NOTICE OF PRIVACY PRACTICES

Beyond Mind, TMS & Ketamine Treatment Center

Last Updated: October 7, 2026

YOUR INFORMATION. YOUR RIGHTS. OUR RESPONSIBILITIES.

This Notice of Privacy Practices describes how Beyond Mind, TMS & Ketamine Treatment Center (“Practice,” “we,” “us,” or “our”) may use and disclose your protected health

information (“PHI”) and describes your rights concerning your health information.

Please review this notice carefully.

Your health information is personal and we are committed to protecting it. Federal law,

including the Health Insurance Portability and Accountability Act (“HIPAA”), and California law

provide important protections for your health information.

This Notice applies to health information created or maintained by the Practice in connection

with your care.

1. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

We may use or disclose your PHI for the following purposes without obtaining additional

authorization when permitted by applicable law.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your

healthcare.

For example, we may share relevant information with another healthcare professional involved

in your treatment.

We will attempt to get your consent when possible. However, it is important to understand that

California does not generally require a signed patient release of information (ROI) or written

authorization when healthcare providers share medical information for direct treatment and

care coordination.

Payment

We may use or disclose your health information to obtain payment for healthcare services.

For example, we may provide information to your health insurance plan to obtain authorization

for treatment or to submit claims for payment.

Healthcare Operations

We may use or disclose your health information for healthcare operations.

These activities may include:

  •  Quality assessment and improvement;

  •  Reviewing the performance of healthcare professionals;

  •  Care coordination;

  •  Compliance activities;

  •  Auditing;

  •  Credentialing;

  •  Training;

  •  Business planning; and

  •  Other activities permitted by law.

Appointment Reminders

We may use your contact information to remind you about appointments or communicate

scheduling information.

Treatment Options and Health-Related Services

We may contact you about treatment alternatives, treatment options, or other health-related

services that may be of interest to you.

Business Associates

We may disclose PHI to companies or individuals that perform services on our behalf when

permitted by law. For example, to order blood work or other medical tests.

These individuals or organizations are referred to as “business associates” under HIPAA and

may be required to enter into agreements requiring them to appropriately safeguard your PHI.

Individuals Involved in Your Care

When permitted by law, we may disclose relevant health information to a family member, close

friend, or another person you identify as being involved in your healthcare or payment for your

healthcare.

We will follow applicable law concerning your preferences and authorization requirements.

Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities

We may disclose PHI for certain public health activities permitted or required by law, such as

reporting certain diseases or conditions, preventing or controlling disease, or reporting adverse

events.

Abuse or Neglect

We may disclose information when required or permitted by law to report suspected abuse,

neglect, or domestic violence.

Health Oversight

We may disclose PHI to governmental agencies authorized to conduct health oversight

activities, such as audits, investigations, inspections, and licensing activities.

Legal Proceedings

We may disclose PHI in response to a court order, subpoena, discovery request, or other lawful

process when permitted or required by applicable law.

Law Enforcement

We may disclose PHI to law enforcement officials when permitted or required by applicable

law.

Serious Threat to Health or Safety

We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat

to the health or safety of a person or the public, when permitted by applicable law.

Workers’ Compensation

We may disclose PHI for workers compensation or similar programs as authorized or required

by law.

Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI as permitted by law to coroners, medical examiners, or funeral directors

when necessary to carry out their lawful duties.

Organ and Tissue Donation

We may disclose PHI for organ, eye, or tissue donation and transplantation purposes when

permitted by law.

Research

We may use or disclose PHI for research purposes when permitted by applicable law and

appropriate privacy protections are in place.

2. USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION

Certain uses and disclosures of your PHI generally require your written authorization.

For example, an authorization may be required for:

  •  Certain uses and disclosures of psychotherapy notes;

  •  Certain uses and disclosures for marketing purposes; and

  •  Other uses or disclosures requiring authorization under applicable law.

If you provide an authorization, you generally have the right to revoke it in writing, except to

the extent the Practice has already relied upon the authorization.

We will not use or disclose your PHI for purposes requiring your authorization without

obtaining that authorization.

3. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have certain rights regarding your PHI.

Right to Inspect and Obtain a Copy

You generally have the right to inspect and obtain a copy of your PHI contained in designated

record sets maintained by the Practice, subject to applicable legal limitations.

You may be charged a reasonable, cost-based fee where permitted by law.

Right to Request an Amendment

You may request that we amend health information that you believe is incorrect or incomplete.

Your request must be made in writing and should explain why you believe the information

should be amended.

We may deny your request in certain circumstances permitted by law.

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your PHI.

We are not required to agree to every requested restriction.

However, when you have paid for a service completely out of pocket and request that the

information not be disclosed to your health plan for purposes of payment or healthcare

operations, we may be required to honor that request when applicable law applies.

Right to Request Confidential Communications

You may request that we communicate with you about your health information in a particular

way or at a particular location.

For example, you may request that we contact you only by email or at a particular telephone

number, where permitted by law.

We will consider reasonable requests.

Right to an Accounting of Certain Disclosures

You may request an accounting of certain disclosures of your PHI made by the Practice, subject

to limitations and exceptions under applicable law.

Right to Receive Notice of a Breach

You have the right to receive notice when a breach of your unsecured PHI occurs if notification

is required by law.

4. PSYCHIATRIC AND MENTAL HEALTH INFORMATION

Psychiatric and mental health information can be particularly sensitive.

The Practice will handle mental health and psychiatric information in accordance with

applicable federal and California privacy laws.

Certain categories of information may receive additional protections under federal or California

law.

For example, psychotherapy notes maintained separately from the medical record may be

subject to special federal protections.

Additional authorization may be required for certain uses or disclosures of specially protected

information.

5. SUBSTANCE USE DISORDER INFORMATION

If the Practice maintains information subject to special federal confidentiality protections for

substance use disorder treatment records, those records may be subject to additional

requirements under applicable federal law, including 42 CFR Part 2.

Where applicable, the Practice will comply with the additional protections governing such

information.

6. GENETIC INFORMATION AND OTHER SENSITIVE INFORMATION

Certain types of health information may receive additional protections under federal or

California law.

The Practice will comply with applicable requirements concerning specially protected

information.

7. TELEHEALTH AND ELECTRONIC COMMUNICATIONS

The Practice may provide healthcare through telehealth and electronic communication

technologies.

When permitted by law, PHI transmitted through authorized telehealth and electronic

communication systems will be handled in accordance with applicable privacy and security

requirements.

Please understand that ordinary email, text messaging, and other electronic communications

may carry privacy and security risks.

We encourage patients to use secure communication methods designated by the Practice for

sensitive medical information.

8. MINORS AND PERSONAL REPRESENTATIVES

Privacy rights concerning minors and the authority of parents, guardians, and other personal

representatives are governed by applicable federal and California law.

In certain circumstances, a minor may have the right to consent to healthcare without parental

authorization, and the minor may have corresponding privacy rights.

The Practice will comply with applicable laws governing minors, personal representatives, and

confidential healthcare services.

9. CALIFORNIA PRIVACY PROTECTIONS

California law provides additional protections for medical information and certain categories of

sensitive information.

The Practice will comply with applicable California medical privacy requirements in addition to

HIPAA.

Where California law provides greater protection than federal law, the Practice will follow

applicable requirements.

10. YOUR RIGHT TO FILE A PRIVACY COMPLAINT

If you believe your privacy rights have been violated, you may file a complaint with the Practice.

You may also file a complaint with the U.S. Department of Health and Human Services, Office

for Civil Rights.

You will not be retaliated against for filing a privacy complaint.

Contact the Practice

Beyond Mind, TMS & Ketamine Treatment Center

7855 Fay Ave, Suite 200, La Jolla, CA 92037

858-203-7332 or 619-805-0007

U.S. Department of Health and Human Services

Office for Civil Rights

You may obtain information about filing a complaint with the Office for Civil Rights through the

U.S. Department of Health and Human Services.

https://www.hhs.gov/

11. OUR RESPONSIBILITIES

The Practice is required by law to:

  •  Maintain the privacy of your PHI;

  •  Provide you with this Notice describing our legal duties and privacy practices;

  •  Follow the terms of the Notice currently in effect;

  •  Notify affected individuals following a breach of unsecured PHI when notification is required by law; and

  • Comply with applicable federal and California privacy requirements.

We reserve the right to change our privacy practices and this Notice.

If we make a material change to our privacy practices, we will make the revised Notice available

as required by law.

12. CHANGES TO THIS NOTICE

We may change this Notice from time to time.

The revised Notice will include a new effective date.

The current version of this Notice will be available at the Practice’s office and, where

appropriate, on our Website.

13. CONTACT INFORMATION

If you have questions about this Notice or our privacy practices, please contact:

Beyond Mind, TMS & Ketamine Treatment Center

Address: 7855 Fay Ave, Suite 200, La Jolla, CA 92037

Telephone: 858-203-7332 or 619-805-0007

Website: beyondmindmd.com