations described above, we will use or share your health information only with your written authorization. In particular, your written authorization is required for most uses of any psychotherapy notes, for marketing that benefits a third party, and for any sale of your health information. You may cancel an authorization in writing at any time; doing so stops future uses but does not undo anything we already did while it was in effect.

Your rights

• See and get a copy of your health and billing records, in an electronic format where we keep them electronically.
• Request a correction to information you believe is wrong or incomplete.
• Request a restriction on how we use or share your information. We do not have to agree, and will tell you if we cannot. However, if you pay in full out of pocket for a service, you may tell us not to share information about that service with your health plan, and we will honor that request.
• Request confidential communications — ask us to contact you a particular way or at a particular address. We will accommodate reasonable requests.
• Receive a list of certain disclosures we have made of your information.
• Get a paper copy of this notice, even if you agreed to receive it electronically.
• Be notified if a breach affects the privacy or security of your health information.

To exercise any of these rights, contact our Privacy Officer using the information below.

Our duties

We are required by law to protect the privacy and security of your health information, to give you this notice of our duties and privacy practices, to notify you if a breach affects your information, and to follow the terms of the notice currently in effect.

Changes to this notice

We may change this notice and make the new terms apply to information we already have as well as information we receive in the future. When we make a material change, the current notice will be posted in our offices and on this website, with a new effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer, or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you in any way for filing a complaint.

This notice is effective as of July 24, 2026. Arena Foot & Ankle does not discriminate on the basis of race, color, national origin, age, disability, or sex.