HIPAA Notice of Privacy Practices

Last updated: February 2026

Effective Date: February 2026
This notice describes how medical information about you may be used and disclosed and how you can get access to this information.

1. Introduction

TruYouMed (operated by Kristine Benson, NP) is committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes our legal obligations and your rights regarding Protected Health Information (PHI). PHI is information in your medical record or other health information that identifies you or can be reasonably linked to you.

This is a direct-pay concierge functional medicine practice. While we do not bill insurance, we are still bound by the Health Insurance Portability and Accountability Act (HIPAA) and its Privacy and Security Rules.

2. Uses and Disclosures of Protected Health Information

We may use and disclose your PHI in the following ways:

2.1 For Treatment

We use your health information to provide you with functional medicine consultations, treatment plans, health coaching, and related services. We may also use this information to coordinate your care with other healthcare providers when you authorize such coordination.

Example: Your provider uses your medical history and current symptoms to develop a personalized treatment plan.

2.2 For Payment

Although TruYouMed is a direct-pay practice and does not bill insurance, we may use your health information to create itemized receipts or bills for services rendered. You may use these receipts to submit to your insurance company for reimbursement at your discretion.

Example: We send you an invoice for services provided along with a detailed description of services for insurance purposes.

2.3 For Healthcare Operations

We may use and disclose your health information for business operations of TruYouMed, including:

  • Quality improvement and outcome analysis

  • Training of staff and students

  • Accreditation and licensing activities

  • Business planning and management

  • Customer service and communication

  • Administrative and financial activities

2.4 Other Uses and Disclosures

We may use or disclose your health information in the following circumstances without your authorization:

  • Legal Requirements: When required by law, court order, or legal process

  • Public Health Activities: To report disease, injury, abuse, or disability to public health authorities

  • Law Enforcement: When requested by law enforcement for limited purposes such as solving crimes

  • Health and Safety: When there is an imminent danger to your health and safety or that of others

  • Workers' Compensation: As required by workers' compensation laws

  • Research: In de-identified form (information that does not identify you) for research purposes

  • Business Partners: To service providers and business partners under written agreements that require them to maintain privacy

  • Diagnostic Partners: Laboratory and imaging facilities as necessary for testing and analysis as part of your care

2.5 Disclosures Requiring Your Authorization

For any use or disclosure of your health information not described in this Notice, we will obtain your prior written authorization. You may revoke any authorization at any time by providing written notice.

3. Patient Rights

3.1 Right to Access Your Health Information

You have the right to access, review, and obtain a copy of your medical records and health information. To request access, submit a written request to TruYouMed. We will provide the requested information within 30 days. We may charge reasonable costs for copying, mailing, and other labor associated with your request.

3.2 Right to Request Amendment

You have the right to request that we amend or correct information in your medical record if you believe it is inaccurate or incomplete. Submit your request in writing specifying the information you believe is incorrect and your reason for the amendment request.

We will respond to your request within 60 days. We may deny your request if we determine the information is accurate and complete, not part of our records, or not created by us. If we deny your request, you have the right to submit a written statement of disagreement.

3.3 Right to an Accounting of Disclosures

You have the right to request an accounting of disclosures—a list of the times we have disclosed your health information, to whom, and why. The accounting will not include disclosures made for treatment, payment, healthcare operations, or as otherwise permitted by law.

Submit your request in writing. We will provide the accounting within 60 days. The first accounting in a 12-month period is free; additional accountings may be subject to a reasonable fee.

3.4 Right to Request Restrictions

You have the right to request that we restrict how we use or disclose your health information. For example, you may request that we not share information with a specific family member or that we not use information for a particular purpose.

Submit your request in writing specifying the restriction you are requesting. While we will consider your request, we are not required to agree to restrictions unless we have agreed to restrict disclosure to a health plan that does not intend to use the information for treatment or payment.

3.5 Right to Request Confidential Communications

You have the right to request that we communicate with you about your health information in a particular way or to a particular location to ensure confidentiality. For example, you may request that we call you only at work or send correspondence only to a specific address.

Submit your request in writing. We will accommodate reasonable requests.

3.6 Right to Request a Restricted Copy

You have the right to request a restricted copy of your health information that excludes specific information you designate, subject to applicable legal requirements.

3.7 Right to Receive Notification of a Breach

If there is a breach of your unsecured health information, you have the right to be notified promptly of the breach, the information involved, what we are doing to investigate and mitigate harm, and what you can do to protect yourself.

3.8 Right to a Paper Copy of This Notice

You have the right to request a paper copy of this Notice at any time, even if you have previously received an electronic copy.

4. Provider Duties and Responsibilities

4.1 Our Privacy and Security Obligations

TruYouMed is required by law to:

  • Maintain the privacy and security of your Protected Health Information

  • Provide you with this Notice of Privacy Practices

  • Notify you if there is a breach of your unsecured health information

  • Apply reasonable safeguards to protect your health information

  • Respect your rights regarding your health information

4.2 Our Security Practices

We implement comprehensive security measures to protect your health information:

  • Encrypted transmission and storage of health information

  • Secure access controls with unique user identifiers and passwords

  • Limited access to health information for authorized personnel only

  • Regular security training for all staff

  • Physical security measures protecting paper and electronic records

  • Regular backup and disaster recovery procedures

  • Audit controls to track access to health information

5. Changes to This Notice

We may change this Notice at any time. We will provide you with a revised Notice if we make material changes to our privacy practices. The "Last updated" date above reflects when this Notice was last revised.

6. How to File a Complaint

6.1 Complaints to TruYouMed

If you believe that your privacy rights have been violated or that we have not complied with this Notice, you may file a complaint with TruYouMed. Send your written complaint to:

  • Email: truyoumed.kb@gmail.com

  • Phone: +1 (720) 587-7301‬

  • Practice: TruYouMed

  • Provider: Kristine Benson, NP

  • Location: Denver, Colorado

We will respond to your complaint within 30 days. You will not be retaliated against or penalized for filing a complaint.

6.2 Complaints to the Office for Civil Rights (OCR)

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) if you believe we have violated your HIPAA rights. You must file the complaint within 180 days of discovering the violation.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue S.W.
Washington, D.C. 20201
Phone: 1-800-368-1019
Website: https://www.hhs.gov/ocr/privacy/hipaa/

7. Contact Information

For questions about this Notice, your privacy rights, or to exercise any of your rights described in this Notice, please contact us:

  • Email: truyoumed.kb@gmail.com

  • Phone: +1 (720) 587-7301‬

  • Practice: TruYouMed

  • Provider: Kristine Benson, NP

  • Location: Denver, Colorado

We will respond to all requests and inquiries within 30 days of receipt.

8. Concierge/Direct-Pay Practice Specific Information

TruYouMed is a direct-pay concierge functional medicine practice. This means:

  • We do not submit claims to insurance companies

  • We do not participate in insurance networks

  • Patients pay directly for services at the time of service

  • Itemized receipts are provided for patients to submit to their insurance for potential reimbursement at their discretion

  • We maintain the same HIPAA privacy and security standards as all healthcare providers

  • Your health information is protected and treated as confidential

9. Additional Resources

Acknowledgment of Receipt

I acknowledge that I have received a copy of the HIPAA Notice of Privacy Practices for TruYouMed.

You do not need to sign a paper copy. Simply accessing this notice and engaging with TruYouMed services constitutes your acknowledgment. We will provide a physical or electronic copy upon request.