Carroll Health & Wellness
Notice of Privacy Practices
Your information. Your rights. Our responsibilities.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who this notice covers
This notice describes the privacy practices of Carroll Health & Wellness for health information created or received in providing your care. Your provider is Robert Carroll, MSN, FNP‑BC, a board-certified family nurse practitioner and the sole clinician at Carroll Health & Wellness. It includes information in your medical record, communications about your care, and information used to arrange and receive payment for your services.
Practice responsible for these records: Carroll Health & Wellness LLC, operating as Carroll Health & Wellness. In this notice, “we,” “us” and “our” mean Carroll Health & Wellness.
This notice concerns care provided through Carroll Health & Wellness. Independent laboratories, pharmacies, imaging centers and other health care providers have their own privacy practices and notices. A referral or a working relationship with another organization does not, by itself, make that organization part of this notice.
Effective date: September 8, 2026
Privacy contact and help with your rights
Privacy official: Robert Carroll, MSN, FNP‑BC.
Privacy telephone: 727‑272‑7178
Use this number for privacy questions and help with records requests. You may leave a voicemail. For routine clinical questions, use the patient portal.
Written privacy questions, complaints and help with records requests: email Robert.FNP@CarrollHealthWellness.org. Use the Charm patient portal for sensitive information and documents. The privacy voicemail listed above is another way to ask privacy questions or request assistance. Do not include medical details or payment-card information in ordinary administrative email.
Contact the privacy official using the details above to ask questions about this notice, exercise the rights below, request assistance or file a privacy complaint. We may verify your identity or a representative's authority before providing records or acting on a request. We will explain any request information we need and help you use an appropriate method.
For patient-specific information, use the Charm patient portal. If you cannot access the portal, email Robert.FNP@CarrollHealthWellness.org for access help without including medical details or payment-card information. You may also ask the privacy contact for another reasonable way to communicate or obtain a copy of your information.
Practice website: www.CarrollHealthWellness.org.
Your rights
You have the right to request access to your records, ask for corrections, request confidential communications, ask for limits on sharing, receive an accounting of certain disclosures, obtain this notice, have an authorized representative act for you, and complain about a possible violation. Contact the privacy official above to exercise these rights.
Get an electronic or paper copy of your medical record
You may ask to inspect or receive an electronic or paper copy of your medical record and other health information we maintain about you, including relevant billing records.
We will provide access or a copy, usually within 30 days of your request, and comply with any shorter applicable deadline. If the law permits an extension, we will explain the reason and expected completion date in writing. A summary will be provided in place of the requested records only if you agree.
We do not charge a separate Carroll Health & Wellness fee for providing access to or a copy of your records. Access to records is not limited to the information displayed in the portal.
If we deny a request in whole or in part, we will explain the reason and any available review or complaint rights in writing.
Ask us to correct your medical record
You may ask us to amend health information you believe is incorrect or incomplete. Tell us what you believe needs correction and why.
We may decline the request, but we will explain why in writing within 60 days, or explain a legally permitted extension. If we deny the request, you may submit a statement of disagreement as explained in our response.
Request confidential communications
You may ask us to contact you in a particular way or at a particular location, or to send information to a different address. Tell us which method is safe for you.
We will accommodate reasonable requests. Our preference for written routine communication does not remove your right to request a reasonable alternative.
The portal is our usual route for medical details. If you request another way to receive an access copy, we will discuss that request and any relevant privacy risks rather than assuming that ordinary email is confidential.
Ask us to limit what we use or share
You may ask us not to use or share particular information for treatment, payment or practice operations. We are generally not required to agree and may decline, for example, if the restriction would affect your care. If we agree, we will follow that restriction except as the law permits, such as when information is needed for emergency treatment.
If you pay for a service or health care item out of pocket in full, you may ask us not to disclose information about that item or service to your health plan for payment or health care operations. We will agree unless the disclosure is required by law. This restriction does not automatically prevent disclosures for treatment or other permitted purposes.
Ask each outside laboratory, pharmacy, imaging center or other provider separately about restrictions on information it holds and whether its own service must be paid in full. Our consultation payment policy does not control another provider's claim or records.
Get a list of certain disclosures
You may ask for an accounting of certain disclosures of your health information during the six years before your request, including to whom we disclosed it and why.
The accounting does not include treatment, payment and health care operations disclosures or certain other excluded disclosures, such as those you authorized.
We do not charge a separate Carroll Health & Wellness fee for an accounting of disclosures.
Get a copy of this notice
You may request a paper copy at any time, even if you agreed to receive the notice electronically. We will provide it promptly. You may also request an electronic copy or find the current notice on our practice website. Contact the privacy official if you need help accessing or understanding it.
Choose someone to act for you
If a person has authority to act as your personal representative, such as through a health care power of attorney or legal guardianship, that person may exercise your rights within that authority. We will verify the person's authority before acting and apply any exceptions or special protections required by law.
File a complaint
You may complain to the privacy official above if you believe we have violated your privacy rights. State what happened and how you would like us to contact you; use the designated confidential route for medical details.
You may also file a complaint with HHS, Office for Civil Rights, through its privacy complaint instructions and online complaint route, or by writing to HHS, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201.
We will not retaliate against you for filing a complaint. You do not have to complain to us before contacting HHS.
Your choices and written permission
Family, friends and people involved in your care
You may tell us whether to share relevant information with family members, close friends or other people involved in your care or payment for your care. You also have a choice about information shared for disaster relief. Tell us your preferences and any limits you want us to consider.
If you cannot tell us your preference, for example because you are unconscious, we may share relevant information if, using professional judgment, we believe it is in your best interest. We may also share information when needed to lessen a serious and imminent threat to health or safety. Special protections described below still apply.
Marketing, sale of information and psychotherapy notes
Uses or disclosures for marketing that require authorization, sales of protected health information, and most uses or disclosures of psychotherapy notes require your written permission.
Other uses or disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing through the privacy contact above. Revocation does not undo actions already taken in reliance on that authorization.
Receiving this notice, acknowledging its receipt, paying for a consultation or agreeing to treatment does not by itself authorize optional marketing or a sale of your information.
Fundraising choices, if applicable
If you receive a permitted fundraising communication from us, you may tell us not to contact you again for that purpose. Your choice will not affect treatment or payment. If records protected by 42 CFR part 2 would be used for fundraising, you must first receive a clear, conspicuous opportunity to choose not to receive those communications.
How we use and share information for your care
We may use or disclose information for the purposes below when the applicable legal requirements are met. These permissions are subject to any more protective laws, valid restrictions and special-record protections described later in this notice.
Treatment
We may use your health information to assess your concern, develop your care plan, prescribe appropriate treatment and coordinate care with other professionals who treat you.
For example, Robert may include the information needed on a laboratory order, review the laboratory's report, send a prescription to your chosen pharmacy or share relevant information with a clinician to whom you are referred. Any additional consent required for specially protected records will be obtained.
Practice operations
We may use and share information to operate the practice, coordinate services, review the quality of care, maintain records and contact you when necessary.
For example, we may review a visit record and the status of an ordered test to check that the result was received, reviewed and communicated. Service providers that handle protected health information on our behalf must meet the applicable confidentiality and contractual requirements. This notice does not authorize a vendor to use your records for its own unrelated purposes.
Payment and self‑pay consultations
We may use or share information as needed to collect and document payment for services, provide receipts and resolve payment questions. For example, we may use your name, visit date, amount paid and payment status to record your consultation payment and issue a receipt.
Carroll Health & Wellness does not accept or bill insurance for its consultations. Payment is by online credit card only. The consultation is self-pay. We do not submit a consultation claim to your health plan. This payment policy is not a promise that information can never be shared with a health plan for another legally permitted or required purpose.
Outside laboratories, pharmacies, imaging centers and other providers charge separately. If you use insurance for those services, they may send information to your plan and the plan may send an explanation of benefits. A claim you submit yourself may also generate insurance communications. Paying Carroll Health & Wellness directly does not prevent those independent processes. Ask the outside provider and your plan about confidential communications and full self-pay restrictions before the service when this matters to you.
Other permitted or required uses and disclosures
The situations below have legal conditions and limits; listing them does not permit unrestricted disclosure. We review the applicable requirements before sharing information, and use or disclose only the information permitted or required for the purpose.
Public health and safety
We may disclose information when the law permits or requires it for purposes such as reporting disease, helping with product recalls, reporting medication reactions, reporting suspected abuse, neglect or domestic violence, or preventing or reducing a serious threat to health or safety. For example, a reportable infection may need to be reported to the public health authority even when you pay for care yourself.
Health research
Information may be used or disclosed for health research only when applicable legal conditions are met, such as your authorization or an approved waiver with the required privacy protections.
Compliance with law
We will disclose information when state or federal law requires it, including to HHS when it needs information to determine compliance with federal privacy law. A request is evaluated under applicable confidentiality rules; a request alone does not necessarily require disclosure.
Organ and tissue donation
We may share information with organ procurement organizations or other appropriate entities to facilitate donation or transplantation when permitted by law.
Medical examiners and funeral directors
We may share information with a coroner, medical examiner or funeral director when a person dies, as the law permits for those duties.
Workers' compensation and government requests
When the applicable conditions are met, we may use or share information for workers' compensation matters, permitted law-enforcement purposes, authorized health oversight activities, and special government functions such as military, national security and protective services. This does not give an employer unrestricted access to your record.
Lawsuits and legal proceedings
We may disclose information in response to a valid court or administrative order, or a subpoena or other lawful process, only when the legal conditions for that disclosure are satisfied. A subpoena is not permission to bypass the special protections below.
Records with additional protections
When another applicable law provides greater protection than the general permissions above, we follow that law. These protections may concern records we receive from another provider, even when the underlying service is not offered by Carroll Health & Wellness.
Substance use disorder records protected by 42 CFR part 2
To the extent we receive or maintain your substance use disorder records protected by 42 CFR part 2, we will follow the additional consent and disclosure rules that apply to those records.
Those records, or testimony relaying their contents, cannot be used or disclosed in civil, criminal, administrative or legislative investigations or proceedings against you without your written consent, or a qualifying court order after the legally required notice and opportunity to be heard. A court order authorizing disclosure must also be accompanied by a subpoena or other legal requirement compelling disclosure. The general permissions in this notice do not override these protections.
The fundraising choice described above also applies if such records would be used for fundraising.
HIV and AIDS information in New Jersey
New Jersey law gives additional confidentiality protection to information identifying a person as having, or being suspected of having, HIV infection or AIDS. We disclose that information with the required written informed consent or under a specific legal exception, such as authorized direct treatment, required public-health reporting or legally permitted disclosure under the applicable confidentiality law. General permission to share medical information does not remove those protections.
Genetic information in New Jersey
Identifiable genetic information and information identifying a person who has had a genetic test are subject to New Jersey's additional consent and disclosure limits, regardless of how the information was received. We obtain the required written consent unless a specific statutory exception applies, such as a qualifying court order or another disclosure expressly permitted by the law. We also provide any separately required notice concerning receipt of genetic-test information.
Reproductive health information in New Jersey
You have the right to withhold written consent to disclosure of information about reproductive health care permitted under New Jersey law in the civil, probate, legislative and administrative proceedings covered by New Jersey's confidentiality law. Reproductive health care includes contraception, pregnancy-related care and related counseling or referrals.
We will not disclose that information in those proceedings without the required written consent from you or your authorized representative unless a statutory exception applies. Exceptions include certain disclosures under New Jersey law or court rules, defense of a claim, specified regulatory complaint investigations and known or good-faith suspected abuse. Lawful reproductive health care itself is not abuse under this law. These protections do not prevent other lawful sharing of medical records.
Other specially protected records
If we receive mental health, psychotherapy, substance use, sexually transmitted infection or other records with additional legal restrictions, we honor the applicable restrictions and obtain any required specific permission before disclosure. The general treatment, payment, operations and legal-process descriptions above do not remove those restrictions.
Our responsibilities
We are required by applicable law to maintain the privacy and security of your protected health information, provide notice of our legal duties and privacy practices, and follow the notice currently in effect.
We will notify you as required by law following a breach of unsecured protected health information, without unreasonable delay and within the applicable legal deadline.
We will provide a copy of this notice and follow the privacy practices stated in it. It is not an authorization to disclose information for purposes that require your separate written permission.
We will not use or disclose your information in ways not described in this notice unless you authorize them in writing. You may change your mind and revoke that authorization in writing, subject to actions already taken in reliance on it.
For more information about your rights, see HHS information about notices of privacy practices.
Changes to this notice
We reserve the right to change the terms of this notice and make the revised provisions apply to all protected health information we maintain, including information created or received before the change. We will revise the notice when required and identify its effective date. The current notice will be available on our practice website and upon request from the privacy contact, with an electronic or paper copy available. A material change will not be put into effect before the revised notice's effective date except as permitted or required by law.