Notice of Privacy Practices

1Our commitment to your privacy

Compass Healthcare LLC ("we," "us," or "our") is committed to protecting the privacy and security of your protected health information ("PHI").

We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to notify you following a breach of unsecured PHI. We are required to follow the terms of the notice currently in effect.

PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for that care.

2How we may use and disclose your health information

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment

We may use and disclose your PHI to coordinate and manage your care and related services among the providers and organizations involved in your treatment.

Payment

We provide medical billing and revenue cycle services. We may use and disclose your PHI to bill and collect payment for services — for example, to submit claims, verify authorizations and eligibility, process electronic remittance advice, and follow up on denied or aging claims.

Health care operations

We may use and disclose your PHI for operations such as quality assessment, session-note compliance review, staff training, auditing, and improving our services.

3Other permitted or required disclosures

We may use or disclose your PHI in the following circumstances, subject to conditions set by law:

• When required by federal, state, or local law.
• For public health activities, or to report abuse, neglect, or domestic violence.
• For health oversight activities such as audits and investigations.
• In response to a court or administrative order, subpoena, or other lawful process.
• For law enforcement purposes as permitted by law.
• To avert a serious threat to health or safety.
• For workers' compensation, as authorized by law.
• To business associates who perform services on our behalf under a written agreement.

Uses and disclosures not described in this notice — including most uses of psychotherapy notes, marketing, and any sale of PHI — will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

4Your rights regarding your health information

To exercise any of these rights, contact us using the information in the Contact section below. We may ask you to submit your request in writing.

5Our responsibilities

• We maintain the privacy and security of your PHI using appropriate administrative, physical, and technical safeguards, including encryption and access controls for electronic PHI (ePHI).
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.
• We will not use or share your information other than as described here unless you tell us we can in writing.

6Changes to this notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have as well as any information we receive in the future. The current notice will be posted at https://compasshealthllc.com/hipaa-notice and a copy will be available upon request. Each notice shows its effective date.

7Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

8Contact information

To exercise your rights, ask questions, or file a complaint, contact us:

This notice is effective as of 06/14/2026.