Notice of Privacy Practices.

1. Our Commitment to Your Privacy

Symmetricly is required by federal law (the Health Insurance Portability and Accountability Act, or "HIPAA") and Georgia state law to maintain the privacy of your protected health information ("PHI"). This Notice describes:

• How we may use and disclose your PHI
• Your rights regarding your PHI
• Our legal obligations concerning your PHI

We are required to follow the terms of this Notice currently in effect. We will not use or disclose your PHI without your written authorization, except as described in this Notice or otherwise permitted by law.

2. Uses for Treatment, Payment, and Healthcare Operations

We may use and disclose your PHI for treatment, payment, and healthcare operations without your specific authorization.

Treatment

We may use your PHI to provide you with clinical services, coordinate your care with other providers, and consult with colleagues about your treatment when clinically necessary. For example, your clinician may discuss your case with a clinical supervisor at Symmetricly, or share relevant information with another provider you are also seeing, with your knowledge.

Payment

We may use and disclose PHI to obtain payment for the services we provide to you. This may include providing limited information to your bank, credit card processor, or, if you choose to use it, your health savings account or insurance for out-of-network reimbursement.

Healthcare Operations

We may use and disclose PHI for our internal operations, such as quality improvement, clinician training and supervision, scheduling, billing, and compliance with professional licensing and ethics standards.

3. Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described in this Notice, including:

• Marketing communications beyond face-to-face conversations
• Sale of PHI — we do not sell PHI
• Psychotherapy notes — disclosure of psychotherapy notes (notes recorded by a mental health professional documenting or analyzing a counseling conversation) requires your specific authorization, with limited legal exceptions
• Other uses not described in this Notice or otherwise permitted by law

You may revoke an authorization in writing at any time, except to the extent we have already taken action in reliance on it.

4. Other Permitted and Required Uses and Disclosures

In limited circumstances, federal and state law permit or require us to disclose PHI without your authorization, including:

Required by law

We may disclose PHI when required by federal, state, or local law.

Public health activities

We may disclose PHI for public health activities, such as reporting communicable diseases or adverse events to authorized public health authorities.

Abuse, neglect, or domestic violence

Georgia law requires us to report suspected child abuse, elder abuse, or abuse of disabled adults to appropriate authorities. We may also be required to make reports in cases of domestic violence under certain circumstances.

Health oversight

We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and administrative proceedings

We may disclose PHI in response to a court order, subpoena, or other lawful process, subject to applicable legal limitations and our duty to protect your privacy.

Law enforcement

We may disclose limited PHI to law enforcement under specific circumstances permitted by law.

Serious threats to health or safety

Mental health professionals have a duty to take reasonable steps to protect identifiable third parties from serious and imminent threats of harm. Where this duty applies, we may disclose PHI to prevent or lessen a serious and imminent threat to your safety or the safety of others.

Coroners, medical examiners, and funeral directors

We may disclose PHI to coroners, medical examiners, or funeral directors as necessary to carry out their duties.

Workers' compensation

We may disclose PHI as authorized by workers' compensation laws.

Family members and others involved in your care

We may share PHI with family members, friends, or others you have identified as involved in your care, but only with your permission or when you are unable to consent and we determine that sharing the information is in your best interest.

5. Your Rights Regarding Your PHI

Right to inspect and copy

You have the right to inspect and obtain a copy of your PHI in our records, with certain limited exceptions. We may charge a reasonable fee for copies. To request access, submit a written request to the contact information below.

Right to request amendment

If you believe information in your record is inaccurate or incomplete, you may request that we amend it. We may deny your request under certain circumstances, but you have the right to file a statement of disagreement that will be included in your record.

Right to an accounting of disclosures

You have the right to request an accounting of certain disclosures we have made of your PHI within the six years before your request (or a shorter period if you specify).

Right to request restrictions

You have the right to request that we restrict how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to all requested restrictions, but if we do agree, we will honor the restriction unless the information is needed to provide you emergency treatment.

If you pay for a service in full out of pocket and request that we not disclose information about that service to your health plan, we are required to honor that restriction.

Right to confidential communications

You have the right to request that we communicate with you about your care in a specific way or at a specific location (for example, by mail at your work address rather than your home, or by phone only on weekdays). We will accommodate reasonable requests.

Right to a paper copy of this Notice

You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically.

Right to be notified of a breach

You have the right to be notified if we (or our business associates) discover a breach of unsecured PHI.

To exercise any of these rights, contact us at info@symmetricly.co or write to the address below.

6. Our Duties

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with this Notice describing our legal duties and privacy practices
• Follow the terms of the Notice currently in effect
• Notify you if a breach of unsecured PHI occurs

We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain. The current Notice will be available on our website at all times, and we will post the effective date on the Notice.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting us at the information below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by:

• Mail: 200 Independence Avenue, S.W., Room 509F HHH Building, Washington, D.C. 20201
• Phone: 1-877-696-6775
• Online: hhs.gov/hipaa/filing-a-complaint

You will not be retaliated against for filing a complaint.

8. Contact Us

To request to exercise any of your rights, ask questions about this Notice, or file a complaint, contact our Privacy Officer: