Notice of Privacy Practices
Effective Date: January 1, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1) Who This Notice Covers
This Notice of Privacy Practices ("Notice") is provided by AyaRx Providers PC ("AyaRx," "we," "us," or "our") and applies to AyaRx and its workforce (including clinicians and staff) when we provide healthcare services to you, including via telehealth.
This Notice describes how we may use and disclose your Protected Health Information ("PHI") and explains your rights regarding PHI.
2) Relationship to Chia Health (Zerolimit Tech LLC)
Telehealth services offered through Chia Health are provided by AyaRx clinicians. Zerolimit Tech LLC d/b/a Chia Health ("Chia") is not a healthcare provider and is not "we" under this Notice.
Chia provides technology and administrative services that help you access AyaRx services (for example, telehealth technology, scheduling, patient messaging, and customer support). To the extent Chia creates, receives, maintains, or transmits PHI on behalf of AyaRx, Chia is required to safeguard PHI and may use or disclose PHI only as permitted by law and written agreement.
3) Our Responsibilities
We are required by law to:
- Maintain the privacy and security of your PHI;
- Provide you with this Notice of our legal duties and privacy practices;
- Follow the terms of this Notice currently in effect; and
- Notify you as required by law if there is a breach of unsecured PHI.
4) How We May Use and Disclose PHI Without Your Authorization
We may use and disclose PHI as permitted by HIPAA and other applicable law, including:
Treatment
To provide, coordinate, or manage your healthcare (including prescribing and managing GLP-1 medications when clinically appropriate) and to coordinate with pharmacies, laboratories (if applicable), and other providers involved in your care.
Payment
To bill and collect payment for services and related activities (including health plan billing where applicable).
Healthcare Operations
To operate our practice and improve quality (for example, quality improvement, training, compliance, credentialing, auditing, and business administration).
Business Associates/Vendors
We may disclose PHI to vendors that perform services on our behalf (such as electronic health record systems, telehealth technology providers, cloud hosting providers, billing support, and administrative/technology vendors). These parties are required to safeguard PHI and are limited in how they may use it.
People Involved in Your Care
We may disclose PHI to a family member, friend, or someone else involved in your care or payment for your care as permitted by law and consistent with your preferences (when applicable).
Required or Permitted by Law
For example, certain public health activities, health oversight activities, legal proceedings, law enforcement requests, reporting abuse/neglect where required, workers' compensation, and to prevent a serious threat to health or safety, as permitted by law.
5) Uses and Disclosures That Typically Require Your Written Authorization
We will obtain your written authorization for uses and disclosures of PHI when required by law. In general, this includes most uses and disclosures of psychotherapy notes, certain marketing uses, and any sale of PHI.
You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.
6) Your Rights Regarding Your PHI
You have the right (with limited exceptions) to:
- Access: inspect and obtain a copy of PHI in a designated record set (generally including medical and billing records);
- Amend: request correction of PHI you believe is incorrect or incomplete;
- Accounting: request a list of certain disclosures of PHI we made (generally up to six years), excluding disclosures for treatment, payment, and healthcare operations and certain other exceptions;
- Restrictions: request limits on certain uses/disclosures (we are not required to agree in all cases). If you pay in full out-of-pocket for a specific item or service and request we not disclose PHI about that item or service to a health plan for payment or healthcare operations, we will honor that request unless a law requires disclosure;
- Confidential Communications: request that we contact you in a specific way or at a specific location; and
- Paper Copy: request a paper copy of this Notice at any time.
7) How to Exercise Your Rights
Submit requests to the contact information below. We may ask you to verify your identity. We may charge a reasonable, cost-based fee as permitted by law for certain requests.
AyaRx Privacy Contact
8) Changes to This Notice
We may change this Notice at any time. The new Notice will apply to PHI we already have about you as well as PHI we receive in the future. The current Notice is always available at this page.
9) Complaints
If you believe your privacy rights have been violated, you may file a complaint with AyaRx using the contact information above. We will not retaliate against you for filing a complaint.