HIPAA NOTICE OF PRIVACY PRACTICES

Effective Date: August 3, 2026

Phoenix Health and WellBeing, LLC dba Phoenix Health & WellBeing

Your Information. Your Rights. Our Responsibilities.

This notice describes how medical and mental health information about you may be used and disclosed and how you can obtain access to this information. Please review it carefully.

This Notice of Privacy Practices (“Notice”) applies to Phoenix Health and WellBeing, LLC dba Phoenix Health & WellBeing, its workforce, and healthcare professionals providing services through the practice as permitted by law. References to “we,” “our,” and “us” in this Notice mean Phoenix Health & WellBeing.

Your Rights

You have the right to:

• Obtain an electronic or paper copy of your health record;

• Ask us to correct your health record;

• Request confidential communications;

• Ask us to limit certain uses or disclosures;

• Obtain a list of certain disclosures we have made;

• Obtain a paper copy of this Notice;

• Choose someone to act for you; and

• File a complaint if you believe your privacy rights have been violated.

Obtain an Electronic or Paper Copy of Your Health Record

You may ask to see or receive an electronic or paper copy of your medical, mental health, billing, and other health information maintained by us in a designated record set. Contact us to learn how to submit a request.

We generally will provide a copy or summary within 30 days after receiving your request. We may charge a reasonable, cost-based fee as permitted by law. In limited circumstances, we may deny access to certain information. When applicable, we will explain the denial and any right to have the decision reviewed.

Psychotherapy notes maintained separately from the medical record receive additional protection and generally are not included in the ordinary right of access under HIPAA.

Ask Us to Correct Your Health Record

You may ask us to correct health information that you believe is incorrect or incomplete. We may deny the request in certain circumstances, but we will explain the reason in writing, generally within 60 days.

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular location—for example, only through the patient portal, at a certain telephone number, or by mail at a different address. We will accommodate reasonable requests.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations. We are not always required to agree, and we may deny a request if it could affect your care or if disclosure is otherwise permitted or required by law. If we agree, we will follow the restriction except when information is needed for emergency treatment or another legal exception applies.

If you pay for a healthcare service or item out of pocket in full, you may ask us not to disclose information about that service or item to your health plan for payment or healthcare operations. We will agree unless disclosure is required by law.

Obtain an Accounting of Disclosures

You may ask for a list of certain disclosures of your health information made during the six years before the date of your request. The list will identify who received the information and, when required, why it was disclosed.

The accounting will not include certain disclosures, such as disclosures for treatment, payment, healthcare operations, disclosures you authorized, and other disclosures excluded by law. We will provide one accounting during any 12-month period without charge. We may charge a reasonable, cost-based fee for an additional request during the same 12-month period after notifying you in advance.

Obtain a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically. We will provide it promptly.

Choose Someone to Act for You

If you have given someone medical power of attorney, if someone is your legal guardian, or if another person is legally authorized to act as your personal representative, that person may exercise your rights and make choices about your health information. We will verify the person’s authority before taking action.

File a Complaint

You may complain if you believe we violated your privacy rights. Contact our Privacy Officer using the information at the end of this Notice.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:

• Online: https://www.hhs.gov/hipaa/filing-a-complaint/index.html

• Phone: 1-877-696-6775

• Mail: 200 Independence Avenue, S.W., Washington, D.C. 20201

We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences about what we disclose. Tell us what you want us to do, and we will follow your instructions when required by law.

Family, Friends, and Others Involved in Your Care

You may tell us whether we may disclose information to a family member, close friend, or another person involved in your care or payment for your care.

If you are unavailable or unable to express a preference, we may disclose limited information when, in our professional judgment, it is in your best interest and permitted by law. We may also disclose information when needed to lessen a serious and imminent threat to health or safety.

Arizona law may provide additional confidentiality protections for medical and behavioral-health records. We will limit disclosures to what is permitted by applicable state and federal law.

Disaster Relief

We may disclose limited information to an organization assisting with disaster-relief efforts so that family or others responsible for your care can be notified about your condition, status, or location, when permitted by law.

Marketing, Sale of Information, and Psychotherapy Notes

We generally will obtain your written authorization before:

• Using or disclosing your protected health information for marketing when authorization is required;

• Selling your protected health information; or

• Using or disclosing psychotherapy notes, except for limited purposes permitted by law.

Phoenix Health & WellBeing does not sell your protected health information.

Fundraising

We do not currently use protected health information to contact individuals for fundraising. If that practice changes, you will have the right to opt out of future fundraising communications.

If we maintain substance use disorder patient records subject to 42 C.F.R. Part 2, we will provide any additional notice and choice required before using Part 2 information for fundraising.

How We Typically Use or Disclose Your Health Information

Treatment

We may use your health information and disclose it to healthcare professionals involved in your treatment, care coordination, consultation, referral, or continuity of care.

Example: Your therapist may coordinate with your Phoenix Health & WellBeing psychiatric provider regarding symptoms, medications, or treatment recommendations when permitted by law.

Healthcare Operations

We may use and disclose health information to operate the practice, improve quality, supervise and train staff, conduct peer review, evaluate provider performance, manage risk, obtain legal or compliance services, and contact you when necessary.

Example: We may review records as part of clinical supervision, documentation audits, quality improvement, or coordination between therapy and psychiatric services.

Payment

We may use and disclose health information to bill and obtain payment from health plans, payment processors, or other responsible parties.

Example: We may provide information about your diagnosis and service to your insurance plan so that it can process a claim.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose health information for the following purposes when applicable legal requirements are met.

Public Health and Safety

We may disclose health information for certain public-health and safety activities, including:

• Preventing or controlling disease;

• Reporting adverse reactions to medications or product problems;

• Reporting suspected abuse, neglect, exploitation, or domestic violence when permitted or required;

• Preventing or reducing a serious and imminent threat to a person or the public; and

• Other activities authorized by public-health law.

Research

We may use or disclose health information for research only when the research satisfies applicable legal requirements, such as your authorization or approval of an institutional review board or privacy board.

Compliance With Law

We will disclose information when state or federal law requires it, including to the U.S. Department of Health and Human Services when it requests information to evaluate our compliance with federal privacy law.

Health Oversight

We may disclose health information to health-oversight agencies for activities authorized by law, such as audits, inspections, licensing investigations, and disciplinary proceedings.

Workers’ Compensation and Other Government Programs

We may use or disclose information as authorized by workers’ compensation laws and for certain government functions, including military, national-security, correctional, and protective-service activities, when legally applicable.

Law Enforcement

We may disclose health information for limited law-enforcement purposes when authorized or required by law. Behavioral-health and substance-use-disorder records may receive additional protection.

Medical Examiners, Coroners, and Funeral Directors

We may disclose information to a coroner, medical examiner, or funeral director when permitted by law.

Organ and Tissue Donation

When applicable, we may disclose information to organizations involved in organ, eye, or tissue donation and transplantation.

Lawsuits and Legal Proceedings

We may disclose health information in response to a valid court or administrative order or, when legally permitted, in response to a subpoena or other lawful process. Medical, behavioral-health, psychotherapy, and substance-use-disorder records may be subject to additional protections and requirements.

Mental Health and Arizona Confidentiality Protections

Arizona law generally treats medical records, payment records, behavioral-health records, and information contained in those records as privileged and confidential. We will disclose those records only as authorized by you or as permitted or required by applicable Arizona and federal law.

Examples of legally permitted disclosures may include disclosures to providers involved in your care, persons you authorize, health plans for payment, licensing or oversight authorities, persons authorized by a court order, and persons able to help prevent a serious and imminent threat.

When Arizona law provides greater privacy protection than HIPAA, we will follow the more protective applicable requirement.

Substance Use Disorder Records

To the extent that we create, receive, or maintain substance use disorder patient records protected by 42 C.F.R. Part 2, those records receive additional federal confidentiality protections.

Part 2 records may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless you provide specific written consent or the use or disclosure is authorized by a court order and subpoena that satisfy Part 2.

Part 2 records disclosed with your consent may be redisclosed as permitted by HIPAA unless the consent or applicable law provides otherwise. Separate consent may be required for the use or disclosure of SUD counseling notes and for certain legal proceedings.

We will notify affected individuals and government authorities of a breach of unsecured Part 2 records when required by law.

Psychotherapy Notes

Psychotherapy notes are notes recorded by a mental health professional documenting or analyzing the contents of a counseling conversation and maintained separately from the rest of the medical record. Psychotherapy notes generally receive additional protection. In most circumstances, we will obtain your written authorization before using or disclosing psychotherapy notes, except as otherwise permitted or required by law.

Electronic Communications and Patient Portal

We may communicate with you through the secure patient portal, telephone, email, text message, or mail according to your preferences and our policies. Electronic communications may involve privacy and security risks. You may request a reasonable alternative method of communication.

You may use the patient portal to access certain records, forms, messages, appointments, or billing information, subject to system functionality and applicable law.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.

• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information, as required by law.

• We must follow the duties and privacy practices described in the Notice currently in effect.

• We will provide you with a copy of this Notice.

• We will not use or disclose your information other than as described in this Notice unless you authorize us in writing or another use or disclosure is permitted or required by law.

• If you give written authorization, you may revoke it in writing at any time. Revocation will not affect actions already taken in reliance on the authorization.

Changes to This Notice

We may change the terms of this Notice, and the changes may apply to all information we maintain, including information created or received before the change. The current Notice will be available upon request, at our office, and on our Website.

Privacy Contact

For questions, requests, or complaints concerning privacy, contact:

Privacy Officer, Zabeba Badada
Phoenix Health and WellBeing, LLC
dba Phoenix Health & WellBeing
4801 S. Lakeshore Drive, Suite 206
Tempe, AZ 85282

Email: info@phoenixhealthaz.com
Phone: 480-256-9299
Website: phoenixhealthaz.com