Notice of Privacy Practices

Effective Date: December 7, 2025

This Notice includes Gracey's practices concerning Protected Health Information ("PHI"), under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). PHI is information about you that may be used to identify you and that relates to your past, present or future physical or mental health condition; the provision of healthcare to you; or your past, present or future payment for the provision of health care.

How We May Use and Disclose Your Information

We may use or disclose your PHI for the following purposes without additional written authorization:

• Treatment: To provide, coordinate, or manage your care.
• Payment: To bill and collect payment from you, your insurance company, or Medicare for services you receive.
• Healthcare Operations: To run our organization and ensure quality care, such as reviewing performance, training staff, or conducting audits.
• As Required by Law: To comply with federal, state, or local laws, court orders, or government regulations.
• Business Associates: We may share PHI with trusted vendors who perform services for us under written agreements requiring them to safeguard your information.

Any other use or disclosure of your information will be made only with your written authorization. You may revoke that authorization at any time in writing.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will notify you promptly if a breach occurs that may compromise the privacy or security of your information.
• We must follow the practices described in this Notice and provide you with a copy upon request.

Your Rights Regarding Your Health Information

You have the right to:

• Amend Your Record: Request corrections to your record if you believe information is inaccurate or incomplete.
• Request Restrictions: Ask us not to use or share certain information for treatment, payment, or operations. We will consider all requests but are not required to agree.
• Confidential Communications: Ask us to contact you in a specific way, such as email only.
• Accounting of Disclosures: Request a list of certain disclosures we have made of your PHI.
• Receive a Copy of This Notice: You can view or download it anytime from our website.
• File a Complaint: If you believe your privacy rights have been violated, you may file a complaint using the contact information below. You will not be retaliated against for filing a complaint.

Changes to This Notice

Gracey reserves the right to change this Notice at any time. If we change this Notice, we will post the new version on our website and will make it available upon request.

Acknowledgment

By continuing to use our services or submitting information through our website, you acknowledge that you have reviewed this Notice of Privacy Practices.

Contact Us

If you have questions about this Notice or wish to exercise any of your rights, please contact us at: info@graceycare.com