Notice of Privacy Practices | Rochester Medical Weight Loss

  • Home
  • Privacy Practices

Notice of Privacy Practices

Notice of Privacy Practices

Effective Date: June 8, 2026

This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Rochester Medical Weight Loss ("RMWL," "we," "us," or "our") is a medical practice led by Dr. Rachel Conley, MD (Board Certified Internal Medicine; Diplomate of the American Board of Obesity Medicine). This Notice applies to our physicians, nurses, staff, and anyone working with us who has access to your protected health information.

Our Responsibilities

We are required by law to protect your health information.

  • Maintain the privacy and security of your protected health information ("PHI").
  • Provide you with this Notice of our legal duties and privacy practices.
  • Follow the terms of this Notice that are currently in effect.
  • Notify you if a breach occurs that may have compromised the privacy or security of your information.

How We May Use and Disclose PHI

Common ways we may use and share your health information

We may use and share your PHI in the following ways. In most cases, we are allowed to use and disclose PHI without obtaining written authorization from you.

1. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care.

Examples: communicating with other health care providers, reviewing lab results, prescribing medications, and coordinating your plan of care.

2. Payment

We may use and disclose your PHI to bill and obtain payment for services.

Examples: billing your insurance, if applicable, responding to insurance requests, or collecting payment.

3. Health Care Operations

We may use and disclose your PHI for certain business operations necessary to run our practice.

Examples: quality assessment, staff training, auditing, licensing, legal services, and general business management.

4. Appointment Reminders and Health-Related Communications

We may contact you to remind you about appointments or to provide information about treatment alternatives or other health-related benefits and services.

Other Common Disclosures Allowed by Law

Other situations where PHI may be shared

People involved in your care
We may share PHI with a family member, friend, or other person involved in your care or payment for care unless you object. We may also share relevant information during an emergency.
As required by law
We may share PHI when required by federal, state, or local law.
Public health and safety
We may share PHI for public health activities, such as reporting certain diseases, or to prevent or reduce a serious threat to health or safety.
Health oversight activities
We may disclose PHI to health oversight agencies for audits, investigations, inspections, and licensing.
Abuse, neglect, or domestic violence
We may disclose PHI to appropriate authorities if we believe you may be a victim of abuse, neglect, or domestic violence, as permitted by law.
Legal proceedings and law enforcement
We may disclose PHI in response to a court order, subpoena, or other lawful process, and for law enforcement purposes as permitted by law.
Coroners, medical examiners, and funeral directors
We may disclose PHI to coroners, medical examiners, and funeral directors as necessary.
Organ donation
We may share PHI with organ procurement organizations as needed.
Workers' compensation
We may disclose PHI for workers' compensation claims as permitted by law.
Military, national security, and inmates
We may disclose PHI for specialized government functions, including military and national security purposes, and to correctional institutions or law enforcement regarding inmates as permitted by law.

Written Authorization

Uses and disclosures that require your written authorization

In most cases, we will not use or share your PHI for the following without your written permission:

  • Marketing, with certain limited exceptions allowed by law
  • Sale of PHI
  • Most sharing of psychotherapy notes, if applicable

You may revoke your authorization in writing at any time, except to the extent we have already acted on it.

Your Rights

Your rights regarding your protected health information

You have certain rights regarding your PHI. To exercise these rights, contact us using the information at the bottom of this Notice.

1

Get a copy of your medical records

You can ask to see or obtain a copy of your medical records and other health information we have about you. We will provide a copy or summary, usually within 30 days. We may charge a reasonable, cost-based fee.

2

Ask us to correct your medical record

You can ask us to correct health information you believe is incorrect or incomplete. We may deny the request in certain cases, but we will explain why in writing.

3

Request confidential communications

You can ask us to contact you in a specific way, such as calling your work phone, or to send mail to a different address. We will say yes to reasonable requests.

4

Ask us to limit what we use or share

You can ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree to your request, and we may say no if it would affect your care.

Important right: If you pay for a service or health care item out of pocket in full, you can ask us not to share that information with your health plan for payment or operations. We will say yes unless a law requires us to share that information.

5

Get a list of disclosures

You can ask for a list, also called an accounting, of certain disclosures we have made of your PHI, typically for the past 6 years. This excludes disclosures for treatment, payment, operations, and certain other exceptions. We will provide one free list per year; additional lists may have a reasonable fee.

6

Get a paper copy of this Notice

You can ask for a paper copy at any time, even if you agreed to receive this Notice electronically.

7

Choose someone to act for you

If you have a legal guardian, medical power of attorney, or other authorized representative, that person can exercise your rights and make choices about your PHI after we verify authority.

Electronic communications

If you communicate with us by email or text, there may be privacy risks. If you prefer not to use email or text, let us know and we will use alternate methods when possible.

For scheduling and secure messaging, we use the OnPatient Patient Portal, which is intended to be a more secure option than standard email or text messaging.

Additional protections

Certain types of health information may have additional protections under applicable laws. When those laws provide greater privacy protection than HIPAA, we follow the stricter requirements.

Changes to this Notice

We may change the terms of this Notice, and the changes will apply to all PHI we maintain. The updated Notice will be available in our office and on our website.

Questions or Complaints

Contact us about this Notice

If you have questions about this Notice or believe your privacy rights have been violated, contact us:

Rochester Medical Weight Loss
61C Monroe Avenue
Pittsford, NY 14534

Phone: 585-485-0802

Email: Email Rochester Medical Weight Loss