Notice of Privacy Practices
Effective Date: March 1, 2026
Boulder Medical Center, P.C. (“BMC,” “we,” “us,” or “our”) is required by law to maintain the privacy of your Protected Health Information (“PHI”), to provide you with this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.
This notice describes how medical information about you may be used and disclosed, and how you can access this information. Please review it carefully.
Your Protected Health Information
Protected Health Information (PHI) includes information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for that care. PHI may be maintained in paper or electronic form, including within our electronic health record system.
How We May Use and Disclose Your Health Information
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your medical care and related services. This includes consultation with other healthcare providers, referrals, laboratory services, pharmacy services, hospital coordination, and telehealth services.
Payment
We may use and disclose your PHI to bill and collect payment for services provided to you. This may include submitting claims to insurance carriers, verifying coverage, obtaining prior authorization, and billing and collection activities.
If you pay in full out-of-pocket for a specific service and request that we not disclose that information to your health plan, we are required to honor that request unless disclosure is otherwise required by law.
Healthcare Operations
We may use and disclose your PHI for healthcare operations, including quality improvement activities, care coordination, credentialing, training, compliance programs, auditing, legal services, and general administrative activities.
We may contact you regarding treatment alternatives or health-related services that may be of interest to you.
Other Permitted and Required Disclosures
We may disclose your PHI when required by federal, state, or local law, including for public health activities, health oversight activities, judicial or administrative proceedings, law enforcement purposes, research approved by an Institutional Review Board, workers’ compensation, organ donation, and to prevent or lessen a serious threat to health or safety.
Uses and Disclosures Requiring Authorization
We will obtain your written authorization for uses and disclosures of your protected health information that are not described in this Notice and are not otherwise permitted by law. We will obtain your written authorization for most marketing communications when required by law and for any sale of your protected health information. We do not sell your protected health information. You may revoke your authorization at any time in writing, except to the extent we have already relied upon it.
Substance Use Disorder Records – Additional Federal Protections
Federal law (42 CFR Part 2) provides additional confidentiality protections for records relating to substance use disorder (SUD) diagnosis, treatment, or referral for treatment. If your medical record contains SUD treatment information that is subject to 42 CFR Part 2, we will not disclose that information without your written authorization unless permitted by law.
These protections are in addition to the protections provided under HIPAA.
Appointment Reminders and Communications
We may contact you to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you. As a courtesy to our patients, we may contact you to remind you of scheduled appointments. If you are unavailable, we may leave a limited message that includes your name, the date and time of your appointment, the provider’s name, and a request that you contact our office if necessary. We may communicate with you by phone, voicemail, email, text message, or secure patient portal messaging regarding appointments and care. If you choose to communicate with us via unencrypted email or text message, you acknowledge the potential privacy and security risks associated with those methods. We will not use or disclose your protected health information for marketing purposes that require your authorization without your written permission.
Breach Notification
We are required by law to notify you following a breach of your unsecured protected health information.
Your Rights Regarding Your Health Information
You have the right to request restrictions on certain uses and disclosures, request confidential communications, inspect and obtain a copy of your medical record (including an electronic copy), request amendments to your record, receive an accounting of certain disclosures, and obtain a paper copy of this Notice.
Changes to This Notice
We reserve the right to revise this Notice at any time. The revised Notice will apply to all health information we maintain and will be posted in our offices and on our website.
Questions or Complaints
If you have questions about this Notice or believe your privacy rights have been violated, please contact:
Privacy Officer
Boulder Medical Center, P.C.
2750 Broadway
Boulder, CO 80304
Phone: (303) 440-3252
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.