Notice of Privacy Practices (HIPAA)

Effective Date: [04-12-2026]

This notice describes how medical information about you may be used and disclosed and how you can get access to this information.

Our Pledge Regarding Your Health Information

Threaded Care/The Attention Institute, Inc is committed to protecting your health information. We are required by law to maintain the privacy of your Protected Health Information (PHI), provide you with this Notice of our legal duties and privacy practices, and follow the terms of the Notice currently in effect.

Protected Health Information (PHI) is information that may identify you and relates to your past, present, or future physical or mental health, the provision of health care to you, or payment for that care.

Your Health Information Rights

You have the right to:

• Inspect and copy your health records

• Request amendments to your health information

• Obtain an accounting of disclosures

• Request restrictions on certain uses

• Request confidential communications

• Obtain a paper copy of this Notice upon request, even if you have agreed to receive it electronically

• File a complaint if you believe your privacy rights have been violated

Our Responsibilities

We are required by law to:

• Maintain the privacy of your protected health information (PHI)

• Provide you with this notice of our legal duties and privacy practices

• Follow the terms of this Notice currently in effect

• Notify you if there is a breach of your unsecured PHI

How We May Use and Disclose Your Information

We may use and disclose your PHI for the following purposes without your written authorization:

Treatment

We may share your information with healthcare providers involved in your care.

Payment

We may use and disclose your PHI to bill and collect payment for your health care services. This may include contacting your health insurance company, submitting claims, and collecting amounts owed.

Healthcare Operations

We may use your information for quality improvement and administrative purposes.

Appointment Reminders and Health-Related Information

We may use your PHI to contact you with appointment reminders or information about treatment alternatives or other health-related benefits and services.

Family and Friends Involved in Your Care

With your permission, we may disclose your PHI to a family member, friend, or other person you identify as being involved in your care or payment for your care.

As Required by Law

We may use or disclose your PHI when required by federal, state, or local law, including reporting abuse or neglect, public health activities, and judicial proceedings.

With Your Authorization

Other uses of your information require your written authorization. You may revoke your authorization at any time by submitting a written request. However, revocation will not affect any uses or disclosures made in reliance on your authorization before its revocation. This includes:

• Marketing purposes

• Sale of your PHI

• Most uses of psychotherapy notes

• Other uses not described in this Notice

Special Protections

Certain categories of information receive additional protections:

• Psychotherapy notes

• HIV/AIDS information

• Substance abuse treatment records

• Genetic information

Changes to This Notice

We reserve the right to change this Notice and make the new provisions effective for all PHI we maintain. If we make a material change to this Notice, we will post the revised Notice on our website and make it available upon request.

Contact Information

Privacy Officer: privacy@threaded.care

To file a complaint with the Secretary of Health and Human Services, visit www.hhs.gov/ocr/privacy/hipaa/complaints/