NOTICE OF PRIVACY PRACTICES

I. Introduction

Inspired Consciousness LLC("we," "us," or "our") is committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your protected health information ("PHI") to carry out treatment, payment, or health care operations, and for other purposes permitted or required by law. It also describes your rights regarding your health information and how you can exercise those rights.

We are required by law to maintain the privacy of your PHI, to provide you with notice of our legal duties and privacy practices concerning your PHI, and to notify you following a breach of unsecured PHI. We must follow the privacy practices described in this Notice while it is in effect. We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. Any changes will apply to all PHI we maintain. Before we make a significant change in our practices, we will revise this Notice and make the new Notice available upon request.

You may request a copy of this Notice at any time. For more information about our privacy practices, or for additional copies of this Notice, please contact us using the information listed at the end of this Notice.

Scope; Who Is Covered by This Notice. This Notice applies to Inspired Consciousness LLC, a Massachusetts limited liability company, and to its members, managers, owners, officers, employees, volunteers, students, trainees, and the licensed or authorized clinicians and other workforce members who provide services for or on behalf of Inspired Consciousness LLC (collectively, the "Workforce"), as well as to any business associates that create, receive, maintain, or transmit PHI on our behalf under a written business associate agreement. This Notice applies to all care settings in which we operate, including in-person and telehealth services and any secure patient or provider portal we make available. Each licensed clinician practices only within the scope of that clinician's own license, credentials, applicable payer requirements, and organizational policy; nothing in this Notice expands any clinician's scope of practice or creates any duty beyond that required by applicable law.

II. How We May Use and Disclose Your Protected Health Information

The following categories describe different ways that we may use and disclose your PHI. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information will fall within one of the categories.

A. Uses and Disclosures Without Your Authorization

1. Treatment

We may use or disclose your PHI to provide, coordinate, or manage your health care and related services. This includes the coordination or management of your health care with a third party. For example, we may disclose your PHI to a specialist who is treating you, or to a pharmacist who is filling a prescription for you. We may also disclose PHI to other health care providers who may be treating you when necessary for your treatment.

2. Payment

We may use or disclose your PHI to obtain payment for services we provide to you. For example, we may contact your health insurer to certify that you are eligible for benefits, or we may provide your insurer with details regarding your treatment to determine if your insurer will cover your treatment. We may also use and disclose your PHI to obtain prior authorization from your health plan for treatment we recommend.

3. Health Care Operations

We may use or disclose your PHI for our health care operations. Health care operations include quality assessment and improvement activities, reviewing the competence or qualifications of health care professionals, conducting training programs, accreditation, certification, licensing or credentialing activities, and conducting or arranging for medical review, legal services, and auditing functions.

4. Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law. For example, we may disclose PHI when required by a court order in a litigation proceeding such as a malpractice action.

5. Public Health Activities

We may disclose your PHI to public health authorities for public health activities. These activities may include: preventing or controlling disease, injury, or disability; reporting births and deaths; reporting child abuse or neglect; reporting adverse reactions to medications or problems with products; notifying people of recalls of products they may be using; or notifying a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition.

6. Victims of Abuse, Neglect, or Domestic Violence

We may disclose PHI to the appropriate government authority if we believe a patient has been the victim of abuse, neglect, or domestic violence and the patient agrees to the disclosure, or if the disclosure is required or authorized by law.

7. Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law. These oversight activities include audits, investigations, inspections, licensure, and similar activities that are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.

8. Judicial and Administrative Proceedings

We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process. We will make reasonable efforts to notify you of the request or to obtain an order protecting the information requested.

9. Law Enforcement

We may disclose PHI to law enforcement officials for law enforcement purposes as required by law, in compliance with a court order, subpoena, or administrative request, to identify or locate a suspect, fugitive, material witness, or missing person, or when the PHI is evidence of a crime that occurred on our premises.

10. Coroners, Medical Examiners, and Funeral Directors

We may release PHI to a coroner or medical examiner as necessary to identify a deceased person or to determine cause of death. We may also release PHI to funeral directors as necessary to carry out their duties.

11. Organ Donation

If you are an organ donor, we may release PHI to organizations that handle organ procurement or organ, eye, or tissue transplantation, or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.

12. Research

Under certain circumstances, we may use and disclose PHI about you for research purposes, provided the research has been specially approved by an authorized institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your health information.

13. Serious Threat to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious threat to your health and safety, or the health and safety of the public or another person. Any disclosure would be to someone able to help prevent the threat.

14. Military and Veterans

If you are a member of the armed forces, we may release PHI as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.

15. National Security and Intelligence

We may release PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

16. Protective Services

We may disclose PHI to authorized federal officials so they may provide protection to the President, other authorized persons, or foreign heads of state, or to conduct special investigations.

17. Workers' Compensation

We may disclose PHI as authorized to comply with workers' compensation laws and other similar legally established programs.

18. Inmates

If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release PHI to the correctional institution or law enforcement official if necessary for your health and safety, the health and safety of others, or the safety and security of the correctional institution.

19. Business Associates

We may disclose your PHI to third parties known as "business associates" that perform functions or services on our behalf, such as billing, scheduling, hosting of our electronic health record or patient portal, secure messaging, data storage, or professional and administrative support. Whenever we engage a business associate, we require, by written agreement, that the business associate appropriately safeguard your PHI and use or disclose it only as permitted or required by law.

20. Individuals Involved in Your Care

Unless you object, we may disclose limited PHI to a family member, relative, close personal friend, or any other person you identify who is involved in your care or payment for your care. If you are not present, or are incapacitated or in an emergency, we may use our professional judgment to determine whether a disclosure is in your best interests and, if so, disclose only the PHI directly relevant to that person's involvement in your care.

21. Appointment Reminders and Health-Related Communications

We may use or disclose PHI to contact you with appointment reminders, to inform you about treatment alternatives, or to tell you about health-related benefits or services that may be of interest to you. These communications may occur by telephone, voicemail, text message, secure portal, or mail, according to the contact preferences you provide.

22. De-Identified Information and Limited Data Sets

We may use or disclose your health information after it has been de-identified in accordance with HIPAA so that it no longer reasonably identifies you, or in the form of a limited data set for purposes of research, public health, or health care operations subject to a data use agreement, as permitted by law.

23. Incidental Uses and Minimum Necessary

Certain incidental uses or disclosures of PHI may occur as a byproduct of an otherwise permitted use or disclosure; we maintain reasonable safeguards to limit such incidental disclosures. Except for uses or disclosures for treatment, disclosures to you, or uses or disclosures made pursuant to your authorization, we will make reasonable efforts to use, disclose, or request only the minimum amount of PHI necessary to accomplish the intended purpose.

B. Uses and Disclosures Requiring Your Written Authorization

For uses and disclosures not described above, we will ask for your written authorization before using or disclosing your PHI. You may revoke your authorization in writing at any time. If you revoke your authorization, we will no longer use or disclose your PHI for the purposes covered by the authorization, except where we have already relied on the authorization. The following uses and disclosures require your authorization:

• Most uses and disclosures of psychotherapy notes (if applicable)
• Uses and disclosures of PHI for marketing purposes
• Uses and disclosures that constitute a sale of PHI
• Other uses and disclosures not described in this Notice

III. Your Rights Regarding Your Protected Health Information

You have the following rights regarding PHI we maintain about you:

1. Right to Inspect and Copy

You have the right to inspect and obtain a copy of PHI that may be used to make decisions about your care. Usually, this includes medical and billing records. To inspect and copy PHI, you must submit your request in writing. We may charge a fee for the costs of copying, mailing, or other supplies associated with your request. We may deny your request in certain limited circumstances. If we deny your request, you may request a review of the denial.

2. Right to Amend

If you believe PHI we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as we maintain the information. To request an amendment, your request must be made in writing and submitted to our Privacy Officer. You must provide a reason that supports your request. We may deny your request if you ask us to amend information that was not created by us, is not part of the PHI kept by or for us, is not part of the information you would be permitted to inspect and copy, or is accurate and complete.

3. Right to an Accounting of Disclosures

You have the right to request an "accounting of disclosures." This is a list of the disclosures we made of PHI about you for purposes other than treatment, payment, health care operations, or as authorized by you. To request this list, you must submit your request in writing. Your request must state a time period, which may not be longer than six years. The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list.

4. Right to Request Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the PHI we disclose about you to someone who is involved in your care or the payment for your care. We are not required to agree to your request unless you are asking us to restrict the disclosure of PHI to a health plan for payment or health care operations purposes and the PHI pertains solely to a health care item or service for which you, or a person on your behalf, has paid in full out of pocket. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment.

5. Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we contact you only at work or by mail. To request confidential communications, you must make your request in writing. We will accommodate all reasonable requests.

6. Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy.

7. Right to Receive Notification of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI. We will notify you as required by law.

8. Right to Choose Someone to Act for You

If you have given someone a medical power of attorney, or if someone is your legal guardian or personal representative under applicable law, that person may exercise your rights and make choices about your PHI. We will verify that the person has this authority and may act for you before we take any action, and we may decline to treat a person as your representative to the extent permitted or required by law, including where we reasonably believe doing so may endanger you or another person.

9. Exercising Your Rights

To exercise any of the rights described above, please submit your request in writing through the contact options identified in the "Contact Information" section of this Notice. We may require you to verify your identity and to complete a form before we act on your request, and we will respond within the timeframes required by applicable law. Some rights are subject to limitations and exceptions, and we may deny certain requests to the extent permitted by law, in which case we will provide you with a written explanation.

IV. Our Duties

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with notice of our legal duties and privacy practices with respect to PHI
• Notify you following a breach of unsecured PHI
• Follow the terms of the Notice that is currently in effect

V. Changes to This Notice

We reserve the right to change the terms of this Notice at any time and to make the revised Notice effective for all PHI that we maintain, including PHI created or received before the change. When we make a material change to this Notice, we will promptly revise it and update the effective date shown above. The most current version of this Notice will be posted on our website and made available at our places of service, and you may obtain a copy at any time upon request.

To the extent permitted by law, your continued receipt of services after a revised Notice becomes effective constitutes acknowledgment of the revised Notice. This Notice supersedes any prior Notice of Privacy Practices issued by us.

VI. Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with our organization or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with our organization, contact our Privacy Officer using the contact information below. All complaints must be submitted in writing.

To file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, send a letter to:

Or call 1-877-696-6775, or visit www.hhs.gov/hipaa/filing-a-complaint.

You will not be retaliated against for filing a complaint.

VII. Limitations, Disclaimers, and Reservation of Rights

1. Nature of This Notice; No Waiver

This Notice is provided to satisfy our obligations under HIPAA and applicable law and to inform you of our privacy practices. Except as expressly required by law, this Notice is not a contract, does not create or expand any legal or equitable right or remedy, and does not create any duty or standard of care beyond that imposed by applicable law. Nothing in this Notice waives, limits, or diminishes any right you have under HIPAA or other applicable law, and no provision below shall be construed to limit any non-waivable statutory right.

2. Independent Clinical Judgment; Members and Clinicians

Clinical services are provided by licensed or authorized clinicians who exercise their own independent professional judgment within the scope of their individual licensure, credentials, and applicable law. Inspired Consciousness LLC does not direct or control the exercise of that independent clinical judgment. To the fullest extent permitted by law, the members, managers, owners, officers, employees, and clinicians of Inspired Consciousness LLC shall not be personally liable for the debts, obligations, acts, or omissions of Inspired Consciousness LLC, and the limited liability protections afforded under the Massachusetts Limited Liability Company Act and other applicable law are expressly reserved and preserved.

3. Electronic Communications and Telehealth

No method of electronic transmission or storage is completely secure. While we use administrative, physical, and technical safeguards designed to protect PHI, we cannot guarantee absolute security. If you choose to communicate with us by email, text message, or other unencrypted means, or to participate in telehealth services, you do so with an understanding of the inherent risks. To the fullest extent permitted by law, you assume those risks and release Inspired Consciousness LLC and its Workforce from liability for any interception, disclosure, or loss of information that occurs despite our reasonable safeguards and that is not caused by our failure to comply with applicable law.

4. Third Parties and Business Associates

Our website and services may rely on, or link to, third-party platforms and service providers. We are not responsible for the independent privacy practices of any third party that is not acting as our business associate. Where a third party acts as our business associate, its handling of PHI is governed by a written business associate agreement and applicable law.

5. No Third-Party Beneficiaries; No Private Right of Action

This Notice does not create any third-party beneficiary rights. To the extent permitted by law, nothing in this Notice shall be construed to create a private right of action against Inspired Consciousness LLC or its Workforce. Enforcement of HIPAA is committed to the U.S. Department of Health and Human Services as described in the "Filing a Complaint" section above.

6. Limitation of Liability

To the fullest extent permitted by applicable law, and except for any liability that may not be limited or excluded by law, in no event shall Inspired Consciousness LLC or its Workforce be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages arising out of or relating to this Notice or our privacy practices. This limitation does not apply to, and shall not be construed to limit, any remedy expressly provided to you under HIPAA or other applicable law.

7. Third-Party Vendors, Contractors, and Delegated Services

The Company reserves the right, in its sole discretion and without notice, to engage third-party vendors, independent contractors, staffing agencies, professional corporations, limited liability companies, and other entities or individuals to provide, support, or supplement its services. This includes the right to have the website designed, developed, hosted, maintained, and updated by one or more third-party contractors. Clinical services, including medication management, may be performed directly by a prescriber or delegated, in whole or in part, to a qualified third-party agency, entity, or limited liability company that employs or contracts practitioners who are competent and licensed to provide services directly to clients and/or to act as supportive services to prescribers. The Company is not required to publicly disclose the identities of, or any information concerning, its vendors, contractors, delegated agencies, or the third parties that design, host, or maintain the website. Nothing in this section limits the Company's obligation to comply with applicable law, including valid legal process.

8. Website Listings and Provider Changes

Any prescribers, clinicians, contractors, or staff identified on the website are listed for general informational purposes only and do not constitute a complete, current, or binding roster of the individuals who provide or support services for the Company. Not all prescribers, clinicians, or contractors who provide or support services are, or will be, listed on the website. The Company reserves all rights to add, remove, substitute, reassign, or change any provider, contractor, or vendor at any time and without notice, including the use of covering, on-call, supervising, emergency, or replacement prescribers. The listing or non-listing of any individual does not guarantee availability or the provision of services and creates no right, expectation, or entitlement to care from, or the continued involvement of, any particular individual.

9. Records and Personnel Information

The Company creates, retains, and disposes of records concerning its personnel, contractors, vendors, and former workforce members only in accordance with applicable law and its own retention policies, and is not otherwise obligated to create, retain, publish, or maintain any such information. Except as required by applicable law, the Company does not maintain or make publicly available information regarding former employees, contractors, or prescribers. Nothing in this section is intended to, and shall not be construed to, limit, delay, or interfere with the Company's obligation to comply with applicable law or valid legal process, including any applicable recordkeeping, preservation, or disclosure obligations.

10. Governing Law; Force Majeure; Severability

This Notice is governed by the laws of the Commonwealth of Massachusetts and applicable federal law, without regard to conflict-of-laws principles. We shall not be liable for any failure or delay in performance resulting from causes beyond our reasonable control, including acts of God, natural disasters, epidemics or pandemics, governmental actions, utility or network failures, or cyberattacks. If any provision of this Notice is held invalid or unenforceable, that provision shall be modified to the minimum extent necessary or severed, and the remaining provisions shall remain in full force and effect. Our failure to enforce any provision shall not be a waiver of that or any other provision. We reserve all rights not expressly granted in this Notice.

VIII. Contact Information

If you have questions about this Notice, wish to exercise any of your rights, or wish to file a complaint, you may contact the Privacy Officer of Inspired Consciousness LLC through the contact options provided on our website.

To protect your privacy, please do not include detailed symptoms, diagnoses, medication lists, or other sensitive clinical information in your initial message. Do not use this contact method for medical emergencies; if you are experiencing a crisis, call or text 988, or call 911.

Acknowledgment of Receipt

By scheduling an appointment or receiving services from Inspired Consciousness LLC, you acknowledge that you have been provided access to this Notice of Privacy Practices and understand how your protected health information may be used and disclosed. You may request a paper copy of this Notice at any time.