NOTICE OF PRIVACY PRACTICES

Effective Date: February 3, 2026

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Legal Duties

Aaron Bond Counseling, LLC is required by law to:

• Maintain the privacy and security of your protected health information (PHI)

• Provide you with this Notice of Privacy Practices

• Follow the terms of the Notice currently in effect

• Notify you if a breach of unsecured PHI occurs

How Your Information Is Created and Stored

Aaron Bond Counseling, LLC uses SimplePractice, a HIPAA-compliant electronic health record (EHR) system, to create, store, and manage your clinical and administrative records.

Your PHI may be stored electronically and may include:

• Intake forms and assessments

• Session notes and treatment plans

• Appointment history

• Secure messages exchanged through the client portal

• Telehealth session information

• Billing and payment records

Access to your information is limited to authorized individuals and systems necessary to provide your care and operate the practice.

How We May Use and Disclose Your Information

1. Treatment

We may use your PHI to provide mental health treatment and services. This includes documentation of sessions, treatment planning, and coordination of care. With your authorization or as permitted by law, we may share relevant information with other healthcare providers involved in your care.

2. Payment

We may use and disclose PHI to bill and collect payment for services. This includes submitting claims to insurance companies, processing payments through SimplePractice’s integrated payment system, and managing accounts.

3. Health Care Operations

We may use PHI for practice operations such as quality assurance, training, licensing, audits, and administrative activities necessary to operate our practice.

4. Appointment Reminders and Practice Communications

SimplePractice may be used to send appointment reminders, forms, and administrative messages via secure portal notifications, email, or text message. You may opt out of certain electronic communications upon request.

5. Telehealth Services

If you participate in telehealth sessions, SimplePractice provides a HIPAA-compliant video platform. Telehealth sessions are not recorded. Limited technical information may be logged to support session functionality.

6. Secure Messaging and Client Portal

If you use the SimplePractice client portal, you may exchange secure messages with your provider. While the portal is encrypted, electronic communication carries inherent risks. You may request alternative communication methods if preferred.

Business Associates

Aaron Bond Counseling, LLC works with third-party service providers (“business associates”) who assist in operating the practice, including EHR hosting, payment processing, and technical support.

These business associates, including SimplePractice, are required by law to safeguard your PHI and may only use it for authorized purposes under written agreements.

Special Protections for Substance Use Disorder Records (42 CFR Part 2)

Certain information related to substance use disorder (SUD) diagnosis or treatment is protected by federal law (42 CFR Part 2).

• SUD records generally cannot be disclosed without your specific written authorization

• Redisclosure of SUD information is strictly limited

• SUD information cannot be used to discriminate against you in employment, housing, benefits, healthcare, or insurance

Limited disclosures may occur without authorization only as permitted by law, such as in medical emergencies, audits, research, or pursuant to a valid court order.

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Your Rights Regarding Your Health Information

You have the right to:

1. Access and receive a copy of your medical record

2. Request corrections to your record

3. Request confidential communications (such as alternative contact methods)

4. Request restrictions on certain uses or disclosures

5. Receive an accounting of disclosures

6. Obtain a paper or electronic copy of this Notice

7. File a complaint without fear of retaliation

Requests must be submitted in writing. We will respond within the timeframes required by law.

Law Enforcement and Legal Disclosures

We may disclose PHI to law enforcement or courts only when permitted or required by law, such as in response to a valid court order, subpoena, or to prevent a serious and imminent threat to health or safety.

Changes to This Notice

We reserve the right to change this Notice at any time. Any changes will apply to all PHI we maintain. The current Notice will always be available upon request and on our website.

Contact Information

Privacy Officer Aaron Bond Counseling, LLC 123-A Highway 80 East #244 Clinton, MS 39056 Phone: 769-218-9119

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. Filing a complaint will not affect your care.

U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, DC 20201 www.hhs.gov/ocr