Notice of Privacy Practices

Effective Date: March 31, 2026

Our Commitment to Your Privacy

Advanced Behavioral Therapy, S Corp ("ABT") is committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information ("PHI") and your rights regarding that information. PHI is information about you — including demographic information — that may identify you and relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for that care.

We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and abide by the terms of the Notice currently in effect.

How We May Use and Disclose Your PHI

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your child's ABA therapy and related services. For example, your child's Board Certified Behavior Analyst (BCBA) may share assessment results and treatment plans with Registered Behavior Technicians (RBTs) providing direct therapy, or with other healthcare providers involved in your child's care.

For Payment

We may use and disclose your PHI to bill and collect payment for services provided. This includes submitting claims to your health insurance plan, verifying insurance eligibility and benefits, and communicating with your insurer about medically necessary services.

For Healthcare Operations

We may use and disclose your PHI for our internal operations, including quality assessment, employee training, compliance activities, audits, and business management. For example, we may use your information to evaluate our treatment outcomes and improve the quality of our services.

Other Permitted Uses and Disclosures

We may also use or disclose your PHI without your authorization in the following circumstances as permitted or required by law:

• As required by law: When disclosure is mandated by federal, state, or local law
• Public health activities: To public health authorities for preventing or controlling disease, injury, or disability
• Abuse or neglect: To appropriate authorities if we reasonably believe a child or vulnerable adult is a victim of abuse, neglect, or domestic violence
• Health oversight activities: To health oversight agencies for audits, investigations, and licensure
• Judicial proceedings: In response to a court order or subpoena
• Law enforcement: For law enforcement purposes as required by law or in response to a valid legal process
• To avert a serious threat: To prevent or lessen a serious and imminent threat to your health or safety or the health or safety of others
• Workers' compensation: As authorized by workers' compensation laws

Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. You may revoke your authorization at any time by submitting a written request to our office. Revocation will not affect any disclosures already made in reliance on your prior authorization. We will not use or disclose your PHI for marketing purposes or sell your PHI without your express written authorization.

Your Rights Regarding Your PHI

Right to Access

You have the right to inspect and obtain a copy of your PHI maintained by ABT. To request access, submit a written request to our office. We may charge a reasonable fee for copying and mailing costs.

Right to Request Amendments

You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete. Submit your request in writing with a reason for the amendment. We may deny your request in certain circumstances as permitted by law.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures of your PHI that we have made. This does not include disclosures for treatment, payment, healthcare operations, or disclosures you authorized in writing.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must comply with a request to restrict disclosure to a health plan for services you paid for entirely out-of-pocket.

Right to Request Confidential Communications

You may request that we communicate with you about your PHI by alternative means or at alternative locations (e.g., sending correspondence to a different address). We will accommodate reasonable requests.

Right to a Copy of This Notice

You have the right to obtain a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically. Contact our office to request a copy.

Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by law. Notification will be made without unreasonable delay and no later than 60 days from the discovery of the breach.

Changes to This Notice

We reserve the right to change the terms of this Notice and to make the new provisions effective for all PHI we maintain. If we make material changes, we will post the revised Notice on our website and make copies available at our office locations.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with ABT or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.