HIPAA Notice of Privacy Practices

How We May Use and Disclose Your Health Information

Treatment

We use your PHI to provide, coordinate, and manage your psychiatric care and related services. Example: Dr. Sharma may review your history, symptoms, and medications during a telehealth visit to develop or adjust your treatment plan, or may share information with another provider involved in your care.

Payment

We may use and disclose your PHI to obtain payment for the services we provide. Example: We may share information with your health plan to determine eligibility, obtain prior authorization, or submit a claim for a telehealth appointment.

Health Care Operations

We may use and disclose your PHI to support the business and operational activities of the practice. Example: We may use your information for quality assessment, staff training, appointment reminders, or to review and improve the care we deliver.

Other Permitted or Required Uses and Disclosures

We may use or disclose your PHI without your written authorization in certain circumstances, including: as required by law; for public health activities; to report abuse, neglect, or domestic violence; for health oversight activities; in response to a court order, subpoena, or other lawful process; to law enforcement under limited circumstances; to coroners, medical examiners, and funeral directors; for organ donation; for approved research; to avert a serious threat to health or safety; for specialized government functions; and for workers’ compensation as authorized by law. Most other uses and disclosures — including marketing, the sale of PHI, and most disclosures of psychotherapy notes — require your written authorization, which you may revoke at any time in writing.

Your Rights Regarding Your Health Information

• Right to Access and Copy. You may inspect and obtain a copy of your PHI, including an electronic copy of records we maintain electronically.
• Right to Request an Amendment. You may ask us to amend PHI you believe is incorrect or incomplete.
• Right to an Accounting of Disclosures. You may request a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions. You may request restrictions on how we use or disclose your PHI. We are not required to agree, except that we must agree to a request to restrict disclosure to a health plan for an item or service you paid for in full out of pocket.
• Right to Confidential Communications. You may request that we communicate with you in a certain way or at a certain location.
• Right to a Paper Copy. You may obtain a paper copy of this Notice upon request, even if you agreed to receive it electronically.
• Right to Be Notified of a Breach. You have the right to be notified if there is a breach of your unsecured PHI.
• Right to Complain. You may file a complaint if you believe your privacy rights have been violated (see below).

Our Duties

We are required by law to maintain the privacy of your PHI, to provide this Notice of our legal duties and privacy practices, to abide by the terms of the Notice currently in effect, and to notify you following a breach of unsecured PHI. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any information we receive in the future. The current Notice will be posted on our website and available upon request.

How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer using the contact information below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR):

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W., Washington, D.C. 20201
Toll-free: 1-877-696-6775
www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for filing a complaint.

Contact — Privacy Officer

To exercise any of your rights, to request a paper copy of this Notice, or to ask questions about our privacy practices, please contact the Privacy Officer:

Effective Date: June 7, 2026