Notice of Privacy Practices

Please review this notice carefully

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Effective date — May 7, 2026

Who this notice covers

This notice describes the privacy practices of Inner Light Care (“we,” “our,” “us”) for protected health information (“PHI”) we create or receive about you. We are required by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law to protect the privacy of your health information, give you this notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

How we may use and disclose your health information

We use and disclose health information about you for the following routine purposes without your authorization:

• For treatment — to provide your care, coordinate with other clinicians involved in your care (such as a primary-care provider, therapist, or pharmacy), and make referrals.
• For payment — to bill your insurer or another payer for the care we provide and to obtain prior authorization where required.
• For health-care operations — to manage the practice, evaluate quality, train, and meet legal and accreditation obligations.

We may also use or disclose your health information without your authorization when required or permitted by law — including for public-health activities; reports of abuse, neglect, or domestic violence; health-oversight activities; judicial and administrative proceedings; law-enforcement purposes; information about decedents, organ donation, and tissue donation; research conducted under approved safeguards; to avert a serious threat to health or safety; for specialized government functions; and for workers’ compensation claims.

Disclosures that require your written authorization — we will obtain your written authorization before we use or disclose your health information for marketing, before we sell your health information, and before we release most psychotherapy notes. You may revoke an authorization at any time, in writing, except to the extent we have already acted in reliance on it.

Family, friends, and others involved in your care — with your agreement (or where you are unable to agree and disclosure is in your best interest), we may share information about your care with a family member, friend, or other person you have identified.

Your rights

You have the following rights with respect to your health information:

• Right to access — you can ask to inspect or get a copy of the health information we maintain about you, in the form and format you request where readily producible.
• Right to amend — if you believe information in your record is inaccurate or incomplete, you can ask us to amend it.
• Right to an accounting of disclosures — you can ask for a list of certain disclosures we have made of your health information.
• Right to request restrictions — you can ask us to limit how we use or disclose your health information for treatment, payment, or operations. We will agree to a request to restrict disclosure to a health plan when you have paid in full out-of-pocket for the related service.
• Right to confidential communications — you can ask us to contact you in a specific way (for example, only by phone, only at a particular number) or at a specific location.
• Right to a paper copy of this notice — on request, even if you have agreed to receive it electronically.
• Right to be notified of a breach — we will notify you in writing if a breach occurs that may have compromised the privacy of your health information.
• Right to file a complaint — see the complaints section below. You will not be retaliated against for filing a complaint.

To exercise any of these rights, contact our Privacy Officer using the information below. Some requests must be made in writing.

Our duties

• We are required by law to maintain the privacy and security of your health information.
• We are required to abide by the terms of the notice currently in effect.
• We reserve the right to change this notice. The new notice will apply to all health information we maintain. If we make a material change, we will post the revised notice on our website and make paper copies available at our offices.

How we handle information collected through this website

This website provides information about our services and a link to our patient-scheduling tool. We do not place advertising trackers (such as third-party analytics, social-media pixels, or remarketing tags) on this site. Typography is self-hosted, so viewing our pages sends no font requests to any third party, and the site is hosted on Cloudflare.

When you book an appointment using the embedded scheduling tool, the booking interface is provided by Practice Fusion / Patient Fusion. Information you enter into that interface flows to Practice Fusion under a Business Associate Agreement and is treated as protected health information.

We do not sell, rent, or trade your health information.

How to file a complaint

If you believe your privacy rights have been violated, you can file a complaint with our Privacy Officer (contact information below) or directly with the U.S. Department of Health and Human Services Office for Civil Rights:

• By mail: 200 Independence Avenue, S.W., Washington, D.C. 20201
• By phone: 1-877-696-6775
• Online: hhs.gov/hipaa/filing-a-complaint

You will not be retaliated against for filing a complaint.

Contact our Privacy Officer

For questions about this notice, to exercise any of your rights, or to file a complaint with the practice:

• Privacy Officer — Vanessa Doobay, PMHNP-BC
• Email — support@innerlightcare.com
• Phone — 973-920-7328
• Mail — 1767 Morris Ave Suite 303B, Union, NJ 07083