Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: November 8, 2026

Who this notice covers

This notice applies to Mitchell J. Mandel, M.D., P.C., Mandel-Wilentz Dermatology, PLLC, Mandel Dermatology Chicago PLLC, Mandel Dermatology Boulder, PLLC and Mandel Dermatology Florida, PLLC (together, "Mandel Dermatology", "we" or "us"). These practices are under common ownership and follow this one notice at all of our offices in New York, Illinois, Colorado and Florida. They may share your health information with each other for treatment, payment and health care operations.

Mandel Group LLC provides management and administrative services to our practices, such as billing, scheduling, technology and staffing. It is our business associate and must protect your health information as described in this notice.

Our commitment to your privacy

We create records about you and the care we provide. We are required by law to:

Maintain the privacy and security of your protected health information.
Give you this notice of our legal duties and privacy practices.
Notify you if there is a breach of your unsecured protected health information.
Follow the terms of the notice currently in effect.

Treatment. We use your health information to care for you and share it with other professionals who treat you. For example, we may send a visit summary or treatment notes to your primary care provider, or share a biopsy specimen and results with a pathology lab.

Payment. We use and share your health information to bill and get paid by you, your health plan or another payer. For example, we give your health plan information about your visit so it will pay for the service, or ask whether a procedure needs prior approval.

Health care operations. We use and share your health information to run our practice, improve care and train staff. For example, we review records to check the quality of care, and we contact you with appointment reminders or information about treatment options and services we offer.

Business associates. We share information with companies that provide services for us, such as our management company, electronic health record and patient portal vendors, billing services, labs and our answering and messaging services. They must sign agreements to protect your information.

People involved in your care. We may share information with family, friends or others involved in your care or payment for your care, unless you tell us not to. If you cannot tell us your preference, for example in an emergency, we may share information if we believe it is in your best interest.

The law allows or requires us to share your information in other ways, usually to contribute to the public good. We must meet the conditions in the law before we share it for these purposes:

Public health and safety: preventing or controlling disease, reporting adverse reactions to medications, helping with product recalls, reporting suspected abuse, neglect or domestic violence, and preventing or reducing a serious threat to anyone's health or safety.
Research: health research approved under the law's privacy safeguards.
As required by law: including sharing with the U.S. Department of Health and Human Services if it wants to check that we are complying with federal privacy law.
Organ and tissue donation: with organ procurement organizations.
Medical examiners and funeral directors: when a person dies.
Workers' compensation: for workers' compensation claims.
Law enforcement: for law enforcement purposes or with a law enforcement official, as the law allows.
Health oversight: with agencies for audits, investigations, inspections and licensing.
Special government functions: such as military, national security and presidential protective services.
Lawsuits and legal actions: in response to a court or administrative order, or in response to a subpoena when the law's conditions are met.

Substance use disorder records

If we have substance use disorder treatment records about you that are protected by federal law (42 CFR part 2), we will not use or share those records, or testimony about what they contain, in civil, criminal, administrative or legislative investigations or proceedings against you unless you give written consent, or a court orders it after you or we have been given notice and a chance to be heard. A court order must come with a subpoena or other legal requirement before we share the records.

When we need your written permission

We will not do the following unless you give us written permission:

Use or share your information for marketing.
Sell your information. We never sell your health information.
Share most psychotherapy notes.
Use your photos or your story in advertising, our website or social media, including before and after photos.

Any other use or sharing not described in this notice will be made only with your written permission. You may cancel your permission at any time by telling us in writing. Canceling does not undo anything we already did with your permission.

We do not raise funds, so we will not contact you for fundraising.

Stricter state laws

Some state laws give certain information more protection than federal law. Where those laws apply to the office where you receive care, we follow them. This may include information about HIV and other sexually transmitted infections, genetic testing, mental health care, substance use treatment, reproductive health care, gender-affirming care and care that minors may consent to on their own. In those cases, we will share the information only with your written permission or as those laws allow.

In Florida, as required by section 456.057 of the Florida Statutes, we will not share your records or discuss your condition with anyone other than you, your legal representative and the health care providers involved in your care unless you give written permission, except in the limited cases that law allows, such as a subpoena with notice to you.

Information shared with others may lose protection

When we share information as this notice allows, the person or organization that receives it may share it again, and it may no longer be protected by federal privacy law.

Your rights

You have the right to:

Get a copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will usually provide it within 30 days, or sooner if state law requires. We may charge a reasonable, cost-based fee where the law allows. Many records are also available in our patient portal.
Ask us to correct your record. You can ask us to correct information you think is wrong or incomplete. We may say no, but we will tell you why in writing within 60 days.
Request confidential communications. You can ask us to contact you in a specific way, such as a certain phone number, or to send mail to a different address. We will say yes to all reasonable requests.
Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment or our operations. We are not required to agree, and we may say no if it could affect your care. If you pay for a service or item in full out of pocket, you can ask us not to share that information with your health plan for payment or operations, and we will say yes unless a law requires us to share it.
Get a list of disclosures. You can ask for a list of the times we shared your information in the six years before your request, who we shared it with and why. The list will not include disclosures for treatment, payment or operations, or certain others, such as ones you asked us to make. One list a year is free; we may charge a reasonable, cost-based fee for another within 12 months.
Get a copy of this notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically.
Choose someone to act for you. If someone is your medical power of attorney, legal guardian or other personal representative, that person can use your rights for you. We will confirm their authority first.
File a complaint. See "Complaints" below.

To use any of these rights, contact our Privacy Officer using the information at the end of this notice.

Recording, photography and prescription history

Video and audio in our offices. For the safety of patients and staff, to prevent theft and to improve the quality of care, we use video and audio recording in the public and common areas of our offices, such as waiting rooms and reception areas. Signs are posted where recording takes place. We do not record in exam or procedure rooms.

Phone calls. Calls to and from our team may be recorded or monitored for quality and training.

Clinical photos. We may take photos of your skin condition or treatment areas as part of your care. These photos are part of your medical record and are protected like the rest of your health information. We will not use them in advertising or share them outside your care without your written permission.

Prescription history. When you are seen in our office, we may get your prescription history, including prescriptions from other providers, from an electronic prescribing network. It becomes part of your medical record. If you do not want us to get your prescription history, tell your provider.

Recordings are stored securely, and only authorized staff can see them. We use them only for the purposes described here unless you give us written permission or the law requires otherwise. To ask that you not be recorded on a call, tell the team member you are speaking with or write to our Privacy Officer. This may limit how we can help you by phone.

Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you, including information we already have. The new notice will be posted in our offices and on our website with its effective date, and you can ask us for a copy at any visit.

Complaints

If you believe your privacy rights have been violated, you can file a complaint with us by contacting our Privacy Officer using the information below. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by writing to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775 or visiting the HHS complaint page. We will not retaliate against you for filing a complaint.

Contact our Privacy Officer

Privacy Officer, Mandel Dermatology, 45 Northern Blvd, Greenvale, NY 11548. Phone: 516-506-7546. Email: legal@mandeldermatology.com.

For how our website handles information, see our Privacy Policy.