Need help or have questions about your order? Call 1-888-BRELLO-1

Privacy Practices

Notice of Privacy Practices

Effective Date: November 26, 2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

  1. Scope of this Notice
    This Notice of Privacy Practices (“NPP”) is issued by the following professional entities (collectively, the “Provider Groups”). The Provider Groups include: (i) Online Medical Care, P.C., a New Jersey professional corporation that does business in New Jersey and New York, (ii) TMD of Kansas, P.A., a Kansas professional association that does business in Kansas, (iii) TMD of Texas, P.A., a Texas professional association that does business in Texas, and (iv) TMD of CA, P.C., a California professional corporation that does business in all other states. These entities have designated themselves as a single affiliated covered entity for purposes of HIPAA.This NPP applies to the health care services provided by the Provider Groups to individuals through this website and telehealth platform. This Notice of Privacy Practices describes the information that the Provider Groups collect about you, how the Provider Groups use and share that information, and the privacy choices offered by the Provider Groups.
  2. Confidentiality of Health Information.The Provider Groups understand that health information about you and your health is personal. The Provider Groups support your privacy and strive to ensure that the transmission and use of your information comply with all laws, except to the extent that you have authorized the Provider Groups to transmit information to you by other means. In this regard, where applicable, we comply with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”), and other relevant state laws and regulations.The Provider Groups are dedicated to maintaining the privacy of your protected health information (“PHI”), as that term is defined under HIPAA. PHI is information about you that may be used to identify you (such as your name, social security number or address), and that relates to (a) your past, present or future physical or mental health or condition, (b) the provision of healthcare to you, or (c) your past, present, or future payment for the provision of healthcare. In conducting their business, the Provider Groups may receive and create records containing your PHI. The Provider Groups are required by HIPAA to maintain the privacy and security of your PHI. The Provider Groups are required by law to notify affected individuals following a breach of unsecured PHI.
  3. Uses and Disclosures of PHI. The Provider Groups may use and disclose your PHI in the following ways:
    • Treatment, Payment and Healthcare Operations. The Provider Groups are permitted to use and disclose your PHI for purposes of (a) treatment, (b) payment and (c) healthcare operations. For example:
      • Treatment. The Provider Groups may disclose your PHI to a physician in connection with the provision of treatment to you.
      • Payment. The Provider Groups may use and disclose your PHI to your health insurer or health plan in connection with the processing and payment of claims and other charges.
      • Healthcare Operations. The Provider Groups may use and disclose your PHI in connection with their healthcare operations, such as providing customer services and conducting quality review assessments. The Provider Groups may engage third parties to provide various services on their behalf. If any such third party must have access to your PHI in order to perform its services, the Provider Groups will require the third party to enter into an agreement that binds the third party to the use and disclosure restrictions outlined in this Notice.
    • Authorization. The Provider Groups are permitted to use and disclose your PHI upon your written authorization, to the extent such use or disclosure is consistent with your authorization. Other uses and disclosures not described in this NPP will be made only with your written authorization. You may revoke any such authorization at any time. The Provider Groups will obtain your written authorization before using or disclosing psychotherapy notes (with limited exceptions), before marketing uses/disclosures, and before any sale of PHI. You may revoke an authorization as provided in 45 C.F.R. § 164.508(b)(5).
    • As Required by Law. The Provider Groups may use and disclose your PHI to the extent required by law.
    • Special Circumstances. The following categories describe unique circumstances in
      which the Provider Groups may use or disclose your PHI: The Provider Groups may use and disclose your PHI in the
      following ways:
      • Public Health Activities. The Provider Groups may disclose your PHI to public health authorities or other governmental authorities for purposes including preventing and controlling disease, reporting child abuse or neglect, reporting domestic violence and reporting to the Food and Drug Administration regarding the quality, safety and effectiveness of a regulated product or activity. The Provider Groups may, in certain circumstances, disclose PHI to persons who have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition.
      • Workers’ Compensation. The Provider Groups may disclose your PHI as authorized by, and to the extent necessary to comply with, workers’ compensation programs and other similar programs relating to work-related illnesses or injuries.
      • Health Oversight Activities. The Provider Groups may disclose your PHI to a health oversight agency for authorized activities such as audits, investigations, inspections, licensing and disciplinary actions relating to the healthcare system or government benefit programs.
      • Judicial and Administrative Proceedings. The Provider Groups may disclose your PHI, in certain circumstances, as permitted by applicable law, in response to an order from a court or administrative agency, or in response to a subpoena or discovery request.
      • Law Enforcement. The Provider Groups may, under certain circumstances, disclose your PHI to a law enforcement official, such as for purposes of identifying or locating a suspect, fugitive, material witness or missing person.
      • Decedents. The Provider Groups may, under certain circumstances, disclose PHI to coroners, medical examiners and funeral directors for purposes such as identification, determining the cause of death and fulfilling duties relating to decedents.
      • Organ Procurement. The Provider Groups may, under certain circumstances, use and disclose PHI for the purposes of organ donation and transplantation.
      • Research. The Provider Groups may, under certain circumstances, use or disclose PHI that is necessary for research purposes.
      • Threat to Health or Safety. The Provider Groups may, under certain circumstances, use or disclose PHI if necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
      • Specialized Government Functions. The Provider Groups may in certain situations, use and disclose PHI of persons who are, or were, in the Armed Forces for purposes such as ensuring proper execution of a military mission or determining entitlement to benefits. The Provider Groups may also disclose PHI to federal officials for intelligence and national security purposes.
    • Redisclosure Notice. PHI that we disclose to a third party may be redisclosed by the recipient and may no longer be protected by HIPAA, except where prohibited by other
      laws.
  4. Your Rights Regarding Your PHI. You have the following rights regarding the PHI maintained by the Provider Groups:
    • Confidential Communication. You have the right to receive confidential communications of your PHI. You may request that the Provider Groups communicate with you through alternate means or at an alternate location, and the Provider Groups will accommodate your reasonable requests. You must submit your request in writing to the Provider Groups.
    • Restrictions. You have the right to request restrictions on certain uses and disclosures of PHI for treatment, payment, or healthcare operations. You also have the right to request that the Provider Groups limit their disclosures of PHI to only certain individuals involved in your care or the payment for your care. You must submit your request in writing to the Provider Groups. The Provider Groups must agree to your request to restrict a disclosure to a health plan if the disclosure is for payment or healthcare operations (and not otherwise required by law) and the PHI pertains solely to an item or service for which you (or someone on your behalf) have paid in full. Otherwise, the Provider Groups are not required to comply with your request. However, if the Provider Groups agrees to comply with your request, they will be bound by such agreement, except when otherwise required by law or in the event of an emergency.
    • Inspection and Copies. You have the right to inspect and copy your PHI. You must submit your request in writing to the Provider Groups. The Provider Groups may impose a reasonable, cost-based fee that includes only: labor for copying, supplies (paper/electronic media), postage if mailed, and preparing an explanation/summary if you agree to receive one. The Provider Groups may deny your request to inspect and/or copy your PHI in certain limited circumstances. If that occurs, the Provider Groups will inform you of the reason for the denial, and you may request a review of the denial.
    • Amendment. You have a right to request that the Provider Groups amend your PHI if you believe it is incorrect or incomplete, and you may request an amendment for as long as the information is maintained by the Provider Groups. You must submit your request in writing to the Provider Groups and provide a reason to support the requested amendment. The Provider Groups may, under certain circumstances, deny your request by sending you a written notice of denial. If the Provider Groups deny your request, you will be permitted to submit a statement of disagreement for inclusion in your records.
    • Accounting of Disclosures. You have a right to receive an accounting of all disclosures the Provider Groups have made of your PHI. However, that right does not include disclosures made for treatment, payment, or healthcare operations, disclosures made to you about your treatment, disclosures made pursuant to an authorization, and certain other disclosures. You must submit your request in writing to the Provider Groups and you must specify the time period involved (which must be for a period of time less than six years from the date of the disclosure). Your first accounting will be free of charge. However, the Provider Groups may charge you for the costs involved in fulfilling any additional request made within a period of 12 months. The Provider Groups will inform you of such costs in advance, so that you may withdraw or modify your request to save costs.
    • Breach Notification. You have the right to be notified in the event that the Provider Groups (or Telegra, acting as a business associate) discovers a breach of unsecured PHI.
    • Paper Copy. You have the right to obtain a paper copy of this Notice from the Provider Groups at any time upon request. To obtain a paper copy of this Notice, please contact the Provider Groups by calling (855) 983-5347.
    • Complaint. You may complain to the Provider Groups and to the Secretary of the Department of Health and Human Services if you believe that your privacy rights have been violated. To file a complaint with the Provider Groups, you must submit a statement in writing to the Provider Groups at support@telegramd.com. The Provider Groups will not retaliate against you for filing a complaint.
    • Further Information. If you would like more information about your privacy rights, please contact the Provider Groups by calling (855) 983-5347 and ask to speak to the Privacy and Security Officer. To the extent you are required to send a written request to the Provider Groups to exercise any right described in this Notice, you must submit your request to 100 N Howard St, Ste R, Spokane, WA 99201.
  5. Changes to this Notice of Privacy Practices
    This Notice is in effect from the date noted above until the Provider Groups replace it. The Provider Groups reserve the right to change the terms of this Notice at any time, as long as the changes are in compliance with applicable law. If the Provider Groups change the terms of this Notice, the new terms will apply to all PHI that they maintain, including PHI that was created or received before such changes were made. If the Provider Groups change this Notice, they will post the new Notice on their website and will make the new Notice available upon request. The Provider Groups are required to abide by the terms of the Notice currently in effect.