HIPAA Notice of Privacy Practices

Effective Date: March 27, 2026

1. How We Use and Disclose Your Health Information

We may use and disclose your Protected Health Information (PHI) for the following purposes without your written authorization:

Treatment

We use your health information to provide, coordinate, and manage your medical care. For example, your provider may share information with a specialist to whom you are referred, or we may send your prescription information to your pharmacy.

Payment

We use your health information to obtain payment for the services we provide. This may include submitting claims to your insurance company, verifying coverage, and processing billing.

Healthcare Operations

We use your health information to support our business activities and improve the quality of care we provide. This includes quality assessments, staff training, compliance activities, and business planning.

2. Other Permitted and Required Disclosures

We may also use or disclose your PHI without your authorization in the following circumstances, as permitted or required by law:

• As required by law: We will disclose your information when required to do so by federal, state, or local law.
• Public health activities: We may disclose your information to public health authorities for purposes such as preventing or controlling disease, reporting births and deaths, or reporting adverse reactions to medications.
• Health oversight activities: We may disclose your information to health oversight agencies for activities authorized by law, such as audits, investigations, and inspections.
• Judicial and administrative proceedings: We may disclose your information in response to a court order or subpoena.
• Law enforcement: We may disclose your information to law enforcement officials as required by law or in response to a valid legal process.
• To avert a serious threat to health or safety: We may use or disclose your information when necessary to prevent a serious threat to your health and safety or the health and safety of the public.
• Workers' compensation: We may disclose your information as authorized by workers' compensation laws.
• Coroners, medical examiners, and funeral directors: We may disclose your information to coroners, medical examiners, or funeral directors as necessary for them to carry out their duties.

3. Uses and Disclosures Requiring Your Authorization

For any use or disclosure of your PHI not described in this notice, we will obtain your written authorization before proceeding. This includes:

• Marketing purposes
• Sale of your PHI
• Most uses of psychotherapy notes (if applicable)
• Other uses not covered by this notice or applicable law

You may revoke an authorization at any time by submitting a written request to our Privacy Officer. Revoking an authorization will not affect any actions we took before receiving your revocation.

4. Your Rights Regarding Your Health Information

You have the following rights with respect to your Protected Health Information:

Right to Access

You have the right to inspect and obtain a copy of your medical records and other health information we maintain about you. We may charge a reasonable fee for copying costs. In certain limited circumstances, we may deny your request, but you may request a review of the denial.

Right to Request Amendment

If you believe that your health information is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, such as if the information was not created by us or is already accurate and complete. If we deny your request, we will provide a written explanation.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your health information. This accounting does not include disclosures made for treatment, payment, or healthcare operations, or disclosures you authorized in writing.

Right to Request Restrictions

You may request that we restrict certain uses and disclosures of your health information for treatment, payment, or healthcare operations. We are not required to agree to your request, except when the disclosure is to a health plan for payment or healthcare operations and the information pertains to a service you paid for in full out of pocket.

Right to Request Confidential Communications

You may request that we communicate with you about your health information in a specific way or at a specific location. For example, you may ask that we contact you only by email or at a particular phone number. We will accommodate reasonable requests.

Right to a Copy of This Notice

You have the right to obtain a paper copy of this notice at any time, even if you previously agreed to receive it electronically. Please contact our Privacy Officer to request a copy.

5. Breach Notification

In the event of a breach of your unsecured Protected Health Information, we will notify you as required by law. A breach is an impermissible use or disclosure of PHI that compromises the security or privacy of your information. We will notify you promptly, and no later than 60 days after discovering the breach, with details about what happened, what information was involved, steps you should take to protect yourself, and what we are doing in response.

6. Changes to This Notice

We reserve the right to change the terms of this notice at any time. Any changes will apply to all PHI we maintain, including information created or received before the changes. The revised notice will be available on our website and upon request.

7. Complaints

If you believe your privacy rights have been violated, you have the right to file a complaint. You will not be penalized or retaliated against for filing a complaint.

You may file a complaint with us by contacting our Privacy Officer:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights: