Notice of Privacy Practices

This notice applies to BAC Health Services LLC and the clinicians and staff working for the practice when they use or disclose your protected health information. It covers care provided in person and by telehealth. Effective date: September 7, 2026.

For information collected through our public website, see our Privacy Policy. You may request a paper copy of this notice at any time, including if you previously agreed to receive it electronically.

Contact the practice using the details below to make a request or ask for help. We may verify your identity and ask you to put a request in writing.

• Access your records. You can inspect or request an electronic or paper copy of medical and billing information we maintain about you, subject to limited legal exceptions. We ordinarily respond within 30 days; if a lawful extension is needed, we explain why and when to expect a response. A reasonable, cost-based fee may apply. If access is denied, we explain the reason and any review rights.
• Request a correction. Ask us to amend information you believe is inaccurate or incomplete. We ordinarily respond within 60 days. If we deny a request, we explain the reason in writing and how you may submit a statement of disagreement.
• Choose confidential communications. Ask us to contact you at a particular number or address or by another method. We accommodate reasonable requests.
• Request limits. Ask us to restrict uses or disclosures for treatment, payment, or health care operations. We generally do not have to agree. If you pay for an item or service in full yourself and ask us not to disclose it to your health plan for payment or operations, we must honor that request unless disclosure is required by law.
• Ask for an accounting. Request a list of certain disclosures made in the six years before your request. The list does not include most disclosures for treatment, payment, operations, or disclosures you authorized, and other legal exceptions apply. One accounting in a 12-month period is free; we explain any permitted charge for additional requests in advance.
• Use a representative. A person legally authorized to act for you may exercise applicable rights. We verify that person's authority.
• Receive this notice. Ask for a paper copy without charge, even if you receive care online.

Within the limits of applicable law, we may use or disclose health information for:

• Treatment: evaluating your needs, planning care, coordinating with another treating clinician, or sending a prescription to your pharmacy.
• Payment: checking benefits, submitting a claim, or collecting payment for services.
• Health care operations: reviewing care quality, training staff, arranging administrative support, and managing the practice.

We may contact you about appointments, treatment options, or related health services. Service providers acting on our behalf must protect information as required by law and their agreements with us. More protective rules for mental health information, psychotherapy notes, and certain substance use disorder records may limit these uses.

You may tell us whether to share relevant information with family, friends, or others involved in your care or payment, or for disaster relief. When you cannot express a preference, we may use professional judgment and share information in your best interests as the law permits.

Most uses or disclosures of separately maintained psychotherapy notes, marketing uses, and sales of health information require your written authorization. Other uses not described in this notice also require authorization unless permitted or required by law. You may revoke an authorization in writing at any time; revocation does not undo actions already taken in reliance on it.

If we contact you for fundraising, you can opt out of further fundraising communications. Your choice will not affect treatment or payment. If fundraising would use records protected by 42 CFR Part 2, we must first give you clear notice and an opportunity to choose not to receive those communications.

When legal requirements are met, we may use or disclose information for public health reporting; reporting suspected abuse or neglect; preventing or reducing a serious threat to health or safety; health oversight; approved research; workers' compensation; certain law enforcement or government functions; organ donation; and the work of coroners, medical examiners, or funeral directors.

We may disclose information when required by law, including to the U.S. Department of Health and Human Services to review compliance. Disclosures for court proceedings, subpoenas, or other legal process must meet applicable privacy requirements. A request alone does not automatically authorize release. The additional protections described below continue to apply.

Maryland mental health records. Maryland law places additional limits on disclosure of records developed in connection with mental health services. When such records are disclosed without authorization, only information relevant to the permitted purpose may be released. Special rules may also restrict access to psychological testing materials and separately maintained personal notes. We follow applicable state protections when they are more protective than HIPAA.

Psychotherapy notes. Separately maintained notes analyzing or documenting the contents of therapy conversations have additional protections. Most disclosures require your specific written authorization. These notes are different from ordinary clinical progress notes.

Substance use disorder records. If we receive or maintain records protected by 42 CFR Part 2, additional federal restrictions apply. These records, and testimony conveying their contents, cannot be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written consent or a qualifying court order accompanied by a subpoena or similar legal mandate. Consent for use in proceedings cannot be combined with consent for another purpose. When Part 2 records are shared under a consent for treatment, payment, and health care operations, a HIPAA-covered recipient may further disclose them as HIPAA permits, subject to the restrictions on proceedings against you.

We also apply any additional consent or disclosure requirements that govern particular health information. Ask us if you have questions about a specific record.

We are required by law to protect the privacy of your protected health information, provide this notice of our duties and practices, and follow the notice currently in effect. If a breach of unsecured protected health information occurs, we will notify affected people as required by law.

We may revise this notice and make the revised terms apply to information we already hold as well as information we receive later. The revised notice will show its effective date and will be available on this website, at our office, and on request.

Contact BAC Health Services LLC, Attention: Privacy Contact, at (240) 713-8080, info@bachealthservices.com, or 14300 Cherry Lane Court, Suite 108, Laurel, MD 20707. Please use email for a general request for assistance; do not include medical records or sensitive health details. We can explain a suitable way to send your request.

You can also complain directly to the U.S. Department of Health and Human Services Office for Civil Rights, or write to 200 Independence Avenue SW, Washington, DC 20201. We will not retaliate against you for raising a concern or filing a complaint.