IpsiHand® is an FDA-cleared, non-invasive treatment of stroke. See if you qualify →

Do I Qualify?
Do I Qualify?

Effective June 10, 2025

Kandu Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED OR DISCLOSED, AND HOW YOU MAY ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Kandu’s Duties

This Notice of Privacy Practices (the “Notice”) describes the ways in which we may use and disclose your protected health information, and your rights and our obligations regarding the use and disclosure of protected health information. “We” refers to, and this Notice applies to, Neurolutions, Inc. and the practices with which Kandu, Inc. contracts, including but not limited to Kandu Medical Services, West PC; and Kandu Medical Services East, Chartered (collectively, “Kandu”).

We are required by law to maintain the privacy and security of your protected health information.

We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

We must follow the duties and privacy practices described in this Notice and give you a copy.

We will not use or share your information other than as described here unless you give us written permission. You may also change your mind at any time by sending an email to privacy@kandu.com and letting us know that you are retracting a previous written permission to use or share your information.

Uses and Disclosures without Your Written Authorization

Kandu is permitted by law to use and disclose your protected health information without the need for your written authorization for the following purposes:

  • Treatment generally means the provision, coordination, or management of health care and related services among health care providers or by a health care provider with a third party, consultation between health care providers regarding a patient, or the referral of a patient from one health care provider to another. For example, a Kandu clinician may share an update on your current condition at the request of your Neurologist to coordinate treatment and improve health outcomes.
  • Payment encompasses the various activities of health care providers to obtain payment or be reimbursed for their services. For example, If Kandu bills your health insurance, the insurance company may require documentation, including your health information, before they pay for those services.
  • Health Care Operations are administrative, financial, legal, and quality improvement activities of a covered entity that are necessary to run its business and to support the core functions of treatment and payment. For example, Kandu may use your health information as part of business management and general administrative activities, including complying with legal requirements, providing customer service, resolving internal grievances, the sale or transfer of assets, creating de-identified data or a limited data set, review and publish aggregate quality data, and fundraising for the benefit of Kandu.

Unless you object, Kandu may share protected health information with family member(s) and/or caregiver(s) if:

  • They are involved in or are paying for your health care.
  • You have given us permission.
  • If, in their professional judgment, the Kandu clinician believes you do not object.

Kandu may also contact you to provide reminders or information about appointments, to-do items, medication, treatment, or other health-related services.

Other Purposes

Kandu may also use or disclose your protected health information, without the need for written authorization, as permitted or required by state or federal law for the following:

  • To avoid a serious threat to your health or safety or the health or safety of others.
  • As required by state or federal law such as reporting abuse or neglect.
  • For public health activities such as reporting communicable diseases, problems with products or other adverse events.
  • For health oversight activities such as audits, investigations, or licensure actions.
  • In response to a court, administrative order, subpoena, or other legal process.
  • When requested by law enforcement, but only as authorized by law.
  • For research purposes if conditions are satisfied. All research projects are subject to a special approval process that evaluates a proposed research project and its use of health information to ensure appropriate safeguards. Please notify us at any time if you do not want to participate in research efforts.

Special Protections for Reproductive Health Information

Even if you do not receive reproductive health care or have not received such care, we are required to provide the following information.

We will never use or disclose your health information when the requested use or disclosure is for any of the following purposes:

  • To conduct a criminal, civil, or administrative investigation for the mere act of you seeking, obtaining, providing, or facilitating reproductive health care;
  • To impose criminal, civil, or administrative liability for the mere act of your seeking, obtaining, providing, or facilitating reproductive health care; or
  • To identify you for either of the above purposes.

For example, we would not cooperate with a subpoena issued by a state in which abortion or gender-affirming care is illegal that is seeking your medical records in order to investigate your receipt of reproductive healthcare that you lawfully obtained.

We will not use or disclose your health information that is potentially related to reproductive health care for:

  • Health oversight activities;
  • Judicial and administrative proceedings;
  • Law enforcement purposes; or to
  • Coroners and medical examiners

UNLESS we receive a valid attestation from the person requesting the use or disclosure that their request is not related to the prohibited purposes listed above.

For example, if we receive a subpoena requesting medical records of reproductive health care that you lawfully obtained that is accompanied by a valid attestation that the subpoena relates to investigating a doctor suspected of malpractice, we would be able to lawfully disclose your information.

Uses and Disclosures with Your Written Authorization

Any uses and disclosures not listed or described above, including disclosures for marketing purposes, will be made only with your written authorization; you may revoke prior authorization(s) in writing at any time. If you revoke your authorization, we will no longer use or disclose your PHI for the reasons covered by your written authorization. You understand that we are unable to take back any uses or disclosures we have already made in reliance upon your authorization, and that we are required to retain our records of the care that we provided to you.

Kandu will never sell your protected health information.

POTENTIAL FOR REDISCLOSURE

We want you to be aware that when we disclose your information as described in this Notice, either with or without your authorization, it has the potential to be redisclosed by the person receiving the information, and the information may no longer be subject to the protections we’ve described, or protected by the laws with which we comply.

Your Rights with Respect to Your Protected Health Information

The following is a brief description of the rights with respect to your protected health information, and how you may exercise these rights:

  • You have the right to request restrictions on uses and disclosures of protected health information. You may request that your health information not be shared with specific persons, groups, or companies. If you prefer not to let the health insurance company know about care you receive, there is the option to pay Kandu directly for care outside the plan. We aim to honor your requests but may decline if it interferes with your care or is not allowed by law.
  • You have the right to receive confidential communications of protected health information. Let Kandu know your preferred way (for example phone, email or texts) and place of being contacted.
  • You have the right to inspect and copy protected health information. You may request to see and/or have a copy of your medical record. Upon written request and agreeing to pay for the cost of copying and mailing, the record will be sent to you within 30 days.
  • You have the right to amend protected health information. Please ask to change any inaccurate information in your medical record or add information that is missing or incomplete. If it is verified, corrections will be made. If it cannot be verified, your disagreement will be noted in the file. In most cases, your file should be updated within 60 days.
  • You have the right to receive an accounting of disclosures of protected health information. Kandu will provide a list of those who have seen your health information (other than for treatment, payment of healthcare operations) within 60 days of receiving a written request.
  • You have the right to obtain a paper copy of this notice. Kandu will provide a paper copy of this notice upon written request.

Complaints

If you believe your rights are being denied or your health information is not being protected, you may choose to file a complaint. The law does not allow retaliation for filing a complaint or reporting in good faith a compliance concern.

You may report a concern or complaint at any time 24/7 by calling the Kandu Compliance Hotline at 1-844-787-9167 or by using the Kandu Compliance Reporting Portal at https://www.kanducompliancereporting.com/.

You may also contact Kandu’s Corporate Compliance Officer by sending an email to

privacy@kandu.com.

You may also contact the Secretary of the U.S. Department of Health and Human Services, Office of Civil Rights (OCR) using the OCR Complaint Portal at

https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html.

Revisions to this Notice

Kandu will promptly distribute any revisions to this notice whenever there is a material change to the uses or disclosures, your rights, Kandu’s legal duties, or other privacy practices stated in this notice. Except when required by law, a material change to any term of this notice may not be implemented prior to the effective date of the revised notice in which such material change is reflected.

Effective Date

This Notice of Privacy Practices is effective June 10, 2025.

If you have any questions or concerns, please contact us at 1-833-813-4774.

 

 

 

 

 

8091.942.V2.E