Notice of Privacy Practices

Alray Direct Gynecology And Intimate Health Center

4002 Barrett Dr STE 104, Raleigh, NC 27609

Phone or text: 984-212-3686 | Email: alraydgihc@gmail.com

Effective date: November 1, 2026 (Version 1.0)

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Promise to You

Your health information is personal. This is especially true for the care we provide, such as gynecology, menopause care, sexual and intimate health, sexuality counseling, and weight care. We are committed to keeping your information private and safe.

This notice explains how we may use and share your protected health information (“PHI”), your rights about that information, and our legal duties. PHI is information that identifies you and relates to your health, your care, or payment for your care. It includes your medical records, messages, lab results, and billing records.

Who follows this notice

  • Our clinicians, Dr. Hajira Yasmin and Dr. Chindanoor Rajesh.
  • Our staff. We do not have students, trainees, or volunteers.
  • Everyone who cares for you in person at our Raleigh, North Carolina office or by telemedicine in North Carolina or Wisconsin.

Paying us directly does not change your privacy rights

We are a direct-pay practice. You pay us directly, and we do not bill your health insurance. Your privacy rights in this notice are the same no matter how you pay.

Your Rights

You have the following rights about your health information. To use any of these rights, contact our Privacy Officer using the information at the end of this notice. We may ask you to make some requests in writing, and we will help you with the form if you need it.

Get a copy of your medical records

  • You may request a copy of your records.
  • You can also ask us to send a copy directly to another person or provider you choose. This request must be in writing, signed by you, and clearly name who should get it and where to send it.
  • Many of your records, such as visit summaries and lab results, may already be available in our patient portal (CharmHealth / CharmTracker PHR).
  • We will give you a copy or a summary of your records within 30 days of your request. If we need more time, we will tell you in writing why, and when you can expect it. We may extend once, by up to 30 more days.
  • In a few limited cases, the law allows us to deny your request. If we do, we will explain why in writing. In some cases you may ask to have the denial reviewed.

Ask us to correct your medical records

  • If you think information in your record is wrong or incomplete, you can ask us to correct (amend) it. Please make your request in writing and tell us why you think the change is needed.
  • We will respond within 60 days. We may say no, but if we do, we will tell you why in writing. You may then send us a written statement saying you disagree, and we will add it to your record.

Ask us to contact you in a certain way (confidential communications)

  • You can ask us to contact you in a specific way, such as by your cell phone instead of your home phone, or by mail to a different address.
  • We will say yes to all reasonable requests. We will not ask you why.

Ask us to limit what we use or share

  • You can ask us not to use or share certain health information for treatment, payment, or our operations. You can also ask us to limit what we share with family members or friends involved in your care.
  • We are not required to agree to every request. We may say no if it would affect your care. If we agree, we will follow your request unless the information is needed to give you emergency treatment.
  • Special right when you pay in full yourself: If you pay for a service or item out of pocket in full, you can ask us not to share information about that service with your health plan for payment or health care operations. We will say yes unless a law requires us to share that information.
  • What this means at our practice: Because we do not bill insurance, we do not normally send your health information to your health plan at all. If you ask us for a superbill, we give it to you, and you decide whether to send it to your insurer. If you ever want us to keep certain services off a superbill or other paperwork, just tell us.

Get a list of those with whom we have shared your information

  • You can ask for a list (an “accounting”) of the times we have shared your health information in the six years before your request, who we shared it with, and why.
  • The list will include all disclosures except those for treatment, payment, and health care operations, and certain other disclosures, such as any you asked us to make or that you gave us written permission for.

Get a copy of this notice

You can ask for a paper copy of this notice at any time, even if you agreed to get it electronically. We will give it to you promptly. You can also find it on our website at alraymd.com.

Choose someone to act for you

  • If you have given someone medical power of attorney, or if someone is your legal guardian or other personal representative, that person can use your rights and make choices about your health information.
  • We will make sure the person has this authority before we take any action.
  • Some state laws let minors agree to certain kinds of care on their own, such as care for pregnancy or sexually transmitted infections. In those cases, state law may limit what we can share with a parent or guardian.

File a complaint if you feel your rights have been violated

See “Questions or Complaints” at the end of this notice. We will not retaliate against you in any way for filing a complaint.

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations below, talk to us. Tell us what you want us to do, and we will follow your instructions.

You have both the right and the choice to tell us to:

  • Share information with your family, close friends, or others involved in your care or in paying for your care.
  • Share information in a disaster relief situation, for example, to let your family know where you are and how you are doing.

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

We never share your information in these cases unless you give us written permission:

  • Marketing purposes.
  • Sale of your information. We do not sell your health information.
  • Most sharing of psychotherapy notes (see “Psychotherapy notes” below).

Fundraising

We do not use your information for fundraising. If this ever changes, we will give you a clear and simple way to tell us not to contact you again, and you may opt out at any time.

How We Typically Use and Share Your Health Information

To treat you

We can use your health information and share it with other professionals who are treating you. Examples: we send an order to a lab, send a prescription to your pharmacy, refer you to a specialist, or speak with your other doctor about your care.

To run our practice (health care operations)

We can use and share your health information to run our practice, improve your care, and contact you when needed. Examples: reviewing the quality of our care, training staff, managing our records, and having our practice audited or reviewed.

For payment

You pay us directly, and we do not bill your health insurance. We may use your information to take and record your payments, for example through our card payment processor, and to answer questions about your account. If you ask, we will prepare a superbill (an itemized receipt) for you to send to your insurer or to your health savings or flexible spending account yourself.

Some outside services, such as laboratories, imaging centers, or pharmacies, may bill you or your insurance on their own, under their own privacy notices. Laboratories may bill your health insurance directly.

Business associates

We work with outside companies that help us run our practice, such as our electronic health record and patient portal (CharmHealth), our secure telemedicine platform, and our IT, email, phone, and payment services. When these companies need your information to do their work, we require them by written contract to protect it.

Appointment reminders and other messages

We may use your information to contact you with appointment reminders, test results, and follow-up messages. We may also tell you about treatment options or other health-related services we offer that may interest you. We may contact you by phone, voicemail, text message, email, mail, or through the patient portal, using the contact details you give us. We try to keep voicemails and reminders short and limited, for example, only our name, the time of your appointment, and a number to call back. You can ask us to contact you a different way at any time.

Texting, Email, Our Website, and Telemedicine

Patient portal

Our patient portal (CharmHealth / CharmTracker PHR) is the most secure way to message us and see your records.

Text messages and regular email

  • Regular text messages and email are usually not encrypted. This means there is some risk that someone other than you could read them, for example if your phone is shared, lost, or hacked, or if a message is sent to the wrong place.
  • If you prefer, you may ask us to communicate with you by unencrypted text or email after we have explained these risks to you. We will respect your choice. You can change your mind at any time by telling us.
  • Please do not use text or email for emergencies. If you have an emergency, call 911.

Our website contact form

When you fill out the contact or appointment request form on our website, your message is sent to us by email. Please share only what we need to schedule you, such as your name, contact details, and a short reason for your visit. You can share more details by phone, during your visit, or through the patient portal. We protect the information we receive through the form the same way we protect the rest of your health information.

Telemedicine

We offer telemedicine visits to patients in North Carolina and in-person visits in Raleigh. Patients in Wisconsin are seen by telemedicine only. We use a secure, HIPAA-compliant video platform. We never record telemedicine visits. For your privacy, please join your visit from a private place.

Other Ways We May Use or Share Your Health Information

We are allowed or required to share your information in other ways, usually in ways that help the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. We share only what the law allows or requires.

  • Required by law: We will share information about you when federal, state, or local law requires it, including with the U.S. Department of Health and Human Services if it wants to see that we are following federal privacy law.
  • Public health and safety: We may share information to prevent or control disease, injury, or disability; to report births and deaths; to report reactions to medicines or problems with medical products; and to help with product recalls.
  • Abuse, neglect, or domestic violence: We may share information with the proper authorities if we believe someone is a victim of abuse, neglect, or domestic violence. We will do this only as required or allowed by law. Health professionals must report suspected child abuse or neglect.
  • Serious threat to health or safety: We may share information when needed to prevent or lessen a serious and imminent threat to your health or safety, or the health or safety of another person or the public.
  • Health oversight: We may share information with agencies that oversee health care, such as for audits, investigations, inspections, and licensing.
  • Lawsuits and legal actions: We may share information in response to a court or administrative order, or in response to a subpoena or other lawful request, but only when the law allows it.
  • Law enforcement: We may share information with law enforcement officials for certain purposes allowed by law, for example to respond to a court order, warrant, or similar process, to help identify or locate a suspect or missing person, or to report a crime on our premises.
  • Medical examiners, coroners, and funeral directors: We may share information with a coroner, medical examiner, or funeral director when a person dies.
  • Organ and tissue donation: We may share information with organ and tissue donation organizations.
  • Research: We may use or share your information for health research only when the law allows, for example when a research ethics board has approved it and set rules to protect your privacy, or when you give written permission.
  • Specialized government functions: We may share information for special government functions, such as military and veterans’ activities, national security and intelligence activities, and protective services for the President and others.
  • Correctional institutions: If you are in custody, we may share information with the correctional institution or law enforcement official when needed for your care or for health and safety.
  • Workers’ compensation: We may share information for workers’ compensation claims or similar programs that provide benefits for work-related injuries or illness.

Extra Protections for Some Information

When other laws give you more protection

Some state and federal laws give extra privacy protection to certain kinds of health information. When another law protects your information more strongly than this notice, we follow the stricter law. Depending on where you live and receive care, North Carolina and Wisconsin laws may give extra protection to information about:

  • HIV/AIDS and other communicable diseases, including sexually transmitted infections.
  • Mental health care and counseling.
  • Substance use disorder (alcohol or drug use) treatment.
  • Genetic testing.
  • Certain care that minors may agree to on their own.

Substance use disorder treatment records

Federal law (42 CFR Part 2) gives special protection to records from certain substance use disorder treatment programs. Our practice is not a substance use disorder treatment program covered by this law. If we ever receive records protected by this law, we will protect them as the law requires.

Psychotherapy notes

Psychotherapy notes are notes a counselor or therapist may keep about a counseling session that are kept separate from the rest of your medical record. Most uses and sharing of psychotherapy notes require your written permission. Our practice does not keep separate psychotherapy notes.

Sexual and reproductive health information

We know that information about sexual and reproductive health is very private. We use and share it only as described in this notice and as the law allows or requires.

Other Uses Need Your Written Permission

We will not use or share your information in any way not described in this notice unless you give us written permission (an “authorization”). If you give us permission, you may change your mind at any time by telling us in writing. Your change will not undo anything we already did based on your permission.

Our Responsibilities

  • We are required by law to keep your health information private and secure.
  • We are required by law to give you this notice of our legal duties and privacy practices.
  • We will let you know promptly, and no later than 60 days after we find out, if a breach happens that may have put the privacy or security of your information at risk.
  • We must follow the duties and privacy practices described in this notice and give you a copy of it.
  • We will not use or share your information other than as described here unless you tell us we can in writing.
  • We will never ask you to give up your privacy rights as a condition of getting care.

For more information, see the U.S. Department of Health and Human Services website: www.hhs.gov/hipaa/for-individuals/notice-privacy-practices/index.html.

Changes to This Notice

We may change the terms of this notice, and the changes will apply to all information we have about you, including information we had before the change. If we make an important change, the new notice will be available on request, in our office, on our website at alraymd.com, and through our patient portal. The effective date will be shown at the top and bottom of the notice.

Questions or Complaints

Contact our Privacy Officer

If you have questions about this notice, want to use any of your rights, or believe your privacy rights have been violated, please contact:

  • Privacy Officer: Dr. Chindanoor Rajesh, Privacy Officer
  • Mail: Alray Direct Gynecology And Intimate Health Center, Attn: Privacy Officer, 4002 Barrett Dr STE 104, Raleigh, NC 27609
  • Phone or text: 984-212-3686
  • Email: alraydgihc@gmail.com

File a complaint with the federal government

You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). Complaints generally must be filed within 180 days of when you knew about the problem.

  • Online: OCR Complaint Portal at https://ocrportal.hhs.gov/ocr/cp/complaint_frontpage.jsf
  • Mail: Centralized Case Management Operations, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F, HHH Building, Washington, D.C. 20201
  • Email: OCRComplaint@hhs.gov
  • Phone: 1-800-368-1019 (TDD: 1-800-537-7697)
  • More information: www.hhs.gov/hipaa/filing-a-complaint

We will not retaliate against you for filing a complaint.

Effective Date

This notice is effective November 1, 2026. Version 1.0.

Scroll to Top