Notice of Privacy Practices (HIPAA)

Your Rights

Get a copy of your health information

You can ask to see or get a copy of the health information we maintain about you, subject to legal exceptions. We may provide copies in paper or electronic form.

Ask us to correct your information

You can ask us to correct health information you believe is incomplete or inaccurate. We may deny the request in some cases, but we will explain why in writing if we do.

Request confidential communications

You can ask us to contact you in a specific way (for example, by email, phone, or mail) or to send communications to a different address. We will accommodate reasonable requests.

Ask us to limit what we use or share

You can ask us not to use or share certain health information for treatment, payment, or operations. We are not always required to agree, but if we do, we will follow that restriction unless the law requires otherwise.

Get a list of certain disclosures

You can ask for a list of certain times we have shared your health information, as required by law. This is sometimes called an accounting of disclosures.

Get a copy of this notice

You can ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.

Choose someone to act for you

If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information, as permitted by law.

File a complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Your Choices

For certain types of information sharing, you can tell us your preferences, and in some cases we need your written permission.

We may ask for your written authorization before:

• Sharing information beyond what is needed for routine care coordination or operations
• Using or disclosing information for purposes not described in this notice when authorization is required by law
• Using or disclosing psychotherapy notes, if applicable, except where the law allows otherwise
• Marketing or the sale of PHI, if ever applicable under HIPAA rules

You may revoke a written authorization at any time in writing, except to the extent we have already relied on it.

How We May Use and Share Your Health Information

For treatment

We may use and share your information to help coordinate your care, support communication with providers involved in your care, and assist with care-related services you request.

For payment

We may use and share your information for billing, payment, eligibility review, coverage determinations, or other payment-related activities.

For healthcare operations

We may use and share your information to run our organization, improve services, maintain quality, train staff, manage compliance, and perform other healthcare operations.

To communicate with you

We may use your information to contact you about appointments, follow-ups, service updates, and other matters related to your care or services.

With business associates

We may share your information with vendors or service providers that help us operate our services — such as secure technology providers, storage vendors, scheduling tools, and administrative partners — when they are required to protect your information.

As required by law

We may disclose information if federal or state law requires it.

For public health & safety

We may disclose information in limited circumstances for public health reporting, to prevent a serious threat to health or safety, or as otherwise permitted by law.

For oversight & legal processes

We may disclose information for health oversight activities, government audits, investigations, court orders, or legal proceedings when permitted or required by law.

For specialized government functions

We may disclose information in certain limited situations for workers' compensation, law enforcement, or other specialized government functions as permitted by law.

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your protected health information
• Provide you with this notice of our legal duties and privacy practices
• Follow the duties and privacy practices described in this notice
• Notify you if a breach occurs that may have compromised the privacy or security of your information, when required by law

We will not use or share your information other than as described here unless you tell us we can in writing, when required.

Complaints

If you have questions, would like to exercise your rights, or want to file a complaint, contact us:

Changes to This Notice

We may change this notice from time to time. Any updated notice will apply to the information we already have, as well as any information we receive in the future. The current version will be posted on our website with the updated effective date.