Serenity Pediatric Wellness, LLC.
Effective Date: March 1, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOUR CHILD MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Your Privacy
Serenity Pediatric Wellness (“SPW,” “we,” “our,” or “us”) is committed to protecting the privacy of the protected health information (“PHI”) of the children and families we serve. This Notice of Privacy Practices (“Notice”) describes how we may use and disclose your child’s PHI, and the rights you have regarding that information, under the federal Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and applicable Florida state law.
We are required by law to:
- Maintain the privacy of your child’s PHI
- Provide you with this Notice describing our legal duties and privacy practices
- Abide by the terms of the Notice currently in effect
- Notify you in the event of a breach of unsecured PHI
This Notice applies to all PHI created or maintained by Serenity Pediatric Wellness at both of our locations and across all communication channels.
How We May Use and Disclose Your Child’s PHI
The following describes the ways we may use and disclose your child’s PHI. Not every use or disclosure will be listed; however, all permitted uses and disclosures will fall within one of these categories.
For Treatment
We may use and disclose your child’s PHI to provide, coordinate, or manage your child’s healthcare. This includes:
- Communication between Dr. Rosario and other healthcare providers involved in your child’s care, including specialists, therapists, hospitals, and emergency providers
- Sharing information with laboratories and imaging centers (including Rupa Health and other laboratory partners) to order and receive test results
- Coordinating with pharmacies to prescribe and refill medications
- Sharing records with schools, athletic programs, or other organizations at your written request
For Payment
We may use and disclose your child’s PHI to bill for and receive payment for services. As an out-of-network self-pay practice, this primarily includes:
- Processing payments through our payment processor (Stripe)
- Generating itemized superbills you may submit to your insurance plan for possible out-of-network reimbursement
- Maintaining records of fees paid and services rendered
For Healthcare Operations
We may use and disclose your child’s PHI to operate our practice and improve the quality of care we provide. This includes:
- Quality assessment and improvement activities, including internal quality improvement (QI) projects
- Reviewing the performance of our practice and our care
- Training and credentialing of clinicians and staff
- Conducting compliance and legal reviews
- General business management, scheduling, recordkeeping, and administration
- Communicating with our electronic health record system (Jane App), our secure messaging platform (Spruce), our payment processor (Stripe), and our business email provider (Google Workspace) — each of which is bound by a Business Associate Agreement to protect PHI
Internal QI activities use PHI in the minimum amount necessary and do not involve sharing identifiable PHI outside the practice without your separate written authorization.
Appointment Reminders and Health-Related Communications
We may contact you by phone call, voicemail, text message, email, or through our patient portal to:
- Remind you of upcoming appointments
- Communicate about test results, treatment recommendations, and care coordination
- Notify you of changes to our services, hours, or policies
- Share general health-related information relevant to your child’s care
You have the right to request that we contact you only through specific channels or at specific locations (see “Your Rights” below).
Marketing Communications
From time to time, we may send communications about our services, events, educational offerings, or community programs. You have the right to opt out of these communications at any time by:
- Replying “STOP” to text messages
- Clicking “unsubscribe” in any marketing email
- Emailing us at Info@serenitypediatricwellness.com
- Calling our office at 321-252-6065
Opting out of marketing communications will not affect treatment-related or appointment-reminder communications, which are necessary for your child’s care.
Fundraising
Serenity Pediatric Wellness does not currently engage in fundraising activities. If we begin fundraising activities in the future, we will provide notice and an opportunity to opt out before using any PHI for that purpose.
As Required or Permitted by Law
We may use and disclose your child’s PHI without your authorization when required or permitted by federal, state, or local law. Examples include:
- Public health activities — Reporting communicable diseases, vital statistics, vaccine administration to state immunization registries (e.g., Florida SHOTS), adverse events related to FDA-regulated products, and public health surveillance.
- Reporting suspected abuse, neglect, or domestic violence — As required by Florida law, including reports to the Florida Department of Children and Families.
- Health oversight activities — Including audits, investigations, inspections, and licensure activities by federal and state health agencies.
- Judicial and administrative proceedings — In response to a court order, subpoena, or other lawful process.
- Law enforcement purposes — In limited circumstances permitted by law.
- Coroners, medical examiners, and funeral directors — As necessary to carry out their duties.
- Organ and tissue donation — In limited circumstances if relevant.
- Workers’ compensation — As authorized by Florida workers’ compensation law.
- Serious threat to health or safety — To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
- Specialized government functions — Including military, national security, and protective services for the President and other officials.
Research
Serenity Pediatric Wellness does not currently conduct research involving patient PHI. If we engage in research activities in the future, we will only use or disclose PHI in accordance with HIPAA and applicable federal research regulations, and only with your written authorization unless the research is conducted under an approved Institutional Review Board (IRB) waiver.
Family Members and Others Involved in Care
We may share PHI with family members, friends, or other individuals you identify as involved in your child’s care, but only the information directly relevant to that person’s involvement, and only when:
- You give us verbal or written permission
- You have an opportunity to object and do not, or
- We can reasonably infer from the circumstances that you would not object
For pediatric patients, the custodial parent or legal guardian is generally treated as the personal representative for purposes of authorizing disclosures (see “Florida-Specific Provisions” below).
Uses and Disclosures That Require Your Written Authorization
The following uses and disclosures will be made only with your written authorization:
- Most uses and disclosures of psychotherapy notes (Note: SPW does not currently create or maintain psychotherapy notes)
- Marketing communications that involve financial remuneration from a third party
- Sale of PHI (SPW does not sell PHI)
- Other uses and disclosures not described in this Notice
You may revoke any authorization in writing at any time, except to the extent that we have already acted in reliance on it.
Florida-Specific Provisions: Adolescent Confidentiality and Minor Consent
Florida law provides certain minors with the right to consent to specific types of healthcare independently, without parental notification or authorization. PHI related to services a minor consented to under these laws may be protected from disclosure to parents or legal guardians, except as required or permitted by law.
These services include, but are not limited to:
- Sexually transmitted infection (STI) and HIV testing and treatment for minors of any age (Florida Statutes § 384.30, § 381.0051)
- Outpatient mental health services for minors aged 13 and older (Florida Statutes § 394.4784)
- Substance abuse evaluation and treatment for minors (Florida Statutes § 397.601)
- Pregnancy-related care, prenatal care, and delivery (Florida Statutes § 743.065)
- Emergency medical care when the delay required to obtain parental consent would endanger the minor’s health (Florida Statutes § 743.064)
When a minor lawfully consents to one of these services, Serenity Pediatric Wellness will, to the extent permitted by law, maintain the confidentiality of information related to those services and will not disclose it to a parent or guardian without the minor’s consent, except in situations involving risk of serious harm to the minor or others.
In all other respects, the custodial parent or legal guardian of a minor child is treated as the personal representative of the child for HIPAA purposes and has the right to access and authorize disclosures of the child’s PHI.
In situations involving divorced or separated parents, both custodial parents generally retain the right to access their child’s medical records under Florida law unless a court order specifies otherwise.
Your Rights Regarding Your Child’s PHI
You have the following rights with respect to your child’s PHI maintained by Serenity Pediatric Wellness:
Right to Inspect and Copy
You have the right to inspect and obtain a copy of your child’s PHI maintained in our records, including medical and billing records. Requests must be submitted in writing. We may charge a reasonable, cost-based fee for copies, as permitted by federal and Florida law. We will provide records within 30 days of your request, with one possible 30-day extension if needed.
Right to Request an Amendment
If you believe that information in your child’s record is incorrect or incomplete, you may request that we amend it. Requests must be submitted in writing and include the reason for the requested amendment. We may deny the request under certain circumstances permitted by law, and we will provide a written explanation if we do.
Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures of your child’s PHI made by SPW in the six years prior to the date of your request (excluding disclosures made for treatment, payment, healthcare operations, or pursuant to your authorization).
Right to Request Restrictions
You have the right to request that we restrict the way we use or disclose your child’s PHI for treatment, payment, or healthcare operations. We are not required to agree to all requested restrictions. However, we will agree to a request to restrict disclosure of PHI to a health plan for services paid out-of-pocket in full at the time of service, as required by HIPAA.
Right to Request Confidential Communications
You have the right to request that we communicate with you about your child’s health information in a specific way or at a specific location. For example, you may request that we contact you only by email, or only at a specific phone number. We will accommodate reasonable requests.
Right to Receive Breach Notification
You have the right to be notified in the event of a breach of unsecured PHI involving your child’s information.
Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically. Contact our office to request a paper copy.
Right to Opt Out of Marketing and Fundraising
You have the right to opt out of receiving marketing communications and (if we begin fundraising in the future) fundraising communications, as described above.
To exercise any of these rights, please contact our Privacy Officer using the information at the end of this Notice.
Changes to This Notice
We reserve the right to change the terms of this Notice at any time. Any changes will apply to PHI we already have about your child as well as PHI we receive in the future. The current version of this Notice will be:
- Posted in our offices
- Available on our website at serenitypediatricwellness.com
- Provided upon request
The effective date of the most current Notice will be displayed at the top of the document.
Complaints
If you believe your child’s privacy rights have been violated, you may file a complaint with:
Serenity Pediatric Wellness — Privacy Officer Dr. Irissa Rosario Email: Info@serenitypediatricwellness.com Phone: 321-252-6065 Mail: 630 N Denning Drive, Winter Park, FL 32789
United States Department of Health and Human Services, Office for Civil Rights Online: www.hhs.gov/ocr/privacy/hipaa/complaints/ Mail: U.S. Department of Health and Human Services 200 Independence Avenue, S.W., Room 509F HHH Building Washington, D.C. 20201 Phone: 1-877-696-6775
You will not be retaliated against in any way for filing a complaint.
Contact Information
Serenity Pediatric Wellness, P.A. Privacy Officer: Dr. Irissa Rosario, MD
Winter Park Location: 630 N Denning Drive Winter Park, FL 32789
Oviedo Location: 1351 Alafaya Trail, Suite 1005 Oviedo, FL 32765
Phone: 321-252-6065 Email: Info@serenitypediatricwellness.com Website: serenitypediatricwellness.com
This Notice is effective March 1, 2026.