NOTICE OF PRIVACY PRACTICES

Acadia Health, LLC

Effective Date: January 25, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. THE PRIVACY OF YOUR MEDICAL INFORMATION IS IMPORTANT TO US.

CONTACT INFORMATION

For more information about our privacy practices, to discuss questions or concerns, or to get additional copies of this notice, please contact our Privacy Officer.

Acadia Health, LLC
ATTN: Privacy Officer
7150 Cahaba Valley Rd.
STE 101
Birmingham, AL 35242
Telephone: 205-623-4455

OUR LEGAL DUTY

We are required by law to protect the privacy of your protected health information (“medical information”). We are also required to send you this notice about our privacy practices, our legal duties and your rights concerning your medical information.

We must follow the privacy practices that are described in this notice while it is in effect. This notice takes effect on the date set forth at the top of this page and will remain in effect unless we replace it. We reserve the right at any time to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make any change in our privacy practices and the new terms of our notice applicable to all medical information we maintain, including medical information we created or received before we made the change in practices.

We may amend the terms of this notice at any time. If we make a material change to our policy practices, we will provide to you, the revised notice. Any revised notice will be effective for all health information we maintain. The effective date of a revised notice will be noted. A copy of the current notice in effect will be available in our facility and on our website. You may request a copy of the current notice at any time. We collect and maintain oral, written and electronic information to administer our business and to provide products, services and information of importance to our patients. We maintain physical, electronic and procedural safeguards in the handling and maintenance of our patients’ medical information, in accordance with applicable state and federal standards, to protect against risks such as loss, destruction and misuse.

USES AND DISCLOSURES OF YOUR MEDICAL INFORMATION

Treatment: We may disclose your medical information, without your prior approval, to another dentist or healthcare provider working in our facility or otherwise providing you treatment for the purpose of evaluating your health, diagnosing medical conditions and providing treatment. For example, your health information may be disclosed to an oral surgeon to determine whether surgical intervention is needed.

Payment: We provide dental services. Your medical information may be used to seek payment from your insurance plan or from you. For example, your insurance plan may request and receive information on dates that you received services at our facility in order to allow your employer to verify and process your insurance claim.

Health Care Operations: We may use and disclose your medical information, without your prior approval, for health care operations. Health care operations include: healthcare quality assessment and improvement activities;

reviewing and evaluating dental care provider performance, qualifications and competence, health care training programs, provider accreditation, certification, licensing and credentialing activities; conducting or arranging for medical reviews, audits and legal services, including fraud and abuse detection and prevention; and business planning, development, management and general administration including customer service, complaint resolutions and billing, de-identifying medical information, and creating limited data sets for health care operations, public health activities and research. We may disclose your medical information to another dental or medical provider or to your health plan subject to federal privacy protection laws, as long as the provider or plan has had a relationship with you and the medical information is for that provider’s or health plan’s care quality assessment and improvement activities, competence and qualification evaluation and review activities, or fraud and abuse detection and prevention.

Your Authorization: You (or your legal personal representative) may give us written authorization to use your medical information or to disclose it to anyone for any purpose. Once you give us authorization to release your medical information, we cannot guarantee that the person to whom the information is provided will not disclose that information. You may take back or “revoke” your written authorization at any time, except if we have already acted based on your authorization. Unless you give us written authorization, we will not use or disclose your medical information for any purpose other than those described in this notice. We will obtain your authorization prior to using your medical information for marketing, fundraising purposes or for commercial use.

Family, Friends and Others involved in your care or payment for care: We may disclose your medical information to a family member, friend or any other person you involve in your care or payment for your health care. We will disclose only the medical information that is relevant to the person’s involvement.

We may use or disclose your name, location and general condition to notify, or to assist an appropriate public or private agency to locate and notify, a person responsible for your care in appropriate situations, such as a medical emergency or during disaster relief efforts.

We will provide you with an opportunity to object to these disclosures, unless you are not present or are incapacitated or it is an emergency or disaster relief situation. In those situations, we will use our professional judgment to determine whether disclosing your medical information is in your best interest under the circumstances.

This may include disclosures made in connection with community-based dental screenings or outreach programs, including those conducted at schools, daycares, Head Start programs, or similar settings. In these situations, and using our professional judgment, we may provide limited written screening results or recommendations related to a child’s oral health to a caregiver, teacher, school staff member, or other individual responsible for the child at the time of the screening, or send such information home with the child, for the purpose of informing a parent or guardian of the results and any recommended follow-up care.

Health-Related Products and Services: We may use your medical information to communicate with you about health-related products, benefits, services, payment for those products and services and treatment alternatives.

Reminders: We may use or disclose health information to send you reminders about your dental care, such as appointment reminders, follow-up instructions, and information related to your treatment or payment. We may contact you via Mail, email, telephone, or by text or similar messaging sent to a mobile device. These messages may include written messages, images, or other information related to your care. If you provide us with an email address or mobile number, we may use that information to communicate with you unless you tell us not to. We may leave messages on voicemail or answering machines at the telephone numbers you provide. We may also use email addresses or phone numbers you provide to send legally required notifications, including notifications of breaches of unsecured protected health information, as permitted by law as a possible alternative to US Mail.

Plan Sponsors: If your dental insurance coverage is through an employer’s sponsored group dental plan, we may share summary health information with the plan sponsor.

Public Health and Benefit Activities: We may use and disclose your medical information, without your permission, when required by law and when authorized by law for the following kinds of public health and public benefit activities; for public health, including to report disease and vital statistics, child abuse, adult abuse, neglect or domestic violence; to avert a serious an imminent threat to health or safety; for health care oversight, such as activities of state insurance commissioners, licensing and peer review authorities and fraud prevention agencies; for research; in response to court and administrative orders and other lawful process; to law enforcement officials with regard to crime victims and criminal activities; to coroners, medical examiners, funeral directors and organ procurement organizations; to the military, to federal officials for lawful intelligence, counterintelligence, and national security activities, and to correctional institutions and law enforcement regarding persons in lawful custody; and as authorized by state worker’s compensation laws.

Special protections for SUD records: Substance Use Disorder (SUD) Treatment records have enhanced protections. They cannot be used in legal proceedings without your consent or court order.

If a use or disclosure of health information described above in this notice is prohibited or materially limited by other laws that apply to us, it is our intent to meet the requirements of the more stringent law.

Business Associates: We may disclose your medical information to our business associates that perform functions on our behalf or provide us with services if the information is necessary for such functions or services. Our business associates are required, under contract with us, to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract.

Data Breach Notification Purposes: We may use your contact information to provide legally required notices of unauthorized acquisition, access or disclosure of your health information.

Additional Restrictions on use and disclosure: Certain federal and state laws may require special privacy protections that restrict the use and disclosure of certain health information, including highly confidential information about you. “Highly Confidential Information” may include confidential information under Federal laws governing reproductive rights, alcohol and drug abuse information and genetic information as well as state laws that often protect the following types of information:

1. HIV/AIDS;
2. Mental Health;
3. Genetic Tests (in accordance with GINA 2009);
4. Alcohol and drug abuse;
5. Sexually transmitted diseases and reproductive health information; and
6. Child or adult abuse or neglect, including sexual assault.

YOUR RIGHTS

1. You have a right to see and get a copy of your health records.
2. You have a right to amend your health information.
3. You have a right to ask to get an Accounting of Disclosures of when and why your health information was shared for certain purposes.
4. You are entitled to receive a Notice of Privacy Practices that tells you how your health information may be used and shared.
5. You have the right to decide whether to authorize the use or disclosure of your health information for purposes that require your written authorization under HIPAA, such as certain marketing activities. We will not use or disclose your health information for these purposes without your written authorization, and we do not sell your health information. You have the right to revoke an authorization at any time by submitting a written request to our Privacy Officer. You also have the right to opt out of receiving certain health-related communications by contacting our Privacy Officer using the information listed in this Notice.
6. You have a right to restrict who receives your information.
7. You have a right to request amendment to be made to your health records by submitting the request in writing to our privacy officer. Your request does not guarantee the amendment, but does guarantee that it will be reviewed and considered.
8. If you believe your rights are being denied or your health information is not being protected, you can:
   1. File a complaint with your provider or health insurer
   2. File a complaint with the U.S. Government
9. You have the right to opt out of receiving fundraising communications from us at any time. If you choose to opt out, your decision will not affect your treatment or payment for services. To opt out of fundraising communications, please contact our Privacy Officer using the information listed in this Notice.

COMPLAINTS

If you are concerned that we may have violated your privacy rights, or you disagree with a decision we made about access to your medical information, about amending your medical information, about restricting our use or disclosure of your medical information, or about how we communicate with you about your medical information (including a breach notice communication), you may contact our Privacy Officer to register either a verbal or written complaint. You may also submit a written complaint to the Office for Civil Rights of the United States Department of Health and Human Services, 200 Independence Avenue, SW, Room 509F, Washington, DC, 20201. You may contact the Office for Civil Rights’ hotline at 1-800-368-1019. We support your right to privacy of your medical information. We will not retaliate in any way if you choose to file a complaint with us or with the US Department of Health and Human Services.