Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Exelixis ABA is committed to protecting the privacy and confidentiality of your and your child’s protected health information (PHI). This Notice describes how we may use and disclose your information and outlines your rights under the Health Insurance Portability and Accountability Act (HIPAA).

How We May Use and Disclose Your Information

We may use and disclose your PHI for the following purposes:

1. Treatment

We may use and share your information to provide, coordinate, or manage ABA services. This may include communication with other healthcare providers, therapists, or professionals involved in your child’s care.

2. Payment

We may use and disclose your information to bill and receive payment from insurance companies or other third parties. This includes submitting claims, verifying eligibility, and obtaining authorizations.

3. Healthcare Operations

We may use your information for administrative and operational purposes, such as quality assurance, staff training, licensing, and compliance activities.

Additional Uses and Disclosures

We may also disclose your PHI in the following situations:

• As required by law (e.g., reporting abuse or neglect)
• For public health and safety purposes
• To comply with legal proceedings or law enforcement requests
• To prevent a serious threat to health or safety
• To business associates who perform services on our behalf (under HIPAA-compliant agreements)

Any other use or disclosure not described in this Notice will require your written authorization.

Your Rights Regarding Your Information

You have the right to:

Access Your Records

Request to inspect or obtain a copy of your records.

Request Amendments

Ask us to correct inaccurate or incomplete information.

Request Restrictions

Request limits on how your information is used or shared (we may not always be able to comply).

Confidential Communications

Request that we contact you in a specific way (e.g., phone, email, alternative address).

Accounting of Disclosures

Request a list of certain disclosures we have made of your information.

File a Complaint

You have the right to file a complaint if you believe your privacy rights have been violated.

Our Responsibilities

Exelixis ABA is required to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Notify you in the event of a breach of your unsecured PHI
• Follow the terms of this Notice currently in effect

We reserve the right to update this Notice at any time. Updated versions will be available upon request and on our website.

Contact Information

If you have questions about this Notice or wish to exercise your rights, please contact info@exelixisaba.com