Notice of Privacy Practices

Effective Date: August 28, 2026. This notice describes how medical information about you may be used and disclosed, and how you can get access to it. Please review it carefully.

Our Commitment to Your Privacy

Lifetouch LLC ("Lifetouch," "we," "us," or "our") is required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI. We are required to abide by the terms of this notice while it is in effect.

Treatment, Payment, and Healthcare Operations

Treatment. We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with other healthcare providers involved in your care, such as specialists, laboratories, imaging centers, and pharmacies to which we refer you, and other providers on your care team (including any physician, nurse practitioner, psychiatric mental health nurse practitioner, physical therapist, or clinical pharmacist involved in your care).

Payment. We do not bill health insurance and do not submit claims on your behalf. We may use and disclose your PHI as necessary to bill you directly and collect payment for the services we provide, including sending statements, processing payments, and, where permitted by law, pursuing collection of unpaid balances consistent with our Financial Policy and applicable New Mexico debt-collection protections.

Healthcare Operations. We may use and disclose your PHI for our own operations, such as quality assessment and improvement, staff training, compliance and risk-management activities, and business planning.

Other Uses and Disclosures We're Permitted or Required to Make

Without your written authorization, we may also disclose your PHI: as required by law; to avert a serious and imminent threat to your health or safety, or the health or safety of others; for public health activities such as reporting communicable disease, injuries, or medication reactions as required by New Mexico law; to report suspected abuse, neglect, or domestic violence to an authorized government authority; for health oversight activities such as audits, investigations, and licensure actions; in response to a court order, subpoena, warrant, or other lawful process; for law enforcement purposes in limited circumstances specified by law; to coroners, medical examiners, or funeral directors as necessary to carry out their duties; for research purposes, subject to applicable privacy safeguards; to workers' compensation or similar programs, as authorized by law; and to business associates who perform functions on our behalf (such as billing support, IT hosting, or scheduling) and are contractually required to safeguard your PHI.

Special-Category Information

Certain categories of your health information (including mental and behavioral health treatment, substance use disorder treatment, reproductive health, HIV/AIDS status, and genetic information) may receive heightened protection under federal or New Mexico law and may require your separate written authorization before we disclose that information, even for purposes otherwise described in this notice. See our Authorization to Release Medical Records form. If any of your records are separately maintained "psychotherapy notes" as specifically defined under HIPAA, those notes receive additional protection and generally will not be used or disclosed, even for treatment, payment, or healthcare operations, without your separate written authorization.

Minors

New Mexico law permits minors to consent to certain services on their own, and may limit parent or guardian access to information concerning those services. We apply New Mexico's minor-consent, confidentiality, disclosure, and mandatory-reporting laws on a service-specific basis. Requests for a minor's records by a parent or guardian are evaluated by our Privacy Officer on a case-by-case basis.

Marketing and Sale of Information

We will not sell your health information, and we will not use your health information for marketing purposes without your written authorization. All other uses and disclosures of your PHI not described in this notice will be made only with your written authorization, which you may revoke in writing at any time, except to the extent we have already relied on it.

Your Rights Regarding Your Health Information

You have the right to: request restrictions on certain uses and disclosures of your PHI (we're not required to agree, except we must agree to restrict disclosure to a health plan if you paid out of pocket in full and the disclosure is for payment or operations); request confidential communications, such as a different address or contact method; inspect and obtain a copy of your PHI, including through the patient portal at no cost, or in paper form for a reasonable fee (we will respond within 30 days as required by HIPAA, 45 CFR §164.524, with one 30-day extension if we notify you in writing of the reason); request an amendment to your PHI if you believe it's incorrect or incomplete; receive an accounting of certain disclosures made in the six years before your request; receive a paper copy of this notice on request, even if you've agreed to receive it electronically; be notified in the event of a breach of your unsecured PHI; and file a complaint with us or with HHS if you believe your privacy rights have been violated (see Complaints below). We will not retaliate against you for filing a complaint.

To exercise any of these rights, contact us using the information below.

Changes to This Notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have as well as PHI we receive in the future. We will post the current notice on our website and make copies available on request.

Medical Records Policy

Lifetouch LLC keeps your medical records electronically, in a secure electronic health record.

• Records contact: Privacy Officer, Dr. Quynh-Anh Bui, Lifetouch LLC, 3705 Ellison Dr NW Ste B1 PMB 487, Albuquerque, NM 87114, (505) 226-6455.
• How to get or transfer your records: send a request through the patient portal, mail it to the address above, or call us. We respond within 30 days.
• How long we keep records: at least 10 years after your last treatment. Records of patients treated as minors are kept at least until the patient turns 21, whichever is later. Billing records are kept at least 2 years after your last treatment. Paper records converted to electronic form are kept at least 30 days after conversion. When records reach the end of their retention period, we destroy them confidentially by shredding or permanent electronic deletion.
• Cost: records in the patient portal are free. Electronic copies, and electronic transfers to another provider, are free. Paper copies may carry a reasonable, cost-based fee for supplies, copying labor, and postage. We will tell you the amount before we make any copies.

Contact Information

Lifetouch LLC
3705 Ellison Dr NW Ste B1 PMB 487, Albuquerque, NM 87114
(505) 226-6455 · qabuimd@gmail.com

Privacy Officer: Dr. Quynh-Anh Bui

Complaints

You may file a complaint with us using the contact information above, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, 1-877-696-6775, hhs.gov/hipaa.