Inflection Point Teletherapy, PLLC Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

YOUR RIGHTS

You have the right to the following with respect to your protected health information (PHI):

The Right to Access Your Records

You may request a paper or electronic copy of your medical record and other health information we hold about you. We will provide a copy or summary within 30 days. We may charge a reasonable, cost-based fee.

The Right to Amend Your Records

You may ask us to correct health information you believe is incorrect or incomplete. We may deny the request but will explain why in writing within 60 days. Illinois law (740 ILCS 110/4(c)) also gives you the right to submit a written statement about disputed information to be included in your record.

The Right to Request Confidential Communication

You may ask us to contact you in a specific way (e.g., cell phone only) or at a different address. We will honor all reasonable requests.

The Right to Request Restrictions

You may ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree but will tell you if we cannot.

If you pay out-of-pocket in full for a service, you may ask us not to share that information with your health insurer for payment or operations purposes. We will honor this unless a law requires otherwise.

The Right to an Accounting of Disclosures

You may request a list of disclosures we have made of your health information for the six years prior to your request, including who received it and why. This does not include disclosures for treatment, payment, operations, or disclosures you authorized. We provide one accounting per year at no cost; additional requests within 12 months may incur a reasonable fee. You also have the right to an accounting of disclosures of any substance use disorder (SUD) records specifically protected under 42 C.F.R. Part 2.

The Right to a Paper Copy of This Notice

You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.

The Right to Choose a Personal Representative

If you have granted someone medical power of attorney, or if someone is your legal guardian, that person may exercise your rights and make choices about your health information on your behalf. We will verify their authority before taking action.

The Right to File a Complaint

If you believe we have violated your privacy rights, you may contact us via email at privacy@inflectionpoint.space or by calling 773-831-7794. We will not retaliate against you for filing a complaint. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:

U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F HHH Bldg.
Washington, D.C. 20201

OCRComplaint@hhs.gov
https://www.hhs.gov/hipaa/filing-a-complaint/index.html

YOUR CHOICES

For certain uses and disclosures, you have the right to tell us your preferences about what we share. If you have a clear preference for how we share your information in any of the situations described below, please let us know and we will follow any reasonable instructions.

Releases Requiring Written Authorization

Except in very limited circumstances required by law, we will not use or disclose the following without your written authorization:

• Most psychotherapy notes

• Any substance use disorder (SUD) treatment records protected under 42 C.F.R. Part 2

• Mental health records under the Illinois Mental Health and Developmental Disabilities Confidentiality Act (740 ILCS 110)

• Records regarding past sexual or physical abuse

You may revoke any written authorization at any time, in writing. Any revocation is effective from the date it is received and does not apply retroactively to disclosures already made.

Information We May Share Based on Your Preference

In the situations below, you have both the right and the choice to tell us your preferences:

• Sharing information with family members, close friends, or others involved in your care

• Sharing information in a disaster relief situation

If you are unable to tell us your preference (e.g., in an emergency), we may share information if we believe it is in your best interest, or if necessary to prevent a serious and imminent threat to health or safety.

Fundraising

The practice does not generally engage in fundraising activities as of the effective date of this notice. However, should that change in the future, we may contact you for fundraising purposes. You have the right to opt out at any time, and we will honor your request.

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION

As a part of providing treatment and routine management of our practice, we may use your information without authorization in the following ways:

• To provide, coordinate, and manage your care (e.g., sharing relevant history with your primary care provider or a specialist).

• To bill and collect payment from your health plan or other payer (e.g., submitting a claim with your diagnosis and services).

• To run our practice, including improving care quality, conducting staff training, and performing administrative functions.

We may also use or disclose your information without authorization in limited circumstances required or permitted by law, including:

• With third parties known as "business associates" - vendors and service providers who perform functions on our behalf, such as billing services, electronic health records platforms, and IT support. We are required by law to have written agreements in place with all business associates that obligate them to protect the privacy and security of your health information in accordance with HIPAA. Your information is shared with business associates only to the extent minimally necessary to support your care and our operations

• For the purpose of public health reporting (e.g., disease prevention, adverse drug reactions, mandatory abuse or neglect reporting)

• For the purpose of health oversight activities authorized or required by law (e.g., audits, inspections)

• For law enforcement purposes, as permitted or required by law

• For use in judicial and administrative proceedings, in response to a court or administrative order or lawfully issued subpoena - subject to applicable federal and/or state law restrictions

• For the purpose of workers' compensation claims

• For the purpose of organ and tissue donation requests

• With a coroner, medical examiner, or funeral director upon the death of a patient

• For specialized government functions (e.g., military, national security)

• For research, subject to applicable privacy protections and approvals

• To avert a serious and imminent threat to health or safety

• To comply with the law, including providing information to HHS for HIPAA compliance reviews

We have to meet many conditions in the law before we can share your information for these purposes. For more information, please see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

Further, while the law permits disclosure for organ and tissue donation requests, to a coroner/medical examiner/funeral director upon the death of a patient, and for research purposes, Inflection Point Teletherapy does not currently engage in these activities as part of its practice. These categories are listed above to fully inform you of the permissible uses and disclosures of your information under HIPAA, consistent with regulatory requirements.

OUR RESPONSIBILITIES

In General:

• We are required by law to maintain the privacy and security of your protected health information.

• We must follow the duties and privacy practices described in this notice and give you a copy upon request.

• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your health information, in accordance with the HIPAA Breach Notification Rule (45 C.F.R. Part 164, Subpart D) and any applicable state law.

• We will not use or share your information other than as described in this notice unless you give us written permission. You may revoke that permission at any time in writing.

• We will never market or sell your personal health information without your express written consent.

• We do not create or maintain a hospital directory.

Telemental Health:

Inflection Point Teletherapy PLLC is primarily a telemental health practice. As such, by seeking services from us, you understand that you are consenting to participate in telemental health as part of your services, if applicable. The privacy laws that protect the confidentiality of protected health information (PHI) also apply to telemental health unless an exception to confidentiality applies.

There are risks and consequences associated with telemental health, including but not limited to disruption of transmission by technology failures, interruption and/or breaches of confidentiality by unauthorized persons, and limited ability to respond to emergencies. We recommend using a private, secure internet connection and a personal device when participating in telehealth sessions.

There will be no recording of any kind of online sessions by either party. All information disclosed within sessions and written records pertaining to those sessions are confidential and may not be disclosed to anyone without written authorization, except where disclosure is permitted and/or required by law.

Psychotherapy Notes:

Psychotherapy notes receive heightened protection under federal law.

"Psychotherapy notes" are notes recorded by a mental health professional documenting or analyzing the contents of a private, group, joint, or family counseling session that are kept SEPARATE from the rest of the patient's medical record. Psychotherapy notes do NOT include: medication prescriptions, session start/stop times, treatment modalities or frequency, clinical test results, or summaries of diagnosis, functional status, treatment plan, symptoms, prognosis, or progress.

We will not use or disclose your psychotherapy notes without your separate, specific written authorization except in the following circumstances:

• The originating therapist may use them for their own treatment of you

• For supervision of mental health trainees

• To defend ourselves in a legal action brought by you

• As required by law (e.g., duty to warn, mandatory reporting)

Illinois Mental Health Records:

In addition to federal requirements, we are also subject to Illinois law governing the use and disclosure of mental health records - including, the Mental Health and Developmental Disabilities Confidentiality Act (MHDDCA), 740 ILCS 110.

In accordance with the MHDDCA, all mental health records and communications are confidential and we generally may not disclose them without your written consent. Your mental health records remain confidential after your death. Further, we may not comply with a subpoena for your mental health records unless the subpoena is accompanied by: (a) your written consent, OR (b) a written court order authorizing the disclosure. This protection applies even in civil and administrative proceedings.

Any consent to disclose your Illinois mental health records must be in writing and specify:

• The specific person or agency to whom disclosure will be made

• The purpose for the disclosure

• The nature of the information to be disclosed

• Your right to inspect and copy the information to be disclosed

• The consequences, if any, of refusing to consent

• A calendar expiration date (if no date is given, the consent is valid only on the day received)

Substance Abuse Disorder (SUD) Records:

If you receive or have received substance use disorder (SUD) diagnosis, treatment, or referral for treatment from us, your SUD records are further protected by federal law. We may not use or disclose your SUD records without your written consent, EXCEPT in very limited circumstances permitted by law (e.g., medical emergency, certain audit activities, research with appropriate protections, or as required by a court order and a subpoena). We will not use your SUD records for fundraising without first giving you a clear and conspicuous opportunity to opt-out.

EFFECTIVE DATE AND CHANGES

This Notice of Privacy Practices is effective July 1, 2026. If you have any questions or concerns, please contact our designated Privacy Official Joshua Garvey via email at privacy@inflectionpoint.space or by telephone at 773-831-7794.

We reserve the right to change this notice and to apply the revised notice to all health information we hold, including information received before the change. Any material change will be posted in your patient portal and on our website. You may request a copy of the current notice at any time.