HIPAA NOTICE OF PRIVACY PRACTICES

Effective Date: 2/19/2026

This Notice describes how medical and mental health information about you may be used and disclosed, and how you can access this information. Please review it carefully.

Head In The Right Direction (HITRD) is committed to protecting the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), applicable federal regulations, and New York State law.

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION

We may use or disclose your Protected Health Information for the following purposes:

Treatment
To coordinate care, referrals, and clinical services between you and licensed providers affiliated with HITRD.

Payment
To obtain reimbursement for services when applicable, including coordination with insurance providers.

Healthcare Operations
For administrative purposes such as quality improvement, compliance monitoring, scheduling, and business management activities.

As Required by Law
When disclosure is mandated by federal, state, or local law, including public health reporting, court orders, or protection against serious threats to health or safety.

Any other use or disclosure not described in this Notice will require your written authorization.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

Under HIPAA and New York State law, you have the right to:

• Access and obtain a copy of your health information

• Request corrections to your records

• Request limits on certain uses or disclosures

• Request confidential communications (such as contacting you at a specific phone number or address)

• Receive an accounting of certain disclosures

• Receive a copy of this Notice

To exercise these rights, please contact us using the information listed below.

OUR RESPONSIBILITIES

HITRD is required by law to:

• Maintain the privacy of your Protected Health Information

• Provide you with notice of our legal duties and privacy practices

• Notify you in the event of a breach of unsecured Protected Health Information

• Follow the terms of this Notice currently in effect

We implement appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, use, or disclosure.

Where applicable, HITRD enters into Business Associate Agreements with third-party service providers to ensure compliance with HIPAA regulations.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with HITRD or with the U.S. Department of Health and Human Services. Filing a complaint will not result in retaliation.

To file a complaint or ask questions regarding this Notice, contact:

Adam Barta, LCSW-R Bartaa@hitrd.com

You may also contact:

U.S. Department of Health and Human Services
Office for Civil Rights
www.hhs.gov/ocr/privacy/hipaa

CHANGES TO THIS NOTICE

We reserve the right to change this Notice at any time. Any updated version will be posted on this website with a revised effective date.