HIPAA Notice

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Commitment to Your Privacy

At Ellipses, we are dedicated to maintaining the privacy of your Protected Health Information (PHI). We are required by law to maintain the privacy of your health information and to provide you with this notice of our legal duties and privacy practices. We must follow the terms of the notice that is currently in effect.

2. How We May Use and Disclose Your Health Information

We may use or disclose your PHI for the following purposes:

• Treatment: We may use your PHI to provide, coordinate, or manage your health care. For example, your therapist may consult with your Ellipses Care Coordinator to ensure your treatment goals are aligned.
• Payment: We may use and disclose your PHI so that the services you receive may be billed and payment collected.
• Health Care Operations: We may use PHI to run our practice, improve your care, and contact you when necessary (e.g., for appointment reminders via our HIPAA-compliant portal).

3. Special Protections for Substance Use Disorder (SUD) Records

In accordance with 42 CFR Part 2 (updated Feb 2026), records regarding substance use disorder treatment receive heightened protections:

Legal Proceedings: Your SUD records will not be used or disclosed in any civil, criminal, administrative, or legislative proceedings against you without your specific written consent, unless required by a court order meeting specific criteria.

4. Your Rights Regarding Your PHI

You have the following rights regarding the health information we maintain about you:

• Right to Inspect and Copy: You may request to see or get an electronic or paper copy of your medical record.
• Right to Amend: If you feel that information we have is incorrect or incomplete, you may ask us to amend it.
• Right to an Accounting of Disclosures: You may ask for a list of the times we’ve shared your health information (for reasons other than treatment, payment, or operations) for up to six years prior to your request.
• Right to Request Restrictions: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, unless you pay for a service out-of-pocket in full and ask us not to share that info with your health insurer.

5. Telehealth & Digital Security

As a 100% telehealth practice, Ellipses utilizes HIPAA-compliant encryption for all video and messaging. We do not use tracking pixels or third-party marketing cookies on pages where you enter health information. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.