Notice of Privacy Practices

(HIPAA Notice)

This Notice of Privacy Practices is effective as of February 16, 2026.

This Notice describes how your health information may be used and disclosed, and how you can access this information. Please review it carefully.

My Responsibilities

I am required by law to:

  • Maintain the privacy and security of your protected health information (PHI).

  • Provide you with this Notice of my legal duties and privacy practices.

  • Follow the terms of the Notice that is currently in effect.

Your Rights

You have the right to:

  • Request to see or get a copy of your health records.

  • Request corrections to your records.

  • Request confidential communication, such as asking me to contact you at a different phone number or email.

  • Request restrictions for services paid out-of-pocket in full.
    If you pay for a service in full, you may request that information about that service not be shared with your health plan.

  • Request limitations on how your information is used or shared.
    (I may not always be able to agree, but I will consider your request.)

  • Receive a list of disclosures of your information made outside of treatment, payment, and health care operations.

  • Receive a paper or electronic copy of this Notice at any time.

  • Choose someone to act for you, such as a legal guardian.

  • File a complaint if you believe your privacy rights have been violated.

You can file a complaint with me at:
admin@inharmonymhc.com or 347-254-7797
You can also file a complaint with the Office for Civil Rights at the U.S. Department of Health and Human Services at 1-800-368-1019.
You will not be penalized for filing a complaint.

Your Choices

You have the opportunity to agree or object to certain uses or disclosures of your information, including:

  • Sharing information with a family member or partner

  • Sharing information during disaster relief situations

  • Contacting you for appointment reminders

You can change your preferences at any time by letting me know.

Some uses and disclosures may still occur without your consent when permitted or required by law.

How I Use and Share Your Information

I typically use or share your health information in the following ways:

1. Treatment

I use your information to provide mental health services and to coordinate your care with other providers you authorize (e.g., psychiatrist, primary care provider).

2. Payment

I may use or share your information to bill and collect payment from you or your insurance company.

3. Health Care Operations

I may use your information to improve services, manage the practice, comply with licensing rules, or conduct administrative tasks.

Other Uses and Disclosures

I may also share your information under certain circumstances:

As Required by Law

I must disclose information if required by applicable law, except where federal privacy protections prohibit disclosure

Special Protections for Reproductive Health Care Information

Protected health information related to reproductive health care will not be used or disclosed for the purpose of conducting a criminal, civil, or administrative investigation or proceeding against you, or for the purpose of identifying any person for such investigation or proceeding, when the reproductive health care was lawful in the state where it was provided.

If I receive a request for your health information related to reproductive health care for purposes such as law enforcement, judicial or administrative proceedings, or similar requests, I will require a signed attestation confirming that the request is not for a prohibited purpose before disclosing the information, as required by federal law.

To Prevent Harm

I may disclose information when necessary to prevent serious and imminent harm to you or others, consistent with NY state law.

Public Health and Safety

I am a mandated reporter so this includes reporting suspected abuse or neglect, if required by law.

Business Associates

I may share information with vendors who support the practice (e.g., billing platforms, secure telehealth software). They are required by law to protect your information through a Business Associate Agreement (BAA).

Other Situations

I will not share your information for marketing, fundraising, nor will I sell your information.

Your Health Information Is Protected

Your information is protected through:

  • HIPAA-compliant electronic systems

  • Secure telehealth platforms

  • Administrative, technical, and physical safeguards

Changes to This Notice

I may update this Notice as laws or practice procedures change. The revised Notice will be available on my website and by request. This Notice applies to In Harmony Mental Health Counseling, PLLC and its licensed provider(s).

Contact

If you have questions about this Notice, please contact:
Cyndi Morales, LMHC, CCTP
In Harmony Mental Health Counseling, PLLC
admin@inharmonymhc.com