One Stop Home Care Agency, LLC
Effective Date: July 29, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy
One Stop Home Care Agency, LLC (“One Stop,” “we,” “us,” or “our”) understands that information about your health and healthcare is personal. We are committed to protecting the privacy and security of your protected health information (“PHI”).
PHI includes information that identifies you and relates to:

• Your past, present, or future physical or mental health;

• Healthcare or home care services provided to you; or

• Payment for your healthcare or home care services.

This Notice explains:

• How One Stop may use and disclose your PHI;

• Your rights regarding your PHI;

• Our legal responsibilities; and

• How to file a privacy complaint.

Who Will Follow This Notice
This Notice applies to One Stop Home Care Agency, LLC and its service locations, including services provided in patients’ homes. It applies to our employees and workforce members, including administrators, coordinators, nurses, personal care aides, home health aides, managers, trainees, and other authorized personnel.
Our business associates and contractors must also protect PHI as required by law and their agreements with One Stop.
Your Rights at a Glance
You have the right to:

• Inspect or receive a paper or electronic copy of your health records;

• Ask us to correct information you believe is incorrect or incomplete;

• Ask us to communicate with you confidentially;

• Ask us to limit certain uses or disclosures;

• Receive a list of certain disclosures we have made;

• Receive a paper copy of this Notice;

• Choose an authorized person to act for you;

• Receive notice following certain breaches of unsecured PHI; and

• File a complaint without retaliation.

Your Choices
In certain situations, you may tell us whether and how you want us to share your information, including when we:

• Communicate with family members, friends, caregivers, or others involved in your care or payment for your care;

• Notify someone about your location, general condition, or death; or

• Share information with an organization assisting in disaster-relief efforts.

Tell us your preferences, and we will follow your instructions when required by law.
If you are unable to tell us your preference—for example, because you are unconscious or otherwise incapacitated—we may share relevant information when we determine that doing so is in your best interest and is permitted by law. We may also disclose information when necessary to prevent or reduce a serious and imminent threat to health or safety.
One Stop does not maintain a hospital or facility patient directory.
How We Typically Use or Disclose Your Information
Treatment and Care Coordination
We may use or disclose your PHI to provide, coordinate, or manage your home care and related healthcare services.
For example, a coordinator may share relevant information from your plan of care with your supervising nurse and assigned PCA or HHA. We may also communicate with your physician, MLTC plan, care manager, social worker, pharmacy, hospital, or another healthcare professional involved in your care.
Payment
We may use or disclose your PHI to bill for services, obtain payment, confirm coverage, obtain authorization, or coordinate benefits.
For example, we may submit information about your authorized services, assessments, visits, electronic visit verification records, or plan of care to Medicaid, an MLTC plan, an insurance plan, or another responsible payer.
Healthcare Operations
We may use or disclose your PHI to operate our agency and improve the quality of our services.
Examples include:

• Scheduling and coordinating services;

• Quality-assurance and performance-improvement activities;

• Reviewing caregiver and workforce performance;

• Credentialing and training workforce members;

• Conducting internal audits and compliance reviews;

• Investigating complaints and incidents;

• Managing patient safety;

• Preventing fraud, waste, abuse, and security incidents;

• Meeting licensing and accreditation requirements;

• Obtaining legal, accounting, administrative, or information-technology services; and

• Evaluating and improving agency services.

We may contact you when necessary regarding your care, schedule, assessments, authorizations, service changes, or other administrative matters.
Other Uses and Disclosures Permitted or Required by Law
We may use or disclose PHI without your written authorization in the following circumstances, subject to all applicable legal requirements.
Public Health and Safety
We may disclose information for authorized public-health activities, including:

• Preventing or controlling disease, injury, or disability;

• Reporting certain diseases or health conditions;

• Reporting problems with medications or medical products;

• Assisting with product recalls;

• Reporting births or deaths when required;

• Notifying someone who may have been exposed to a communicable disease;

• Reporting suspected abuse, neglect, exploitation, or domestic violence when permitted or required by law; and

• Preventing or reducing a serious and imminent threat to a person or the public.

Health Oversight
We may disclose PHI to authorized health-oversight agencies for activities such as audits, inspections, investigations, licensure reviews, disciplinary proceedings, Medicaid program oversight, and other activities authorized by law.
Compliance With Law
We will disclose PHI when federal, state, or local law requires us to do so. This may include disclosures to the U.S. Department of Health and Human Services to demonstrate our compliance with federal privacy requirements.
Judicial and Administrative Proceedings
We may disclose PHI in response to a valid court or administrative order. We may also respond to a subpoena, discovery request, or other lawful process if the applicable legal requirements and privacy protections have been satisfied.
Law-Enforcement Purposes
We may disclose limited PHI to law-enforcement officials when authorized or required by law, including in response to certain warrants, subpoenas, court orders, or legally required reports.
Coroners, Medical Examiners, and Funeral Directors
We may disclose PHI to a coroner, medical examiner, or funeral director when legally permitted and necessary for that person to perform authorized duties.
Organ and Tissue Donation
We may disclose PHI to organizations involved in organ, eye, or tissue donation and transplantation when applicable.
Workers’ Compensation
We may disclose PHI as authorized by and necessary to comply with workers’ compensation or similar programs.
Research
We may use or disclose PHI for research when the research has received the approvals required by law or when another legal permission applies. In many circumstances, your written authorization or formal privacy review will be required.
Specialized Government Functions
When legally authorized, we may disclose PHI for military or veterans’ activities, national-security purposes, protective services, correctional-institution functions, or other specialized government functions.
Business Associates
We may share PHI with vendors or contractors that perform services for One Stop, such as billing, electronic visit verification, secure document storage, legal services, auditing, technology support, or record management.
When required, these organizations must enter into written agreements requiring them to appropriately safeguard PHI.
Appointment Reminders and Health-Related Information
We may use your PHI to:

• Remind you about assessments, visits, or appointments;

• Inform you about care-related services;

• Discuss treatment or service alternatives; or

• Inform you about health-related benefits or services that may be relevant to your care.

Uses and Disclosures Requiring Written Authorization
We will obtain your written authorization before:

• Using or disclosing PHI for most marketing purposes;

• Selling your PHI;

• Using or disclosing most psychotherapy notes, if we maintain or receive them; or

• Using or disclosing your information for another purpose not described in this Notice and not otherwise permitted or required by law.

One Stop does not sell PHI.
One Stop does not currently use PHI for fundraising communications.
If you authorize us to use or disclose PHI, you may revoke that authorization in writing at any time. Revocation will not affect information already used or disclosed in reliance on your authorization before we received your revocation.
Specially Protected Information
Some health information receives additional protection under federal or New York law.
Substance-Use-Disorder Records
To the extent One Stop receives or maintains substance-use-disorder patient records protected by 42 CFR Part 2, those records—or testimony describing their contents—will not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless:

• You provide written consent; or

• A court issues an order after providing notice and an opportunity to be heard, and the order is accompanied by a subpoena or other legal requirement compelling disclosure.

Any use or disclosure of these records must comply with 42 CFR Part 2 and other applicable law.
HIV-Related Information
Confidential HIV-related information receives additional protection under New York law. We will not disclose confidential HIV-related information unless you provide the authorization required by law or the disclosure is otherwise specifically permitted or required by law.
Mental-Health and Psychotherapy Information
Certain mental-health records and psychotherapy notes may receive additional protections. We will obtain authorization before using or disclosing such information when required by federal or New York law.
Genetic Information and Other Special Records
Genetic-testing information and certain other categories of health information may also receive additional legal protection.
Whenever a federal or New York law provides greater privacy protection than HIPAA, One Stop will follow the more protective requirement.
Your Health-Information Rights
Obtain an Electronic or Paper Copy of Your Records
You may ask to inspect or receive an electronic or paper copy of health and billing information that One Stop maintains about you.
We will generally provide the requested information or a summary within 30 days, or sooner when required by applicable law. We may charge a reasonable, cost-based fee permitted by law.
In limited circumstances, we may deny access to certain information. If we deny your request, we will explain the reason in writing and tell you whether you may request a review of the decision.
Ask Us to Correct Your Records
You may ask us to amend health information that you believe is incorrect or incomplete.
Your request must generally be submitted in writing and explain why the information should be changed. We may deny the request in certain circumstances, such as when the information is accurate and complete or was not created by One Stop.
If we deny your request, we will provide a written explanation, generally within 60 days, and explain your right to submit a statement of disagreement.
Request Confidential Communications
You may ask us to contact you in a particular way or at a different location. For example, you may ask us to:

• Call only a particular telephone number;

• Avoid leaving detailed voicemail messages;

• Send mail to a different address; or

• Communicate through another reasonable method.

We will accommodate reasonable requests. You do not have to explain why you are making the request.
Ask Us to Limit What We Use or Disclose
You may ask us not to use or disclose certain PHI for treatment, payment, or healthcare operations.
We are not generally required to agree to every requested restriction. If we agree, we will follow the restriction unless the information is needed for emergency treatment or disclosure is otherwise required by law.
If you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information about that service or item to your health plan for payment or healthcare operations. We will honor that request unless disclosure is required by law.
Obtain an Accounting of Disclosures
You may request a list of certain disclosures of your PHI made during the six years before the date of your request.
The accounting generally will not include disclosures:

• For treatment, payment, or healthcare operations;

• Made directly to you;

• Made with your written authorization;

• Made to family members or others involved in your care;

• Made for certain national-security or correctional purposes; or

• Otherwise excluded from an accounting by law.

We will provide one accounting during any 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests during the same 12-month period, but we will notify you of the cost before proceeding.
Receive a Paper Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically. We will provide a paper copy promptly.
Choose Someone to Act for You
If a person has legal authority to act as your personal representative—for example, a healthcare agent, legal guardian, or other authorized representative—that person may exercise applicable privacy rights on your behalf.
We may verify the person’s identity and legal authority before acting on a request.
Receive Notice of Certain Breaches
We will notify you as required by law if a breach of unsecured PHI occurs that may have compromised the privacy or security of your information.
File a Privacy Complaint
You may file a complaint if you believe One Stop violated your privacy rights.
One Stop will not retaliate against, intimidate, discriminate against, or penalize you for filing a complaint or participating in an investigation.
Our Responsibilities
One Stop is required by law to:

• Maintain the privacy and security of your PHI;

• Provide you with this Notice of our legal duties and privacy practices;

• Follow the terms of the Notice currently in effect;

• Notify affected individuals following certain breaches of unsecured PHI; and

• Comply with federal and New York privacy laws that apply to your information.

We will not use or disclose your PHI except as described in this Notice, as authorized by you in writing, or as otherwise permitted or required by law.
Changes to This Notice
We reserve the right to change this Notice and our privacy practices. A revised Notice may apply to PHI we already maintain as well as information we create or receive in the future.
When this Notice is revised, the updated version will be:

• Available upon request;

• Available at our offices;

• Posted prominently where required; and

• Published on our website at www.onestophomecareagency.com.

The effective date shown at the beginning of the Notice will identify the current version.
Questions, Requests, or Complaints to One Stop
To exercise your privacy rights, request a copy of this Notice, ask a question, or file a privacy complaint, contact:
Privacy Officer
One Stop Home Care Agency, LLC
108-10 72nd Ave,
Forest Hills, NY 11375
Telephone: 718-808-9908
Email: info@onestophomecareagency.com
Website: www.onestophomecareagency.com
When emailing, you may use “Privacy Request” or “Privacy Complaint” in the subject line. Please do not include detailed medical information in an unsecured email.
Complaints to the U.S. Department of Health and Human Services
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Telephone: 1-877-696-6775
Online: www.hhs.gov/hipaa/filing-a-complaint
You are not required to file a complaint with One Stop before contacting the Office for Civil Rights.
One Stop will not retaliate against you for filing a complaint.