Dr. Brad ShookFunctional Medicine
Home›HIPAA Notice of Privacy Practices
Health Information Privacy

Notice of Privacy Practices

This notice explains how medical information about you may be used and disclosed, how you can get access to that information, and the privacy rights available to you.

The Office of Dr. Brad ShookEffective September 15, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices applies to protected health information maintained by The Office of Dr. Brad Shook when the practice is acting as a health care provider subject to the HIPAA Privacy Rule. It is separate from the general Privacy Policy, which addresses ordinary website and consumer data.

Privacy Officer: The Office of Dr. Brad Shook
Phone: (828) 324-0800
Address: 901 Hwy 321 NW, Hickory, NC 28601

Your Health Information Rights

When it comes to your health information, you have important rights. Subject to applicable law and limited exceptions, you may:

Get a copy of your health recordYou may ask to see or receive an electronic or paper copy of health information we maintain about you. We will respond as required by applicable law and may charge a reasonable, cost-based fee where permitted.
Ask us to correct your health recordYou may ask us to amend information you believe is incorrect or incomplete. If we deny a request, we will explain the reason as required by law.
Request confidential communicationsYou may ask us to contact you in a specific way or at a specific location. We will accommodate reasonable requests as required by law.
Ask us to limit what we use or shareYou may ask us not to use or disclose certain health information for treatment, payment, or health care operations. We are not required to agree to every request, but special rules may apply when you pay in full out of pocket and ask us not to disclose information to a health plan for payment or operations purposes.
Get an accounting of certain disclosuresYou may request a list of certain disclosures of your health information for the period allowed by law.
Get a copy of this noticeYou may request a paper or electronic copy of this Notice at any time.
Choose someone to act for youIf you have given someone medical power of attorney or that person is your legal guardian or personal representative, that person may exercise rights on your behalf as permitted by law.
File a complaintYou may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences about what we share. Depending on the circumstances, this may include sharing information with family members, close friends, or others involved in your care or payment for your care, or sharing information in a disaster-relief situation.

When required by law, we will obtain your written authorization before using or disclosing protected health information for marketing purposes, selling protected health information, or using most psychotherapy notes. You may revoke an authorization in writing, except to the extent action has already been taken in reliance on it.

If fundraising communications involving protected health information are ever used, you will have the right to tell us not to contact you again.

How We May Use or Share Health Information

Treatment

We may use health information and share it with other professionals involved in your care. For example, information may be shared with another provider or a laboratory when needed to coordinate services you request or receive.

Health Care Operations

We may use and share health information to run the practice, improve services, manage records, conduct quality activities, support legal and compliance functions, secure our systems, and work with vendors or business associates that perform services on our behalf and are required to safeguard protected health information when applicable.

Payment

We may use or disclose health information to bill for services, process payments, or support payment-related activities where applicable. If services are self-pay and no health plan is involved, this use may be limited accordingly.

Appointment Reminders and Care Communications

We may use health information to contact you about appointments, requested services, follow-up, care coordination, or other communications permitted by law.

Other Uses and Disclosures Permitted or Required by Law

Subject to the conditions and limits imposed by law, we may use or disclose health information for purposes such as:

  • Public health and safety activities, including disease prevention, product safety, or required reporting.
  • Health oversight activities such as audits, investigations, inspections, and licensure matters.
  • Research when the applicable legal requirements are satisfied.
  • Workers' compensation and similar programs as authorized by law.
  • Law-enforcement requests and other government functions when legally permitted or required.
  • Judicial and administrative proceedings, including lawful court orders or subpoenas.
  • Coroners, medical examiners, funeral directors, and organ-procurement organizations when applicable.
  • Preventing or reducing a serious and imminent threat to health or safety.
  • Any other disclosure required by federal or state law.

Records With Additional Privacy Protections

Certain categories of health information may receive additional protection under federal or state law. We will follow those more protective requirements when they apply.

Substance use disorder records. To the extent we receive or maintain substance use disorder patient records that are protected by 42 CFR Part 2, we will not use or disclose those records in civil, criminal, administrative, or legislative investigations or proceedings against you unless the disclosure is permitted by applicable law, including when supported by your written consent or an appropriate court order and subpoena as required.

Uses and Disclosures Requiring Authorization

Except as described in this Notice or otherwise permitted or required by law, we will not use or disclose health information that identifies you without your written authorization. If you authorize a use or disclosure for another purpose, you may revoke that authorization in writing, subject to actions already taken in reliance on it.

Our Responsibilities

  • We are required by law, when HIPAA applies, to maintain the privacy and security of protected health information.
  • We will notify affected individuals as required if a breach occurs that may have compromised the privacy or security of protected health information.
  • We must follow the duties and privacy practices described in the Notice currently in effect.
  • We will not use or share protected health information other than as described in this Notice or otherwise permitted by law unless you authorize us in writing.
  • We will make the current Notice available upon request and on DrBradShook.com.

Questions and Complaints

If you have questions about this Notice, want to exercise a privacy right, or believe your health-information privacy rights have been violated, contact the Privacy Officer at (828) 324-0800 or by mail at The Office of Dr. Brad Shook, 901 Hwy 321 NW, Hickory, NC 28601.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Information about filing a HIPAA complaint is available at HHS.gov, or you may contact HHS at 1-877-696-6775. We will not retaliate against you for filing a complaint.

Changes to This Notice

We may change the terms of this Notice as permitted by law. A revised Notice may apply to health information we already maintain as well as information received after the change. The current version will be available on this page and upon request.

Effective date: September 15, 2026.