MALE MEDICAL GROUP
NOTICE OF PRIVACY PRACTICES
Effective date: October 28, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice of Privacy Practices (“Notice”) applies to Male Medical Group Management, LLC, which does business as Male Medical Group and, for its women’s health services, as MMG for Her, and to its providers and employees. We share protected health information (“PHI”) about our patients only as needed to carry out treatment, payment and health care operations, or as otherwise permitted or required by law.
OUR LEGAL DUTIES
We are required by law to maintain the privacy and security of your PHI, to give you this Notice of our legal duties and privacy practices, and to follow the terms of this Notice while it is in effect. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your PHI. We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by telling us in writing.
We may change the terms of this Notice, and the new terms will apply to all PHI we maintain. The current Notice is posted on our website and a copy is available on request. Texas law, including the Texas Medical Records Privacy Act (Texas Health and Safety Code, Chapter 181), may protect your information more strictly than HIPAA does. We follow whichever law is more protective of you.
HOW WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION
For Treatment:
We use and share your PHI as needed for your treatment. Our providers and staff use the information in your medical record and the information you give us about your symptoms, medical history, medications, test results and response to treatment. We may share it with other providers, laboratories and pharmacies involved in your care.
For Payment:
We use and share your PHI as needed to get paid for services, such as to prepare a bill for you or the person responsible for your payment, or to send information to your insurance company or other payer if one is used.
For Health Care Operations:
We use and share your PHI for the operation of our practice, such as quality improvement, training, professional review, business management, accreditation and licensing, and for improving clinical treatment and patient care.
Individuals Involved in Your Care:
We may share limited PHI with a family member, friend or other person you identify who is involved in your care or in paying for your care. If you are unavailable, incapacitated or facing an emergency, we may share limited PHI with such a person if we decide it is in your best interest. We may also share limited PHI with a public or private entity authorized to assist in disaster relief so that it can locate a family member or others involved in your care.
Business Associates:
Some of our services are provided by outside persons or organizations under contract, such as record-keeping, telehealth video, website, email, billing, auditing and legal services. We may share your PHI with them as needed for the work they do for us. We require each of them to sign an agreement to protect the privacy and security of your information.
Appointments and Services:
We may contact you to remind you of appointments or to give you information about your treatment or other health-related services. We contact you by phone or email unless you ask us to use another method.
Research:
We do not use or disclose your PHI for research.
Other Uses and Disclosures Permitted or Required by Law:
We may use or share your PHI without your authorization in the following situations:
- when required by law;
- for public health activities, such as reporting disease, injury, birth and death, or in connection with public health investigations;
- to report suspected abuse, neglect or domestic violence to the proper authorities;
- to the Food and Drug Administration to report adverse events or product defects, or to take part in product recalls;
- to your employer, when we provided health care to you at your employer’s request;
- to a government agency that oversees health care, for audits, investigations, inspections and licensing;
- in response to a court or administrative order, subpoena or other lawful discovery request;
- to law enforcement officials as required or permitted by law;
- to coroners, medical examiners and funeral directors, consistent with law;
- to arrange an organ or tissue donation from you or a transplant for you;
- to prevent or lessen a serious and imminent threat to the health or safety of a person or the public;
- for national security and intelligence activities, and for members of the military as required by law; and
- to workers’ compensation programs, as authorized by law.
USES AND DISCLOSURES THAT REQUIRE YOUR WRITTEN AUTHORIZATION
Except as described in this Notice, we will not use or disclose your PHI unless you sign a written authorization. You may revoke an authorization in writing at any time. The revocation takes effect when we receive it, but it will not apply to anything we already did in reliance on your authorization.
Psychotherapy Notes:
We must have your specific written authorization before disclosing psychotherapy notes, except as the law otherwise permits, for example for certain treatment, payment or health care operations purposes, to the Secretary of the U.S. Department of Health and Human Services to determine our compliance with the law, as required by law, for health oversight activities, to coroners or medical examiners, or to prevent or lessen a serious and imminent threat to health or safety.
Genetic Information:
We may not use or disclose genetic information for underwriting purposes. We use or disclose genetic information only as the law permits.
Acknowledgment of Receipt:
We ask each patient to sign an acknowledgment that they received this Notice.
Marketing:
We must have your authorization to use or disclose your PHI for marketing, except for a face-to-face conversation with you or a promotional gift of nominal value. Texas law also places limits on marketing uses of PHI. You may ask us not to send you marketing materials, and we will honor your request.
Sale of Protected Health Information:
We must have your authorization before we receive any payment in exchange for your PHI, except in the limited cases the law allows, such as for public health activities, treatment and payment, certain research, or as required by law. We do not sell PHI.
YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION
Right to Access Your PHI:
You have the right to inspect and get a copy of much of the PHI we keep about you. If we keep it electronically, you may request a copy in a reasonable electronic form if we can readily produce one. Requests must be made in writing and signed by you or your legal representative. We will respond within the time required by law, which may be shorter under Texas law for electronic records. We may charge a reasonable, cost-based fee for copies, postage and supplies, as the law allows. You may get an access request form by calling the Privacy Officer at (210) 263-9878.
Right to Amend Your PHI:
If you believe PHI we hold about you is wrong or incomplete, you may ask us in writing to correct it. Your request must be signed and must state the reason. We may deny the request in some cases, and if we do, we will explain why in writing and you may submit a statement of disagreement. You may get an amendment request form by calling the Privacy Officer at (210) 263-9878.
Right to an Accounting of Disclosures:
You have the right to ask for a list of certain disclosures of your PHI that we have made in the six years before your request, other than those for treatment, payment and health care operations and certain others the law excludes. Requests must be made in writing. The first accounting in any 12-month period is free. We may charge a reasonable, cost-based fee for additional requests in the same period, and we will tell you the fee before we prepare it.
Right to Request Restrictions:
You have the right to ask us to limit how we use or share your PHI for treatment, payment or health care operations. We are not required to agree to most requests, but we will consider reasonable requests. We must agree to your request not to share PHI with a health plan for payment or health care operations purposes if the PHI relates only to an item or service that you or someone other than the health plan paid for in full, unless the law requires the disclosure. If we agree to a restriction, we will follow it except in an emergency or as the law requires, and we will tell you if we end a restriction that we are permitted to end.
Right to Confidential Communications:
You have the right to ask us to contact you about your health information in a certain way or at a certain place, for example by calling only your mobile phone or sending mail to a different address. We will say yes to reasonable requests. Please tell us in writing how and where you want us to contact you.
Right to Notice of a Breach:
You have the right to be notified if there is a breach of your unsecured PHI. We will notify you without unreasonable delay and no later than the time the law requires, and we will tell you what happened and what steps you can take to protect yourself.
Right to a Paper Copy of This Notice:
You may ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically. Please ask the Privacy Officer at the address below.
Acknowledgment of Receipt:
We ask each patient to sign a form acknowledging that they received this Notice. Your care does not depend on signing it.
Complaints:
If you believe your privacy rights have been violated, you may file a complaint in writing with our Privacy Officer at the address below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints, by calling 1-877-696-6775, or by mail to 200 Independence Avenue SW, Washington, D.C. 20201. You may also contact the Texas Attorney General. We will not retaliate against you for filing a complaint.
FOR FURTHER INFORMATION
If you have questions, need help, or want to make a request under this Notice, please contact our Privacy Officer:
Alexandrah Castillo, Manager and Privacy Officer
Male Medical Group Management, LLC (Male Medical Group and MMG for Her)
14607 San Pedro Ave., Suite 190, San Antonio, TX 78232
Phone: (210) 263-9878
Email: Alexandrah@malemedicalgroup.com
Website: www.MaleMedicalGroup.com
This Notice of Privacy Practices is also available on our website at www.MaleMedicalGroup.com.