Notice of Privacy Practices (HIPAA)

Effective Date: September 24, 2026

At THRYVE of Crestwood, we are committed to protecting the confidentiality of your medical information. We are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to notify you following a breach of unsecured PHI.

1. How We May Use and Disclose Your Health Information

We use and disclose your PHI for various purposes, including:

• Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with doctors, nurses, and other healthcare personnel involved in your care.
• Payment: We may use and disclose your PHI so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company, or a third party.
• Healthcare Operations: We may use and disclose your PHI for our healthcare operations, such as quality assessment and improvement activities, reviewing the competence or qualifications of healthcare professionals, and evaluating performance.

2. Other Permitted Uses and Disclosures

We may also use and disclose your PHI without your written authorization in the following situations:

• As Required by Law: When required by federal, state, or local law.
• Public Health Activities: For public health activities, such as reporting disease outbreaks or preventing/controlling disease, injury, or disability.
• Health Oversight Activities: To health oversight agencies for activities authorized by law, such as audits, investigations, and inspections.
• Law Enforcement: In response to a court order, subpoena, warrant, summons, or similar process.
• To Avert a Serious Threat to Health or Safety: To prevent a serious threat to your health and safety or the health and safety of the public or another person.

3. Your Privacy Rights

You have the following rights regarding the PHI we maintain about you:

• Right to Inspect and Copy: You have the right to inspect and copy your PHI. We may charge a reasonable fee for the costs of copying, mailing, or other supplies.
• Right to Amend: If you feel that PHI we have about you is incorrect or incomplete, you may ask us to amend the information.
• Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we made of your PHI for purposes other than treatment, payment, and healthcare operations.
• Right to Request Restrictions: You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or healthcare operations. We are not required to agree to your request, except under certain circumstances.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.
• Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice at any time.

4. Changes to This Notice

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice at our facilities and on our website.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. All complaints must be submitted in writing. You will not be penalized for filing a complaint.

Contact Information

For more information about our privacy practices, or to file a complaint, please contact our Privacy Officer: