Notice of Privacy Practices

HIPAA — Health Insurance Portability and Accountability Act

Effective Date: August 13, 2026 · Hope to Healing Counseling, PLLC

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Hope to Healing Counseling, PLLC ("we," "us," or "our") is committed to protecting the privacy of your protected health information (PHI). This Notice of Privacy Practices describes how we may use and disclose your PHI to carry out treatment, payment, and health care operations, and for other purposes permitted or required by law. It also describes your rights to access and control your PHI.

We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to notify you if there is a breach of your unsecured PHI. We are required to abide by the terms of this Notice while it is in effect.

1. How We May Use and Disclose Your Health Information

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your mental health treatment and any related services. For example, we may share information with other health care providers involved in your care, such as your primary care physician, psychiatrist, or other mental health professionals, with your consent.

For Payment

We may use and disclose your PHI to obtain payment for services we provide to you. This may include billing, claims management, and collection activities. Currently, Hope to Healing Counseling operates on a self-pay basis; however, this may change as insurance is added in the future.

For Health Care Operations

We may use and disclose your PHI for our health care operations, including quality assessment, training, licensing, and business management activities necessary to run our practice.

As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including mandatory reporting obligations under Illinois law.

To Avert a Serious Threat to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety, or the health or safety of another person or the public. This includes situations involving risk of harm to self or others.

Abuse, Neglect, or Domestic Violence

As a licensed clinical social worker in Illinois, Monte Stewart, MSW, LCSW, CWEL is a mandated reporter. We are required by law to report suspected abuse or neglect of children, elderly individuals, or persons with disabilities to the appropriate authorities.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.

Law Enforcement

We may disclose your PHI to law enforcement officials for limited purposes, including to comply with a court order, warrant, or subpoena.

2. Uses and Disclosures Requiring Your Authorization

Psychotherapy Notes

We will obtain your written authorization before using or disclosing psychotherapy notes (process notes) for any purpose other than treatment, payment, or health care operations as permitted by law.

Marketing

We will obtain your written authorization before using your PHI for marketing purposes.

Sale of PHI

We will obtain your written authorization before selling your PHI.

Other Uses

Any other use or disclosure of your PHI not described in this Notice will be made only with your written authorization. You may revoke any authorization you give us at any time, in writing, except to the extent we have already acted in reliance on it.

3. Your Rights Regarding Your Health Information

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, including your medical and billing records. We may charge a reasonable fee for copying. We may deny your request in certain limited circumstances.

Right to Amend

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request if we did not create the information, if the information is not part of our records, or if we determine the information is accurate and complete.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This right applies to disclosures made for purposes other than treatment, payment, or health care operations.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request, except in limited circumstances involving out-of-pocket payments.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. For example, you may ask that we only contact you by email or at a specific phone number.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Contact us to request a copy.

Right to Notification of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI.

4. Changes to This Notice

We reserve the right to change this Notice at any time. We reserve the right to make the revised or changed Notice effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our website. You may request a copy of the current Notice at any time.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with us, contact:

Monte Stewart, MSW, LCSW, CWEL

Privacy Officer — Hope to Healing Counseling, PLLC

You will not be penalized for filing a complaint. To file a complaint with the U.S. Department of Health and Human Services, visit the HHS website. www.hhs.gov/ocr/privacy/hipaa/complaints