Effective April 14, 2003 – Revised February 16, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (“Notice”) explains how we, our Business Associates, and their subcontractors may use and disclose your Protected Health Information (“PHI”) to carry out treatment, payment, and health care operations (“TPO”), and for other purposes permitted or required by law. It also describes your rights regarding your PHI and how you may exercise those rights.

By signing our Acknowledgment form, you are only confirming that you received, or had the opportunity to receive, this Notice.

We reserve the right to change this Notice at any time and to make the revised Notice effective for all PHI we maintain. A current copy will always be posted in our office, and you may request a paper copy at any time.

I. OUR LEGAL DUTIES

We are required by law to:

- Maintain the privacy of your PHI under federal and Texas law.

- Provide you with this Notice of our legal duties and privacy practices.

- Notify you following a breach of unsecured PHI.

- Follow the terms of the Notice currently in effect.

II. USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION WITHOUT YOUR AUTHORIZATION

We may use or disclose your PHI without your written authorization for the following purposes:

A. Treatment

We may use or disclose your PHI to provide, coordinate, or manage your health care. Examples include sharing information with physicians, nurses, or other providers involved in your care, or sending records to a specialist for consultation.

B. Payment

We may use or disclose your PHI to obtain payment for services, including billing your insurance, obtaining prior authorizations, or determining coverage. If you pay in full, out‑of‑pocket for a service and request that we not disclose that information to your health plan, we must honor that request unless disclosure is required by law.

C. Health Care Operations

We may use or disclose PHI for activities necessary to operate our practice, such as quality assessment, credentialing, training, business management, and insurance audits.

D. Appointment Reminders & Health‑Related Benefits

We may contact you by phone, text, or mail to remind you of appointments or inform you of treatment alternatives or health‑related benefits.

E. Individuals Involved in Your Care

If you do not object, we may disclose PHI to family members, close friends, or individuals involved in your care or payment for your care.

F. Business Associates

We may disclose PHI to third‑party vendors who assist us (e.g., billing, legal, accounting). They are required by law to safeguard your information.

G. Public Health & Safety

We may disclose PHI for public health purposes, including reporting diseases, injuries, abuse, adverse events, or preventing a serious and imminent threat.

H. Health Oversight Activities

We may disclose PHI to government agencies for audits, investigations, licensure, or compliance monitoring.

I. Legal Proceedings & Law Enforcement

We may disclose PHI in response to a court order, subpoena, or administrative request, or to law enforcement when required by law.

J. Military, National Security, and Inmates

We may disclose PHI to military authorities, for national security activities, or to correctional institutions.

K. Workers’ Compensation

We may disclose PHI as authorized by workers’ compensation laws.

L. Coroners, Medical Examiners, Funeral Directors

We may disclose PHI to assist with identifying a deceased person, determining cause of death, or funeral arrangements.

M. Organ and Tissue Donation

If you are an organ donor, we may disclose PHI to facilitate donation or transplantation.

N. Research

We may use or disclose PHI for research with IRB approval, when required by law, or when information is de‑identified. Texas law prohibits researchers from identifying you in reports.

O. Electronic Disclosures (Texas Requirement)

Texas law requires us to notify you that your PHI may be disclosed electronically for treatment, payment, or health care operations.

III. SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER (SUD) RECORDS

Records protected under 42 CFR Part 2 have stricter rules. We cannot disclose SUD treatment information without your written consent, except in limited circumstances. SUD counseling notes require separate consent. Redisclosure is prohibited unless allowed under Part 2.

IV. USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION

We must obtain your written authorization for most uses of psychotherapy notes, marketing involving financial remuneration, sale of PHI, or any other use not described in this Notice. You may revoke your authorization at any time in writing.

V. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION

1. Right to Inspect and Copy

You may request to inspect or obtain a copy of your PHI, including electronic records. We may charge a reasonable fee. Certain records cannot be accessed, including psychotherapy notes, information compiled for legal proceedings, restricted information, or information that may cause harm if disclosed.

2. Right to Amend

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing. If denied, we will explain why in writing.

3. Right to an Accounting of Disclosures

You may request a list of disclosures made in the past six years (excluding TPO and certain other disclosures). One list per year is free.

4. Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We are not required to agree, except when you pay in full, out‑of‑pocket and request nondisclosure to your health plan.

5. Right to Request Confidential Communications

You may request that we contact you in a specific way. We will accommodate reasonable requests.

6. Right to a Paper Copy of This Notice

You may request a paper copy at any time.

7. Right to Breach Notification

You will be notified within 60 days if your unsecured PHI is breached.

8. Right to Have Someone Act on Your Behalf

You may designate a personal representative to make decisions regarding your PHI.

VI. QUESTIONS OR COMPLAINTS

If you have questions or believe your privacy rights have been violated, contact:

Privacy Officer: Amy Chaung

Phone: (972) 943‑0410 ext. 103

Fax: (972) 212‑4270

1524 Independence Parkway, Suite A‑1, Plano, TX 75075

2831 W 15th Ste 100, Plano, TX 75075

You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.