My Home Circumcision LLC ("MHC," "we," "us," or "our") provides in-home circumcision consultation, procedure coordination, aftercare support, and related self-pay services. We provide this Notice so families understand how we collect, use, disclose, store, and protect medical and related information.
MHC is a 100% self-pay service. We do not bill insurance, submit claims, verify insurance eligibility or benefits, check claim status, use a clearinghouse, receive electronic remittance advice, or communicate with a health plan for reimbursement on a family's behalf. Families may choose to submit an itemized receipt or superbill to their own insurer.
We protect medical information using HIPAA-aligned privacy and security practices and applicable federal and state privacy and confidentiality laws. If HIPAA applies to a particular service, workflow, or disclosure, we will comply with applicable HIPAA requirements. If another law gives you greater privacy rights or gives your information greater protection, we will follow the more protective law.
1. Who this Notice applies to
This Notice applies to My Home Circumcision LLC and members of our workforce, including employees, contractors, mohelim, clinicians, administrative staff, and other people acting for MHC in connection with consultation, scheduling, circumcision care, aftercare, payment, technology support, and practice operations.
If another health care provider involved in your child's care is not part of MHC's workforce and is not acting on MHC's behalf, that provider may have separate privacy practices.
2. Meaning of "you" and "health information"
In this Notice, "you" means the child receiving services and, where applicable, the child's parent, legal guardian, approved contact, or other personal representative authorized to act for the child.
"Health information" means information that identifies you or your child and relates to consultation, scheduling, payment, medical history, procedure planning, circumcision care, aftercare, or communications with MHC. This may include:
- Parent or guardian names and contact information.
- Child name, date of birth, birth history, and health history.
- Family bleeding history, medication information, Vitamin K status, and other intake responses.
- Consultation notes, procedure notes, visit reports, aftercare instructions, portal messages, and phone notes.
- Photos, videos, or images submitted for consultation, medical review, documentation, or aftercare.
- Scheduling records, payment records, card-on-file status, receipts, superbills, diagnosis codes, procedure codes, and reimbursement-related documents we provide to you.
- Privacy requests, communication preferences, approved contacts, custody/contact restrictions, and incident records.
3. Parents, legal guardians, approved contacts, and co-parents
Because the patient is a minor child, this Notice is generally provided to the child's parent(s), legal guardian(s), or other legally authorized personal representative(s). A parent or legal guardian generally may exercise the child's privacy rights, subject to applicable law, court orders, custody restrictions, safety concerns, and professional judgment.
MHC may verify a person's authority before sharing medical information, providing records, adding portal access, or discussing care. Approved contacts are limited to parents, legal guardians, and other people authorized in writing through MHC's approved-contact process. Co-parent access is controlled through the portal invitation and access process.
If a court order, custody restriction, order of protection, safety concern, or written instruction limits communication with a parent or other person, MHC may chart that restriction and limit communication consistent with applicable law and professional judgment. If a person contacts us from a new phone number or email address, we may require re-verification through the portal or another reasonable verification method.
By phone, we may verify identity by asking for the caller's name, relationship to the child, and a detail already on file. We do not provide medical details by standard text message.
4. Our self-pay and insurance reimbursement policy
MHC is a self-pay service. Payment is made directly by the family. We may use payment information to process payment, manage scheduled payments, document payment status, provide receipts, answer billing questions, and maintain accounting records.
We do not bill insurance or seek reimbursement from health plans for families. We may provide you with an itemized receipt, superbill, diagnosis code, procedure code, or other documentation that you may choose to submit to your insurer. If you submit information to an insurer, that disclosure is made by you, and your insurer's privacy practices will apply. We do not guarantee reimbursement.
If an insurer or third party contacts MHC for information, we generally will not disclose medical information unless you provide written authorization, the disclosure is required by law, or the disclosure is otherwise permitted by applicable law.
We try to keep payment processor descriptions generic and avoid placing clinical details in card statement descriptions, payment links, transaction descriptions, and other payment fields that do not need that information. Payment processors, card issuers, and banks may maintain their own privacy practices.
5. Our privacy commitments
MHC maintains reasonable administrative, technical, and physical safeguards designed to protect health information. We limit access to health information based on role and need. We use the secure MHC portal and database as the official source of truth for the medical record.
We will not use or disclose health information other than as described in this Notice, as you authorize in writing, or as permitted or required by applicable law. We do not sell health information.
When we use, disclose, or request health information, we make reasonable efforts to limit the information to what is reasonably necessary for the intended purpose. This minimum-necessary approach may not apply in certain situations, including disclosures for treatment, disclosures to you or your authorized representative, disclosures made with your written authorization, or disclosures required by law.
6. How we may use and disclose health information
Consultation, procedure planning, treatment, and aftercare
We may use and disclose health information to provide, coordinate, and manage your child's consultation, procedure planning, circumcision care, and aftercare.
For example, the mohel or clinician may review intake answers, birth history, family bleeding history, medications, Vitamin K status, and other clinical information before the procedure. If your child needs urgent follow-up care, emergency care, or evaluation by a pediatrician, hospital, emergency medical service, or other health care professional, we may share relevant information about the procedure, aftercare, medications, bleeding history, Vitamin K status, and other clinical details needed for care, when permitted by law.
Self-pay billing and receipts
We may use and disclose health information as needed to process self-pay billing, collect payment, manage scheduled payments, document payment status, prepare receipts or superbills, respond to billing questions, and maintain accounting records.
Practice operations
We may use and disclose health information to operate, manage, secure, and improve the practice. This may include maintaining records, documenting visits, training authorized team members, improving intake and aftercare workflows, conducting quality review, responding to patient-service questions, securing technology systems, maintaining compliance records, and obtaining legal, accounting, technology, or administrative support.
People involved in your child's care
With your agreement, written approval, or when you do not object and it is appropriate under the circumstances, we may share relevant information with a co-parent, caregiver, pediatrician, emergency provider, or other person involved in your child's care or payment for care.
We share medical details only with verified parents, legal guardians, approved contacts, or others authorized or permitted by law.
Required or permitted by law
We may use or disclose health information without written authorization when permitted or required by law, including:
- To comply with federal, state, or local law.
- For public health activities, such as reporting certain diseases, injuries, births, deaths, or adverse events when required or permitted by law.
- To report suspected abuse, neglect, or domestic violence when required or permitted by law.
- For health oversight activities, such as audits, investigations, inspections, licensure, or disciplinary actions.
- In response to a court or administrative order, subpoena, discovery request, or other lawful process.
- For law enforcement purposes, when the law permits or requires disclosure.
- To coroners, medical examiners, or funeral directors when relevant and permitted by law.
- To avert a serious threat to the health or safety of the child or another person.
- For specialized government functions, such as military, national security, or protective-services functions, when applicable.
- For workers' compensation or similar programs when required or permitted by law.
- For certain research purposes only if legal privacy requirements are satisfied. MHC does not routinely use records for research.
7. Secure portal, text messages, email, phone, and video communications
Secure portal is the medical communication channel
The secure MHC portal is the preferred and official channel for medical information, private questions, aftercare questions, records, sensitive documents, and aftercare photos. Portal messages and photos become part of the MHC record when they relate to consultation, care, aftercare, documentation, or follow-up.
Medical questions should be submitted through the secure portal, not by standard text message, social media direct message, or ordinary email.
Text messages are generic, automated, and no-reply
MHC uses standard text messages only for generic, automated notices related to inquiries, scheduling, appointments, portal access, account notifications, and prompts to log into the secure portal. Text messages are not used to carry medical details.
Outbound text messages are designed to be generic and portal-link-only. They should not include your child's name, parent name, clinical details, the word "circumcision," aftercare instructions, photos, diagnosis codes, procedure codes, payment links, superbills, receipts, or clinical terms such as bleeding, swelling, urination, infection, or complication. Appointment reminders may include appointment date and time, but not the appointment address.
Text messaging is not encrypted in the same way as the secure portal and may not be fully secure. Message and data rates may apply. By consenting to transactional texts, you authorize MHC to send automated, generic text notices about your inquiry, appointment, portal access, and account. You may opt out of non-essential texts by replying STOP. If you opt out, we may use email, phone, portal messages, or other reasonable methods to communicate with you.
Transactional text consent is separate from treatment consent, payment authorization, privacy acknowledgment, marketing consent, and photo/testimonial authorization.
Inbound texts are not used for care
MHC's texting system is designed as one-way and no-reply. Staff do not use text messaging to provide care, answer medical questions, request aftercare photos, send payment links, send card setup links, or discuss medical details. If you send a standard text message or photo to MHC, the system may send an automated reply reminding you that the line is not monitored for emergencies and that medical information should be submitted through the secure portal.
An inbound text may be captured for documentation, opt-out handling, incident review, or account administration, but it is not treated as a reliable care channel. Do not rely on standard text messages for medical advice, urgent care, or emergency communication.
MHC may use email for portal notices, appointment notices, general account notices, and newsletters or marketing communications if you have opted in where required. We try to avoid including medical details in ordinary email. Sensitive documents and medical communications should be handled through the secure portal when possible.
Phone calls
MHC may communicate by phone for scheduling, care coordination, and aftercare support. When medical details are discussed by phone, MHC may verify the caller's identity and relationship to the child before sharing information. MHC's phone tree may route calls to the care team or mohel as appropriate.
Video consultation
When video consultation is used, MHC uses the internal portal or another approved platform. We do not use consumer social media direct messages for medical consultation or aftercare.
8. Response hours and urgent symptoms
MHC does not provide 24/7 emergency monitoring. Standard texts, emails, portal messages, voicemail, and other messages are not monitored for emergencies.
Current non-emergency response hours are:
- Monday through Thursday: 10:00 AM to 6:00 PM Central Time.
- Friday: 10:00 AM to 3:00 PM Central Time.
These hours may change and may be affected by holidays, travel, staffing, religious observance, or other circumstances. The most current instructions may appear in the portal, auto-replies, or aftercare materials.
For urgent symptoms or medical emergencies, do not wait for a response from MHC. Call 911, go to the nearest emergency room, or contact your child's pediatrician. Urgent concerns may include heavy bleeding, no wet diaper in about 12 hours, fever, a circumcision site that appears to be getting worse, or any other symptom that makes you believe your child may need urgent medical care. This list is not exhaustive.
Clinical questions are handled by the mohel or clinician, not by administrative staff. If a portal message appears urgent during response hours, the clinician or mohel may call you, direct you to your pediatrician or emergency care, and document the communication in the record.
9. Photos, videos, and aftercare images
Photos, videos, and images of your child that are submitted for consultation, medical review, aftercare, documentation, or follow-up are treated as health information.
Aftercare photos should be uploaded through the secure portal. Staff should not ask you to send aftercare photos by standard text message, social media direct message, or ordinary email. Secure aftercare messages and photos are restricted to mohel or clinical accounts and limited authorized support access when needed for security, compliance, or technical support.
If you accidentally send a medical photo or sensitive information by standard text message, staff should not reply with medical advice by text, forward it to personal devices, screenshot it, save it to a personal camera roll, or discuss it in group texts. When clinically necessary and technically feasible, MHC may move the information into the secure portal record under its internal privacy procedures. Otherwise, MHC may direct you to submit the information through the secure portal.
We will not use your child's image, your name, your child's name, your story, a review, a testimonial, or other identifying information for advertising, social media, website content, public education, promotional materials, or public case examples without a separate written authorization from the child's parent or legal guardian.
10. Marketing, reviews, testimonials, referrals, and education
MHC may send general educational content, newsletters, review requests, referral reminders, or product/service reminders only as permitted by law and our consent processes. Marketing communications are separate from transactional appointment and portal notifications.
We will not use or disclose identifiable health information for marketing, advertising, social media, website content, public education, training materials, case examples, reviews, testimonials, or promotional purposes unless we have a separate written authorization when required by law or by MHC policy.
A parent text, email, review, compliment, or message does not automatically authorize MHC to use that content publicly. You may refuse to sign a marketing, photo, video, testimonial, or educational-use authorization. Refusing will not affect your child's care or the services available to you.
We do not sell health information.
11. Technology vendors, confidentiality, and AI tools
MHC uses technology and service providers to operate the practice. These may include secure hosting and database services, email delivery, text messaging, phone service, video consultation tools, payment processors, accounting support, legal support, compliance tools, and practice-management tools.
For systems that store, process, maintain, or transmit health information, MHC uses appropriate confidentiality and security obligations. If HIPAA requires a Business Associate Agreement for a vendor or workflow, MHC uses a Business Associate Agreement before allowing that vendor to handle protected health information on our behalf.
Because standard SMS/MMS is not treated as a secure medical channel, MHC's SMS policy is designed to keep SMS/MMS generic, one-way, and free of medical details.
MHC does not use AI-assisted drafting, transcription, automation, or analysis tools with health information unless the workflow has been reviewed and approved, appropriate privacy protections are in place, and a Business Associate Agreement or comparable protection is in place when required.
12. Your privacy rights and requests
Subject to applicable law, identity verification, and legal limits, you may make the following requests regarding health information MHC maintains about your child.
Request access to records
You may request to inspect or receive a copy of your child's health information maintained by MHC. If the information is maintained electronically and is readily producible in the form and format you request, we will provide it that way when required by law. We may charge a reasonable, cost-based fee where permitted by law.
Request an amendment
You may ask us to correct health information you believe is incorrect or incomplete. We may deny the request in certain circumstances, but we will explain the reason when required by law. If we do not change the record, you may be able to submit a written statement of disagreement where required by law.
Request a list or accounting of disclosures
You may ask for a list of certain disclosures we have made of your child's health information. The list may not include every disclosure, such as disclosures for treatment, self-pay billing, practice operations, disclosures made to you, or disclosures made with your authorization, except where the law requires otherwise.
Request restrictions
You may ask us to restrict certain uses or disclosures of health information. We are not required to agree to every request unless applicable law requires us to agree.
Because MHC is self-pay and does not bill health plans, we generally do not disclose your child's health information to a health plan for payment or health care operations. If you ask us not to send information to a health plan, we will honor that request unless you later authorize the disclosure or the disclosure is required by law.
Request confidential communications
You may ask us to contact you in a specific way or at a specific location, such as a particular phone number, email address, mailing address, or through the secure portal. We will accommodate reasonable requests.
Receive a copy of this Notice
You may request a paper or electronic copy of this Notice at any time. MHC may ask you to acknowledge that you received or were offered this Notice. Acknowledgment of receipt is not treatment consent, payment authorization, marketing consent, text-message consent, or photo/testimonial authorization.
Revoke an authorization
If you gave us written authorization to use or disclose health information, you may revoke that authorization in writing at any time. Revocation will apply going forward and will not affect actions we already took in reliance on the authorization.
Receive privacy or security incident notification
If a privacy or security incident involving your health information requires notice under applicable law, we will notify you as required by law.
13. Record retention, corrections, and deletion
MHC maintains medical records for at least 23 years from the date of service unless a longer period is required by law, legal hold, litigation, investigation, contract, professional obligation, or counsel instruction.
Portal messages, aftercare photos, consultation records, procedure notes, and other information that become part of the medical record are not deleted merely because a parent requests deletion. If information is incorrect or incomplete, you may request an amendment or correction. We may retain backups and audit records for security, legal, compliance, or continuity purposes.
Generic text notifications are not intended to be part of the clinical medical record. If a stray text message or photo is moved into the portal record under MHC's internal privacy procedures, it is retained as part of the record.
14. Changes to this Notice
MHC may change the terms of this Notice. Changes may apply to information we already have and information we receive in the future. The current Notice will be posted on our website and available upon request.
15. Complaints and questions
If you believe your privacy rights have been violated, or if you have questions about this Notice, contact MHC using the information below. MHC will not retaliate against you for filing a complaint, asking a privacy question, or exercising a privacy right.
Where HIPAA applies, you may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Other federal or state regulators may also receive complaints where applicable.
16. Contact information
Privacy Contact: Gad Levy, My Home Circumcision LLC
Phone: (773) 217-0073
Email: care@myhomecircumcision.com
Website: www.myhomecircumcision.com