How we use, disclose, and protect your health information.
The §164.520-required Notice for Mon Élan Medical, P.C. and its Organized Health Care Arrangement. The full Privacy Notice — covering both this content and broader privacy practices — is at /privacy.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
About this notice
This Notice of Privacy Practices is required by the federal HIPAA Privacy Rule (45 CFR §164.520). It describes how Mon Élan Medical, P.C., Mon Élan MSO, and Partner Professional Corporations (collectively "Mon Élan," "we," "us") may use and disclose your protected health information (PHI), the rights you have over your PHI, and our obligations under HIPAA.
We operate as an Organized Health Care Arrangement under 45 CFR §164.501. A single Notice describes the practices of all participating entities. When you receive care from a Partner PC clinician, the Partner PC delivers a co-branded notice mirroring this one.
For broader privacy disclosures (website data, Texas-specific rights, California rights, the Insights Program, marketing communications, our Business Associates), see our full Privacy Notice.
Who this notice covers
- Mon Élan Medical, P.C. — the professional corporation responsible for your clinical care, including physician video visits, peptide therapy, GLP-1 weight optimization, and evidence-based protocols.
- Mon Élan MSO — the management services organization that operates the platform, technology, brand, and billing relationships supporting Mon Élan Medical, P.C.
- Partner Professional Corporations — independent professional corporations that may deliver additional programs under a Professional Services Agreement and Business Associate Agreement with Mon Élan MSO as those programs activate. No Partner PC services are active at launch.
How we may use and disclose your PHI
HIPAA permits us to use and disclose PHI without your specific written authorization in the following categories. Anything outside these categories requires your authorization, which you may revoke in writing prospectively at any time.
Treatment
To provide your care and coordinate it across the clinicians involved. Examples: your prescribing physician reviewing intake and labs before issuing a prescription; our drug-interaction screening checking for problematic combinations; your prescription transmitted to the appropriate dispensing pharmacy — a separately licensed 503A compounding pharmacy partner for compounded peptide protocols, or a separately licensed retail/specialty pharmacy partner for branded FDA-approved GLP-1 medications.
Payment
Mon Élan does not bill commercial insurance, Medicare, or Medicaid for clinical services. Your subscription is processed by our PCI-compliant payment processor with the minimum information needed to process payment. On request, we may issue a superbill for HSA/FSA reimbursement; superbill information goes only where you direct.
Health-care operations
Internal quality improvement, clinician credentialing, audits, training, business planning, and complaint handling. We use de-identified or summary information where reasonable, and PHI only where operations require identifiable data.
Required or permitted by law
We may use or disclose PHI without authorization in the circumstances HIPAA permits, including:
- Public health activities (reportable conditions, FDA MedWatch adverse-event reporting for compounded medications, immunization registries).
- Reports of abuse, neglect, or domestic violence to authorities authorized by law.
- Health oversight, judicial / administrative proceedings (with HIPAA-required protections), law enforcement (in the limited circumstances HIPAA permits).
- To prevent serious imminent harm — including warm handoff to 988, an emergency department, or a pre-credentialed specialty partner under our Critical Safety Protocol.
- Workers' compensation; coroners / medical examiners / funeral directors; specialized government functions (military, national security).
- Research, only under an IRB or Privacy Board waiver, a data-use agreement for a Limited Data Set, or your written authorization. The Insights Program does not rely on a research waiver and is not characterized as research.
Requiring your authorization
- Most uses and disclosures of psychotherapy notes.
- Marketing uses of PHI beyond face-to-face communication or promotional gifts of nominal value.
- Sales of PHI. Sale of PHI requires your separate written authorization, which Mon Élan does not solicit for advertising or marketing purposes.
- Other uses not described in this notice.
With your opportunity to agree or object
Communicating with a family member, close friend, or personal representative for care coordination, and contacting you for appointment reminders or pending lab orders. You can opt out of any of these by contacting our Privacy Officer.
Your rights under HIPAA
Right to inspect and copy your PHI
Right to request an amendment
Right to an accounting of disclosures
Right to request restrictions
Right to confidential communications
Right to a paper copy
Right to be notified of a breach
Right to choose someone to act for you
Right to file a complaint without retaliation
Our duties as a Covered Entity
- We are required by law to maintain the privacy of your PHI and to provide you this notice describing our legal duties and privacy practices.
- We are required to abide by the terms of the version of this notice currently in effect.
- We are required to notify affected individuals of a breach of unsecured PHI per the HIPAA Breach Notification Rule.
- We will not use or disclose your PHI without your written authorization, except as described in this notice or otherwise permitted or required by law.
- We implement HIPAA-required administrative, physical, and technical safeguards (45 CFR §164.308, §164.310, §164.312). See our full Privacy Notice for the technical posture (AES-256 at rest, TLS 1.2+ in transit, role-based access via Entra ID, audit logging on every PHI access).
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us, with HHS, or with the Texas Attorney General. We will not retaliate against you for filing a complaint.
With Mon Élan
Email privacy@monelan.co. Acknowledged within 5 business days; substantive response within 30 days.
With HHS Office for Civil Rights
File at hhs.gov/hipaa/filing-a-complaint. Complaints must be filed within 180 days of the alleged violation.
With the Texas Attorney General
File at texasattorneygeneral.gov under "File a Consumer Complaint."
Changes to this notice
We may revise this notice. The current version is always posted at monelan.co/hipaa. Material changes are communicated to active patients by email at least 30 days before they take effect, and a paper copy is available on request.