Website Privacy Policy

iMind Health, LLC d/b/a iMind Behavioral Health

NOTICE OF PRIVACY PRACTICES

[Effective Date: October 1, 2026]

THIS NOTICE DESCRIBES HOW MEDICAL AND BEHAVIORAL HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

iMind Health, LLC d/b/a iMind Behavioral Health (“iMind,” “we,” “us,” or “our”) is required by law to maintain the privacy of your protected health information (“PHI”), to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to abide by the terms of this Notice while it is in effect. This Notice also applies to behavioral health and substance use disorder records to the extent protected under Maryland confidentiality law and, where applicable, 42 CFR Part 2.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes:

• Treatment — to provide, coordinate, or manage your behavioral health care and related services among your care team.
• Payment — to bill and collect payment for services, including submitting claims to Medicaid, insurers, or other payers.
• Health Care Operations — for quality assessment, accreditation (including CARF), staff training, licensing, and other internal administrative activities.
• As Required by Law — including reporting required under the Maryland Confidentiality of Medical Records Act and Maryland behavioral health confidentiality law (Md. Code Ann., Health-General § 4-301 et seq.) and its implementing regulations (COMAR), or in response to a valid court order or subpoena.
• Public Health and Safety — to prevent or lessen a serious threat to health or safety, or as required for public health reporting.
• Other Uses — any use or disclosure not described in this Notice will be made only with your written authorization, which you may revoke at any time. Consistent with 45 CFR 164.508, the following uses and disclosures will be made ONLY with your prior written authorization: (i) most uses and disclosures of psychotherapy notes; (ii) uses and disclosures of your PHI for marketing purposes; and (iii) any disclosure of your PHI that constitutes a sale of PHI.

Special Protections for Substance Use Disorder and Behavioral Health Records

Certain substance use disorder treatment records may be subject to additional federal confidentiality protections under 42 CFR Part 2, which generally require your specific written consent before such records are disclosed, even for treatment, payment, or operations, except in limited circumstances such as medical emergencies. When such records are disclosed with your consent, federal law prohibits the recipient from making any further disclosure of this information unless further disclosure is expressly permitted by your written consent or as otherwise permitted by 42 CFR Part 2; a general authorization for the release of medical or other information is NOT sufficient for this purpose. Behavioral health records maintained by us are also protected under Maryland law (Md. Code Ann., Health-General § 4-301 et seq.), which may impose additional consent requirements before disclosure.

Your Rights Regarding Your Health Information

• Right to Request Restrictions on certain uses and disclosures of your PHI.
• Right to Request Confidential Communications by alternative means or at alternative locations.
• Right to Inspect and Copy your PHI, subject to certain exceptions.
• Right to Amend your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures of your PHI made by us in the six years prior to your request.
• Right to a Paper Copy of this Notice, even if you have agreed to receive it electronically.
• Right to be Notified of a Breach of unsecured PHI.
• Right to Restrict Disclosures to a Health Plan when you pay out-of-pocket in full for a service or item; we must comply with such a request except as required by law.
• Right to Designate a Personal Representative to act on your behalf, including a parent or legal guardian acting for a minor and a court-appointed guardian or agent under a power of attorney acting for an incapacitated adult, consistent with Maryland law and applicable minor-consent provisions.

Our Responsibilities

• We are required to maintain the privacy and security of your PHI.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing, and you may revoke that permission in writing at any time.
• We will notify affected individuals of a breach of unsecured PHI without unreasonable delay and no later than sixty (60) days after discovery, and will notify the U.S. Department of Health and Human Services and, where required, the media, in accordance with the HIPAA Breach Notification Rule.
• We will recognize a personal representative — including the parent or legal guardian of a minor and a court-appointed guardian or authorized agent of an incapacitated patient — to the extent required by Maryland law, and will honor a minor’s own confidentiality and consent rights where Maryland law authorizes the minor to consent to care.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with iMind’s Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint. The Office for Civil Rights may be contacted at U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775 (TDD 1-800-537-7697), or by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

iMind Privacy Officer Contact:

Attn: Privacy Officer

iMind Health, LLC d/b/a iMind Behavioral Health

4640 Forbes Blvd, Suite 375, Lanham, MD 20706

Phone: 240-249-0989 | Email: privacy@imindhealth.net

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any information we receive in the future. The current Notice will be posted on our website and available at our facility.