Notice of Privacy Practices (HIPAA)

Effective Date: February 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Altera Health P.C., doing business as ADHDone and its network of locally branded psychiatric practices, is required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to abide by the terms of the Notice currently in effect.

This Notice applies to all of the medical records and other PHI generated or maintained by ADHDone and its locally branded practices, including but not limited to records created by your provider, information received from other healthcare providers, billing and insurance records, appointment and scheduling records, and clinical documentation generated through technology-assisted tools.

How We May Use and Disclose Your Protected Health Information

The following categories describe the ways we may use and disclose your PHI without your written authorization:

Treatment

We may use and disclose your PHI to provide, coordinate, and manage your psychiatric care. This includes sharing information among your treatment team, consulting with other healthcare providers involved in your care, referring you for additional services, coordinating prescription medications (including controlled substances), facilitating pharmacogenomic testing (such as GeneSight), and generating clinical documentation through technology-assisted tools used during your sessions. ADHDone may use technology tools, including artificial intelligence, to assist with clinical documentation. Any documentation generated with such tools is reviewed by your provider and becomes part of your medical record.

Payment

We may use and disclose your PHI to bill and collect payment for the services we provide. This includes verifying your insurance coverage, submitting claims to your health plan, communicating with your insurance company about your treatment to obtain prior authorization or determine coverage, and collecting copayments, deductibles, and outstanding balances.

Healthcare Operations

We may use and disclose your PHI for our healthcare operations, which include quality assessment and improvement activities, clinical auditing, provider credentialing and licensing, business planning, compliance activities, and other activities necessary to run our practice and serve our patients.

Appointment Reminders and Health-Related Communications

We may use and disclose your PHI to contact you with appointment reminders, treatment follow-ups, care coordination messages, and other health-related information via telephone, email, SMS/MMS text messaging (if you have opted in), mail, or other communication methods.

As Required by Law

We will use and disclose your PHI when required to do so by federal, state, or local law, regulation, or court order.

Public Health Activities

We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease, reporting adverse reactions to medications, and notifying appropriate parties regarding communicable diseases, as required by law.

Abuse, Neglect, or Domestic Violence

If we reasonably believe you are a victim of abuse, neglect, or domestic violence, we may disclose your PHI to the appropriate government authority as required or authorized by law.

Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure or disciplinary actions.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court order, administrative order, subpoena, discovery request, or other lawful process, subject to applicable legal requirements.

Law Enforcement

We may disclose your PHI to law enforcement officials under limited circumstances, including: in response to a court order or warrant; to identify or locate a suspect, fugitive, material witness, or missing person; when the information pertains to a victim of a crime under certain conditions; regarding a death we believe may be the result of criminal conduct; and regarding criminal conduct that occurs on our premises.

Coroners, Medical Examiners, and Funeral Directors

We may disclose your PHI to coroners, medical examiners, or funeral directors as necessary to carry out their duties under applicable law.

Serious Threat to Health or Safety

We may use and disclose your PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, to the extent disclosure is to a person or persons reasonably able to prevent or lessen the threat.

Specialized Government Functions

We may disclose your PHI for certain specialized government functions, including military and veterans' activities, national security and intelligence activities, and protective services for the President and others.

Workers' Compensation

We may disclose your PHI as authorized by and necessary to comply with workers' compensation laws and similar programs.

Uses and Disclosures Requiring Your Written Authorization

The following uses and disclosures require your written authorization:

• Psychotherapy Notes. Uses and disclosures of psychotherapy notes (if maintained separately from your medical record) require your authorization, except for limited purposes such as the originating provider's own treatment, our defense in legal proceedings, or as required by law.
• Marketing. We will not use or disclose your PHI for marketing purposes without your written authorization.
• Sale of PHI. We will never sell your PHI.
• Other Uses. Any other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke any authorization at any time by submitting a written request to us, although revocation will not affect any actions we have already taken in reliance on your authorization.

Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your PHI:

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your medical record and billing records. To request access, submit a written request to the contact information below. We may charge a reasonable, cost-based fee for copies. We will respond to your request within thirty (30) days (or sixty (60) days if an extension is necessary, with written notice). In limited circumstances, we may deny your request, and you will have the right to have the denial reviewed.

Right to Amend

If you believe that information in your record is incorrect or incomplete, you have the right to request an amendment. Submit your request in writing, including the reason for the amendment. We will respond within sixty (60) days. We may deny your request in certain circumstances, and if so, we will provide you with a written explanation of the denial and your right to submit a statement of disagreement.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This accounting will not include disclosures made for treatment, payment, or healthcare operations, or disclosures made with your authorization. Submit your request in writing. The first accounting in any twelve-month period is free; we may charge a reasonable fee for additional requests within the same period.

Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan for payment or healthcare operations purposes if you have paid for the service in full out of pocket. Submit your request in writing.

Right to Request Confidential Communications

You have the right to request that we communicate with you about health matters using a particular method or at a certain location. For example, you may request that we contact you only by email or only at a specific phone number. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically. Contact us using the information below to request a paper copy.

Right to Be Notified of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI, as required by the HIPAA Breach Notification Rule.

Our Duties

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Abide by the terms of the Notice currently in effect
• Notify you if a breach of your unsecured PHI occurs

We reserve the right to change the terms of this Notice and to make new provisions effective for all PHI we maintain. If we make material changes, a revised Notice will be posted on our website and made available at your next appointment or upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll-Free: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

Contact Information

For questions about this Notice, to exercise any of your rights, or to file a complaint, contact:

Altera Health P.C. d/b/a ADHDone
HIPAA Privacy Officer: Daniel
Mailing Address: P.O. Box 8013, Greensboro, NC 27419
Email: info@adhdone.com
Phone: 18554682343
Website: adhdone.com