SPRAYBERRY HEALTH LLC d/b/a SPRAYBERRY PEDIATRICS NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU OR YOUR CHILD MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
Effective Date: 8/19/2026
Our Duties
Sprayberry Health LLC d/b/a Sprayberry Pediatrics (the “Practice, ” “we, ” “us”) is required by the Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable law and regulations to maintain the privacy and security of your child's protected health information (“PHI”), to give you this Notice of our legal duties and privacy practices with respect to PHI, and to notify you following a breach of unsecured PHI. We are required to abide by the terms of the Notice currently in effect. This Notice describes how we may use and disclose your child’s PHI and our privacy practices and your rights regarding PHI. Because this is a pediatric practice, the patient is ordinarily a minor child, and this Notice refers to "you" as the parent or legal guardian acting on the child's behalf, except where the child has the right to act for themselves under law.
How We May Use and Disclose PHI Without Your Authorization
Treatment. We use and disclose PHI to provide, coordinate, and manage your child's care, including sharing information with other providers involved in that care, such as specialists, laboratories, or a hospital, and including care delivered by telehealth.
Payment. We are a cash-pay practice and do not bill health insurers. We use PHI to charge and collect the fees for your child's care - for example, processing payment through our payment processor. We do not submit claims to, or seek payment from, any health insurer or government program.
Health Care Operations. We use and disclose PHI to run the Practice - for example, quality review, training, care coordination, scheduling, and administrative functions.
Business Associates. We may share PHI with vendors who perform services for us (such as our payment processor, electronic records system, or telehealth platform), each of which is required by a written agreement to protect PHI.
Appointment Reminders and Communications. We may use PHI to contact you about appointments, results, and your child's care, including by phone, email, and text as you have authorized.
As Required by Law; Public Health and Safety. We may use or disclose PHI when required by law, including: reporting suspected child abuse or neglect under O.C.G.A. § 19-7-5; public-health activities; responding to a valid subpoena, court order, or law-enforcement request as permitted by law; preventing a serious threat to health or safety; and health-oversight activities. We will limit such disclosures to what the law requires or permits.
Persons Involved in Care. Unless you object, we may share relevant PHI with a family member or other person you involve in your child's care.
Other Uses and Disclosures That Require Your Written Authorization
Most uses and disclosures not described above will be made only with your written authorization, which you may revoke at any time (except to the extent we have already acted on it). This includes any sale of PHI, psychotherapy notes (where applicable), and marketing communications and other disclosures for which authorization is required by applicable law. Communications about the Practice's own products and services, your child's care, refill reminders, and similar communications are generally not "marketing" requiring authorization.
To the extent maintained by the Practice, certain categories of information - including substance use disorder records, HIV/AIDS-related information, mental health information, genetic information, and certain reproductive health care information – may have additional legal protections and require specific authorization before we disclose them.
Your Rights
Access and Copies. You have the right to inspect and obtain a copy of your child's records, consistent with O.C.G.A. § 31-33-2 (records furnished within 30 days of a written request, with charges as allowed by O.C.G.A. § 31-33-3).
Amendment. You may request that we amend PHI you believe is incorrect or incomplete; we may deny the request in certain circumstances and will explain why.
Accounting of Disclosures. You may request a list of certain disclosures we have made, other than those for treatment, payment, operations, and certain others.
Request Restrictions. You may ask us to restrict how we use or disclose PHI. We are not required to agree, except that we must agree to a request not to disclose PHI to a health plan for a service you paid out of pocket. Because we are a cash-pay practice and do not bill insurers, PHI about your child's care is not disclosed to any health plan in the ordinary course.
Confidential Communications. You may ask us to communicate with you by alternative means or at an alternative location, and we will accommodate reasonable requests.
Paper Copy. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Choose Someone to Act for You. A parent, legal guardian, or person with legal authority may exercise these rights on the child's behalf, to the extent allowed by law.
Complaints. You may complain to us or to the U.S. Department of Health and Human Services, Office for Civil Rights, if you believe your privacy rights have been violated. To file a complaint with us, contact our Privacy Officer at the address or phone number below. We will not retaliate against you for filing a complaint.
Minors and Parents
In most cases a parent or legal guardian is the child's personal representative and may exercise these rights for the child. In the limited circumstances where Georgia law allows a minor to consent to their own care, the minor may control the related information, and a parent's access may be limited accordingly. In those circumstances, the Practice may be prohibited from disclosing the information to a parent or guardian without the minor's authorization.
Breach Notification
We will notify you without unreasonable delay upon our discovery of a breach that compromises the privacy or security of your child's unsecured PHI, as required by law.
Changes to This Notice
We reserve the right to change this Notice and to make the revised Notice effective for PHI we maintain, including PHI created or retained before the change. The revised Notice will be posted in our office and on our website, and a copy will be available on request.
Contact
Privacy Officer: David R. Sprayberry, MD, CEO, Sprayberry Health LLC, 1618 Mars Hill Rd, Suite A, Watkinsville, GA 30677. Phone: 470-780-2004; Email: info@sprayberrypediatrics.com