HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL AND MENTAL HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This HIPAA Notice of Privacy Practices (the “Notice”) contains important information about how your health information may be used and disclosed and about your rights regarding that information. You have the right to receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. If you have questions about this Notice, please contact our Privacy Officer using the information in Part 12.

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) imposes requirements on health care practices regarding how certain individually identifiable health information, known as protected health information (or “PHI”), may be used and disclosed. This Notice describes how Mind View New York Mental Health Counseling, PLLC, and MindView Therapy, LLC, together doing business as MindView Therapy, along with their affiliated companies, workforce members, and licensors (the “Practice,” “we,” “us,” or “our”), may use and disclose your PHI for treatment, payment, and health care operations, and for other purposes permitted or required by law. This Notice also describes your rights regarding your PHI. “Protected health information” is information we create, maintain, or transmit that identifies you, or could reasonably be used to identify you, and that relates to your past, present, or future physical or mental health, the health care you receive, or payment for that care.

IMPORTANT: This Notice applies only to health information protected by HIPAA. HIPAA applies to health information of individuals who receive services from the Practice for which the Practice bills and collects reimbursement from a health plan. This Notice does not apply to information that is not protected health information under HIPAA, and it does not apply to individuals who privately pay in full for their services and are not billed to insurance. In those cases, our General Privacy Policy applies instead.

We are committed to protecting your health information and to using or disclosing only the minimum information necessary to accomplish the intended purpose. This Notice applies to all of the records we maintain about you. Other health care providers may have different privacy practices for their own records.

We are required by law to:

• Keep your protected health information private.
• Give you this Notice of our legal duties and privacy practices regarding your health information.
• Follow the terms of the Notice currently in effect.
• Notify you if a breach of your unsecured protected health information occurs.

Part 1. How We May Use and Disclose Health Information Without Your Authorization

HIPAA generally permits us to use and disclose your health information without your written permission for treatment, payment, and health care operations. The examples below are not a complete list; they illustrate the most common uses and disclosures.

Treatment. We may use and disclose your health information to provide, coordinate, or manage your care and related services. For example, we may share information with other providers involved in your care, or with a provider we refer you to.

Payment. We may use and disclose your health information to obtain payment or reimbursement for services. For example, we may verify your eligibility and coverage, submit and adjudicate claims, coordinate benefits with your health plan, and follow up on unpaid claims.

Health Care Operations. We may use and disclose your health information for the operation of the Practice. Examples include quality assessment and improvement, reviewing the competence or qualifications of clinicians, training, credentialing and licensing activities, care coordination, arranging legal and auditing services, fraud and abuse detection, business planning, and general administration.

We will limit the information used or disclosed to the “Designated Record Set” and to the “Minimum Necessary” standard as required by HIPAA.

Part 2. Other Uses and Disclosures Permitted Without Your Authorization

We may use or disclose your health information without your authorization in the following additional situations, subject to the limits of applicable law:

Individuals involved in your care. We may share information with a family member, friend, or other person you identify, to the extent the information is directly relevant to that person’s involvement in your care or payment for your care. For example, if a caregiver with prior knowledge of your care asks about your next appointment, we may confirm the date and time.

Appointment reminders and health-related communications. We may contact you with appointment reminders, and to describe or recommend treatment options, alternatives, or other health-related benefits and services that may interest you.

Disclosure to your health plan. We may disclose information to your health plan to facilitate claims and benefit payments.

As required by law. We will disclose your health information when required by federal, state, or local law.

Public health activities. We may disclose information for public health purposes, such as preventing or controlling disease, or reporting to a public health authority as permitted by law.

Abuse, neglect, or domestic violence. We may disclose information to the appropriate authority when we reasonably believe you may be a victim of abuse, neglect, or domestic violence, as permitted or required by law.

Health oversight activities. We may disclose information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and administrative proceedings. We may disclose information in response to a court or administrative order, and in certain cases in response to a subpoena, discovery request, or other lawful process.

Law enforcement. We may disclose information to law enforcement officials for limited purposes permitted by law, such as responding to a court order or warrant, or reporting certain crimes.

To avert a serious threat to health or safety. We may use or disclose information when necessary to prevent or lessen a serious and imminent threat to the health or safety of you, the public, or another person. Any such disclosure will be made only to a person able to help prevent or lessen the threat.

Coroners, medical examiners, and funeral directors. We may disclose information as necessary to carry out their duties.

Workers’ compensation. We may disclose information as authorized by and necessary to comply with workers’ compensation laws.

Military, veterans, and national security. If you are a member of the armed forces, we may release information as required by military authorities. We may also disclose information for authorized national security, intelligence, and protective service activities.

Correctional institutions. If you are an inmate of a correctional institution, we may disclose information to the institution as permitted by law.

Business associates. We may disclose information to third parties that perform services for us (for example, billing, technology, or clearinghouse vendors). We require these business associates by written contract to protect your information and to use and disclose it only as HIPAA permits.

Deceased individuals. We may disclose information about a deceased individual to a coroner, medical examiner, funeral director, or, in certain cases, to family members or others who were involved in the individual’s care, as permitted by law.

Part 3. Uses and Disclosures That Require Your Written Authorization

The following uses and disclosures will be made only with your written authorization:

Psychotherapy notes. Most uses and disclosures of psychotherapy notes require your written authorization. Psychotherapy notes are notes recorded by a clinician documenting or analyzing the contents of a counseling session that are kept separate from the rest of your record.

Marketing. Most uses and disclosures of your PHI for marketing purposes require your written authorization.

Sale of information. Any disclosure that constitutes a sale of your PHI requires your written authorization.

Other uses. Any use or disclosure not described in this Notice will be made only with your written authorization.

You may revoke your authorization in writing at any time, except to the extent we have already acted in reliance on it. We are unable to reverse disclosures we already made with your permission, and we may be required to retain records of the services and payments related to your care.

Part 4. Additional Protections Under Federal and State Law

Certain categories of information receive protection beyond standard HIPAA rules. Where a state or other federal law imposes a more stringent privacy standard than HIPAA, and is not preempted by federal law, we will follow the more stringent standard.

Mental health information. Mental health records receive heightened protection under New York and Indiana law. We will follow the applicable state confidentiality requirements governing the disclosure of mental health information.

HIV/AIDS-related information. Information related to HIV status or treatment receives special protection under state law and will be disclosed only as those laws permit.

Substance use disorder records. Where applicable, records of the identity, diagnosis, or treatment of a substance use disorder may receive additional protection under federal law (42 CFR Part 2) and will be disclosed only as permitted by that law.

Genetic information. We do not use or disclose genetic information for underwriting purposes, and we protect genetic information as required by the Genetic Information Nondiscrimination Act (GINA).

Part 5. Telehealth

The Practice currently delivers services primarily by telehealth. We use technology platforms that are configured to safeguard your information, and we require our technology vendors to sign business associate agreements that obligate them to protect your PHI. Telehealth carries inherent privacy and security risks, including the possibility of interruption or unauthorized access despite reasonable safeguards. You are responsible for taking reasonable steps to protect your own privacy on your end of a telehealth session, such as using a private location and a secure connection.

Part 6. Your Rights Regarding Your Health Information

You have the following rights regarding the health information we maintain about you. To exercise any of these rights, contact the Privacy Officer listed in Part 12. Most requests must be made in writing.

Right to inspect and copy. You have the right to inspect and obtain a copy of your health information, including an electronic copy if we maintain it electronically. We may charge a reasonable, cost-based fee for copying, mailing, or supplies. We may deny access in limited circumstances, and you may request review of certain denials.

Right to amend. If you believe information we have about you is incorrect or incomplete, you may ask us to amend it for as long as we keep the information. Your request must be in writing and must include a reason supporting the amendment. We may deny your request in certain circumstances, and we will provide a written explanation if we do.

Right to an accounting of disclosures. You have the right to request a list of certain disclosures we made of your health information. This right does not include disclosures made for treatment, payment, or health care operations, disclosures made to you, disclosures you authorized, and certain other disclosures. Your request must state a time period no longer than six years and may not include dates before April 14, 2003. The first list requested within a 12-month period is free; we may charge for additional lists after notifying you of the cost.

Right to request restrictions. You have the right to request a restriction on how we use or disclose your information for treatment, payment, or health care operations, and on disclosures to individuals involved in your care. We are not required to agree to most restriction requests. However, we must agree to a request to restrict disclosure to a health plan if the disclosure is for payment or health care operations, is not otherwise required by law, and concerns a service you paid for out of pocket in full.

Right to request confidential communications. You have the right to request that we communicate with you in a specific way or at a specific location, such as only by mail or only at a certain phone number. We will accommodate reasonable requests and will not ask you the reason. Your request must specify how or where you wish to be contacted.

Right to a paper copy. You have the right to a paper copy of this Notice upon request, even if you agreed to receive it electronically.

Right to be notified of a breach. You have the right to be notified if a breach of your unsecured protected health information occurs. See Part 7.

Right to choose someone to act for you. If you have given someone medical power of attorney, or if someone is your legal guardian or personal representative, that person can exercise your rights and make choices about your health information. We will verify the authority of any personal representative before taking action.

Part 7. Breach Notification

We will notify you following the discovery of a breach of your unsecured protected health information, as required by the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”). Notice will be provided without unreasonable delay and no later than 60 days after discovery, in writing by first-class mail, or by email if you have agreed to receive notices electronically.

Where we have insufficient or out-of-date contact information for ten or more affected individuals, we may provide substitute notice by posting on our website or through major print or broadcast media in the areas where affected individuals likely reside. Where fewer than ten individuals are affected, we may provide substitute notice by an alternative written form.

To the extent possible, the notice will describe the breach, the types of information involved, the steps you should take to protect yourself, what we are doing to investigate and mitigate the breach and prevent future breaches, and how to contact us. Substitute notices provided through website or media will include a toll-free number you can call to learn whether your information was involved.

Part 8. Changes to This Notice

We reserve the right to change the terms of this Notice at any time. Any change will apply to information we already have about you as well as information we receive in the future. If we make a material change, we will post the revised Notice at mindviewtherapy.com/hipaa-notice and make copies available upon request.

Part 9. Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Practice or with the U.S. Department of Health and Human Services. To file a complaint with the Practice, contact the Privacy Officer listed in Part 12. All complaints to the Practice must be submitted in writing.

To file a complaint with the federal government, contact the Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue S.W., Washington, D.C. 20201, by phone at 1-877-696-6775, or online at hhs.gov/ocr/complaints.

You will not be penalized or retaliated against for filing a complaint.

Part 10. Minors and Personal Representatives

The Practice generally serves adults age 18 and older. Where we provide services to a minor or to an individual who has a personal representative, we will handle access to and disclosure of information in accordance with HIPAA and applicable state law, including any state-law provisions that give minors control over certain of their own health information.

Part 11. Effective Date

The effective date of this Notice is July 17, 2026.

Part 12. Contact Information

All questions, requests, and complaints relating to this Notice should be directed to:

Attn: Privacy Officer MindView Therapy 89-14 Parsons Boulevard, Suite 24, 5th Floor Jamaica, NY 11432 (646) 493-4007 admin@mindviewtherapy.com

Our current Notice is posted at mindviewtherapy.com/hipaa-notice.