Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. IT ALSO DESCRIBES HOW WE COLLECT AND USE INFORMATION THROUGH OUR WEBSITE. PLEASE REVIEW IT CAREFULLY.
Effective date: September 3, 2026
This notice is issued jointly by Responder First Wellness Medical Corporation and Wonderwomen Wellness Nursing, Inc. (together, “RFW,” “we,” “us,” or “our”). Both entities operate from the same location, serve the same patients, and participate together in your care and in RFW’s health care operations. For that reason, we are permitted to issue a single notice on both entities’ behalf, and information about you may be shared between them for treatment, payment, and health care operations as described in this notice.
RESPONDER FIRST WELLNESS
833 Franklin Street, Suite 8
Napa, CA 94559
530-625-7738
1. OUR COMMITMENT TO YOUR PRIVACY
We are required by law to maintain the privacy of your protected health information (“PHI”), to provide you with this notice describing our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
If you receive care from RFW for a substance use disorder, additional federal protections apply to those specific records under 42 CFR Part 2. Section 3 of this notice explains those protections.
If you are a California resident, additional state protections apply under the California Confidentiality of Medical Information Act. Section 6 of this notice explains those protections.
2. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
The categories below describe the ways we may use and disclose your health information. We will not use or disclose more information than is reasonably necessary for the purpose of the use or disclosure.
Treatment. We use and share your health information to provide, coordinate, or manage your care, including with other clinicians involved in your treatment, pharmacies, laboratories, and other providers.
Payment. We use and share your health information to bill and collect payment for your care, including with your health plan, workers’ compensation carrier, or Medicare, and to determine eligibility or coverage.
Health care operations. We use your health information to run our practice, including for quality assessment, staff training, compliance activities, and business planning.
Business associates. We share information with outside companies that perform services for us, such as our telehealth platform, patient portal, billing service, and clinical documentation software. These companies are contractually required to protect your information under a Business Associate Agreement.
As required by law. We will disclose your health information when required by federal, state, or local law.
Public health and safety. We may disclose information to public health authorities, to report abuse or neglect of a child, elder, or dependent adult, or to avert a serious and imminent threat to the health or safety of you or another person.
Health oversight, judicial, and law enforcement purposes. We may disclose information to a health oversight agency, in response to a court order or subpoena, or as otherwise permitted or required by law enforcement.
Workers’ compensation. We may disclose information as authorized by and to the extent necessary to comply with workers’ compensation laws.
Military, veterans, and specialized government functions. We may disclose information as required by military command authorities or other specialized government functions, where applicable.
Individuals involved in your care. Unless you object, we may share relevant information with a family member, friend, or other person you identify as involved in your care or payment for care.
Appointment reminders and treatment options. We may contact you about appointments, and about treatment alternatives or health-related services that may interest you.
Uses and disclosures requiring your written authorization. Any use or disclosure not described above requires your written authorization, including the use of psychotherapy notes (with narrow exceptions), marketing communications, and any sale of your health information. You may revoke a written authorization at any time by notifying us in writing, except to the extent we have already relied on it.
3. SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS (42 CFR PART 2)
Federal law protects the confidentiality of substance use disorder patient records maintained in connection with treatment at RFW. These protections apply in addition to, and in some respects go further than, the general HIPAA protections described above.
If you receive substance use disorder treatment from us, we generally may not disclose information that would identify you as having, having had, or having sought treatment for a substance use disorder, except with your written consent or as otherwise permitted by 42 CFR Part 2.
A general authorization for release of medical records is not sufficient to authorize disclosure of substance use disorder records protected under Part 2. A separate, specific consent is required, except that federal law permits a single consent to cover future uses and disclosures for treatment, payment, and health care operations once you have agreed to it.
Records or testimony revealing the content of Part 2 records may not be used against you in a civil, criminal, administrative, or legislative proceeding unless you have provided written consent or a court has issued an order after notice and an opportunity for you or the record holder to be heard.
Federal law permits disclosure of Part 2 records without your consent in limited circumstances, including medical emergencies, court orders obtained in compliance with Part 2, and reports of suspected child abuse or neglect made under state law. Federal Part 2 protections do not restrict reporting of a crime committed by a patient on program premises or against program personnel, or a threat to commit such a crime.
A violation of Part 2 by a program is a federal offense. Suspected violations may be reported to the U.S. Attorney for the district in which the violation occurred, and complaints may also be filed with the U.S. Department of Health and Human Services, Office for Civil Rights, using the contact information in Section 9.
4. YOUR RIGHTS
You have the right to:
Request restrictions. You may ask us not to use or disclose certain health information for treatment, payment, or operations. We are not required to agree, except that we must agree to a restriction on disclosure to a health plan for a service you paid for in full out of pocket, if the disclosure is not otherwise required by law.
Request confidential communications. You may ask us to communicate with you in a specific way or at a specific location, such as a different phone number or address.
Inspect and copy your records. You may ask to see or receive a copy of your health information, with limited exceptions. We may charge a reasonable, cost-based fee.
Request amendment. You may ask us to correct your health information if you believe it is incomplete or inaccurate. We may deny the request under certain circumstances and will explain the denial in writing.
Receive an accounting of disclosures. You may request a list of certain disclosures we have made of your health information, other than disclosures for treatment, payment, operations, and certain other categories excluded by law.
Receive a paper copy of this notice. You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.
Choose someone to act on your behalf. If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information
File a complaint. If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint. Contact information is in Section 9.
5. OUR RESPONSIBILITIES
We are required to maintain the privacy and security of your health information, notify you if a breach occurs that may have compromised the privacy or security of your unsecured information, follow the duties and privacy practices described in this notice, and obtain your consent before certain uses or disclosures of substance use disorder records protected under Part 2.
6. ADDITIONAL PROTECTIONS FOR CALIFORNIA RESIDENTS
If you are a California resident, the California Confidentiality of Medical Information Act (Civil Code section 56 et seq.) provides privacy protections for your medical information in addition to HIPAA. Among other things, California law restricts disclosure of your medical information to employers and, unlike HIPAA, allows individuals to bring a private lawsuit for certain unauthorized disclosures. We handle your medical information consistent with these additional state protections.
Health information we hold as your health care provider is generally exempt from the California Consumer Privacy Act because it is already governed by HIPAA and the California Confidentiality of Medical Information Act. Section 7 below describes how we handle other personal information collected through our website.
7. OUR WEBSITE
This section describes information practices for responderfirstwellness.com that are separate from, and in addition to, our handling of your medical records described above.
Information you provide to us. If you submit a contact form, request an appointment, or use the chat assistant on our website, we collect the information you choose to provide, which may include your name, contact information, and health-related information you share with the assistant. Information you share through the website that relates to your health or care is treated as protected health information and is subject to the same protections described in this notice. The website chat assistant is not monitored in real time and must not be used to report a medical emergency or a mental health crisis. If you are in crisis, call 911, call or text 988, or go to your nearest emergency department.
Information collected automatically. Our website, like most websites, may use cookies or similar technologies to operate correctly and to understand how visitors use the site. These technologies may collect technical information such as your browser type, device information, and pages viewed. We do not knowingly permit these technologies to collect your health information for advertising purposes, and we do not sell your personal information.
Third-party links. Our website may link to other websites we do not control. This notice does not apply to those sites.
Children. Our website is not directed to children under 13, and we do not knowingly collect personal information from children through the website outside the context of a parent or guardian arranging care for a minor patient.
Changes to website practices. If our use of website tools changes in a way that affects how we handle your information, we will update this notice.
8. CHANGES TO THIS NOTICE
We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as information we receive in the future. The current version of this notice will be posted on our website and available at our office.
9. QUESTIONS AND COMPLAINTS
Privacy Officer: Nataly Kuznetsov, PMHNP-BC
Email: nataly@responderfirstwellness.com
Mail: 833 Franklin Street, Suite 8, Napa, CA 94559
Phone: 530-625-7738
U.S. Department of Health and Human Services, Office for Civil Rights
Complaint portal: https://www.hhs.gov/ocr/complaints
Phone: 1-800-368-1019
Responder First Wellness · Notice of Privacy Practices, Version 1.0 · Effective September 3, 2026
