Effective Date: September 12, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Changing Seasons Healthcare is committed to protecting the privacy and security of your Protected Health Information (PHI). This Notice of Privacy Practices explains how we may use and disclose your PHI, our responsibilities regarding your information, and your rights concerning your health information.

This notice applies to PHI maintained by Changing Seasons Healthcare in connection with the healthcare, home care, home health, personal care, supportive care, care coordination, and other healthcare-related services that we provide, as applicable.

We are required by law to maintain the privacy of PHI, provide you with this notice describing our privacy practices and legal duties, and comply with the terms of the notice currently in effect.

Changing Seasons Healthcare may use or disclose your PHI without obtaining a separate written authorization when permitted or required by applicable federal and North Carolina law.

We may use or disclose your PHI to provide, coordinate, or manage your healthcare and services.

For example, we may share appropriate information with nurses, physicians, therapists, caregivers, pharmacies, hospitals, or other healthcare professionals involved in your care when necessary to provide or coordinate services.

We may use or disclose your PHI to obtain payment for services we provide or that are provided on our behalf.

For example, we may provide information to you, an insurance company, Medicaid, Medicare, the U.S. Department of Veterans Affairs, or another healthcare payer when necessary to determine eligibility, obtain authorization, submit claims, obtain reimbursement, or resolve payment matters.

We may use or disclose your PHI as necessary to conduct our healthcare operations.

These activities may include quality assessment and improvement, care coordination, employee training, compliance activities, credentialing, auditing, utilization review, business management, service planning, and other activities necessary to operate the organization and improve the quality and safety of services.

We may use or disclose your PHI when federal, state, or local law requires us to do so.

This may include disclosures related to public health activities, reporting certain diseases or conditions, reporting suspected abuse or neglect, court or administrative proceedings, law enforcement matters, regulatory oversight, or other legally authorized purposes.

We may disclose PHI for certain public health activities and when permitted by law to help prevent or control disease, injury, or disability or to address serious threats to the health or safety of an individual or the public.

We may disclose PHI when permitted or required by law to report suspected abuse, neglect, or domestic violence to an appropriate governmental authority.

We may disclose PHI to appropriate governmental agencies for activities authorized by law involving oversight of the healthcare system, healthcare providers, government programs, or compliance with applicable laws and regulations.

We may disclose PHI in response to a court order, administrative order, subpoena, discovery request, or other lawful process when the applicable legal requirements for disclosure have been satisfied.

We may disclose PHI to law enforcement officials when permitted or required by applicable law and when the legal requirements for the disclosure have been satisfied.

We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, when permitted by law.

We may disclose PHI when permitted or required by law to coroners, medical examiners, or funeral directors when necessary to carry out their legally authorized duties.

We may disclose PHI as authorized by and to the extent necessary to comply with workers' compensation laws and other similar programs.

Certain uses and disclosures of PHI require your written authorization when not otherwise permitted or required by law.

These may include, as applicable:

• Certain uses or disclosures of psychotherapy notes;
• Uses or disclosures for marketing purposes;
• Disclosures that constitute a sale of PHI; and
• Other uses or disclosures that are not otherwise permitted or required by applicable law.

When written authorization is required, you may revoke that authorization in writing, except to the extent Changing Seasons Healthcare has already relied upon the authorization.

Changing Seasons Healthcare will not use or disclose your PHI for purposes requiring authorization without obtaining the appropriate authorization.

You have important rights regarding the PHI we maintain about you.

You have the right to inspect and obtain a copy of certain health and billing information that we maintain about you, subject to applicable legal limitations.

You may request access to your records in accordance with our established procedures.

You have the right to request that we amend PHI you believe is inaccurate or incomplete.

Your request must be submitted in accordance with our applicable procedures. We may deny a request when permitted by law, and if we deny your request, we will provide you with information regarding your rights concerning the denial.

You have the right to request a restriction or limitation on the PHI we use or disclose for treatment, payment, or healthcare operations.

We are not required to agree to every requested restriction.

However, when applicable HIPAA requirements are satisfied, we must agree to a request to restrict disclosure of information to a health plan when the individual has paid for the service out-of-pocket and in full and the disclosure is not otherwise required by law.

You have the right to request that we communicate with you about your health information in a particular manner or at a particular location.

For example, you may request communication by a particular telephone number, mailing address, or other reasonable means.

We will consider reasonable requests and will accommodate requests when required by applicable law.

You have the right to request a paper copy of this Notice of Privacy Practices at any time, even if you have agreed to receive the notice electronically.

You have the right to request an accounting of certain disclosures of your PHI made by Changing Seasons Healthcare, subject to limitations and exceptions established by law.

You have the right to file a complaint if you believe your privacy rights have been violated.

You may submit a complaint to Changing Seasons Healthcare or to the U.S. Department of Health and Human Services, Office for Civil Rights.

You will not be denied services, discriminated against, or retaliated against for filing a privacy complaint.

Changing Seasons Healthcare is required by law to:

• Maintain the privacy and security of your PHI;
• Provide you with this Notice describing our legal duties and privacy practices;
• Follow the terms of the Notice currently in effect;
• Notify affected individuals as required by law following a breach of unsecured PHI; and
• Provide you with a copy of this Notice upon request.

We reserve the right to change our privacy practices and this Notice when permitted or required by applicable law.

When material changes are made to this Notice, the revised Notice will be made available through our website and by other means as required by law.

Changing Seasons Healthcare may maintain PHI electronically and may use electronic systems to document, store, transmit, coordinate, or manage healthcare information.

We use reasonable administrative, physical, and technical safeguards designed to protect PHI from unauthorized access, use, disclosure, alteration, or destruction.

Access to electronic PHI is limited to workforce members and authorized individuals who have a legitimate need for the information as permitted by law and organizational policy.

When permitted or required by law, an individual who has legal authority to act on your behalf may exercise certain rights or make decisions concerning your PHI.

This may include an appropriately authorized parent, legal guardian, healthcare power of attorney, personal representative, or other legally recognized representative.

Changing Seasons Healthcare may request documentation necessary to verify a person's authority before releasing PHI or allowing that individual to exercise rights on another person's behalf.

Certain types of health information may receive additional protection under federal or North Carolina law.

These protections may apply to information involving substance use disorder treatment, mental health or behavioral health information, HIV/AIDS, sexually transmitted diseases, reproductive healthcare, genetic information, or other specially protected categories, when applicable.

Changing Seasons Healthcare will comply with additional confidentiality requirements that apply to information maintained or disclosed by the organization.

Where federal or state law provides greater privacy protection than HIPAA, Changing Seasons Healthcare will follow the applicable law.

When applicable, records that are subject to the federal confidentiality requirements governing substance use disorder patient records, including 42 C.F.R. Part 2, will be protected in accordance with those requirements.

Part 2 protections may apply to records maintained by a federally assisted substance use disorder treatment program and may impose restrictions beyond the general HIPAA requirements.

Nothing in this Notice is intended to waive or reduce protections provided by applicable federal or state law.

Changing Seasons Healthcare will use and disclose reproductive health information in accordance with applicable federal and state law.

Where applicable legal restrictions govern the use or disclosure of PHI related to reproductive healthcare, Changing Seasons Healthcare will follow those requirements.

Any required documentation, authorization, or attestation concerning a request for PHI will be obtained and maintained when required by applicable law.

Changing Seasons Healthcare will not use or disclose your PHI for marketing purposes when a written authorization is required by law.

When applicable, you may have the right to opt out of certain communications involving fundraising activities.

If you have questions about this Notice, believe that your privacy rights have been violated, or would like to request a copy of this Notice, please contact:

Changing Seasons Healthcare
Privacy Official
Telephone: 919-899-4482
Website: www.changingseasonshealthcare.com

You may also contact:

U.S. Department of Health and Human Services
Office for Civil Rights

You may obtain additional information about filing a HIPAA privacy complaint through the U.S. Department of Health and Human Services Office for Civil Rights.

Changing Seasons Healthcare will not retaliate against you for filing a complaint.

Changing Seasons Healthcare reserves the right to revise this Notice of Privacy Practices.

Any revised Notice will apply to PHI maintained by Changing Seasons Healthcare as permitted by applicable law.

When material changes are made, the revised Notice will be made available on our website and through other required distribution methods.

You may be asked to acknowledge that you received or were provided access to this Notice of Privacy Practices.

Acknowledging receipt of this Notice does not constitute authorization for uses or disclosures of PHI that require a separate written authorization.

Your acknowledgement confirms receipt of the Notice; it does not mean that you have agreed to uses or disclosures beyond those permitted or required by law.

Effective Date: September 12, 2026

Changing Seasons Healthcare
Privacy Official: 919-899-4482