Notice Of Privacy Practices

Effective Date: September 11, 2026

Your Information. Your Rights. Our Responsibilities.

This Notice of Privacy Practices describes how medical and behavioral health information about you may be used and disclosed and how you can obtain access to this information. Please review it carefully.

Back 2 Business Behavioral Health Services (“Back 2 Business,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your protected health information (PHI) and to complying with applicable federal and state privacy laws.

1. YOUR PRIVACY RIGHTS

   You have the right to:

   Get a copy of your health information

   You may request to inspect or receive a paper or electronic copy of your medical or behavioral health records and other health information we maintain about you.

   Ask us to correct your records

   You may request that we correct health information that you believe is incorrect or incomplete. We may deny your request in certain circumstances, but we will provide you with a written explanation.

   Request confidential communications

   You may ask us to contact you in a particular way or at a specific location. For example, you may request that we contact you by phone rather than by mail.

   Ask us to limit information we use or share

   You may ask us not to use or disclose certain health information for treatment, payment, or health care operations. We are not required to agree to every request.

   If you pay for a health care service or item completely out of pocket, you may request that we not disclose information about that service or item to your health plan for payment or health care operations, unless disclosure is required by law.

   Request an accounting of disclosures

   You may request a list of certain disclosures of your health information made by us during the six years before your request.

   Get a copy of this notice

   You may request a paper copy of this Notice of Privacy Practices at any time. You may also view this notice on our website.

   Choose someone to act for you

   If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your privacy rights and make decisions regarding your health information, as permitted by law.

   File a complaint

   You may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

2. YOUR CHOICES

   For certain health information, you may tell us your preferences about what information we share.

   You may ask us to:

   • Share information with a family member, close friend, or another person involved in your care or payment for your care.
   • Share information in a disaster-relief situation.
   • Contact you using a specific telephone number, address, or communication method.

   If you are unable to tell us your preference, such as during an emergency, we may share information when we believe doing so is in your best interest or is necessary to prevent a serious and imminent threat to health or safety.

   Uses requiring your written authorization

   In most circumstances, we will obtain your written authorization before:

   • Using or disclosing your information for marketing purposes.
   • Selling your health information.
   • Sharing most psychotherapy notes.
   • Using or disclosing your information for purposes not otherwise permitted by law.

   You may revoke an authorization in writing at any time, except to the extent that we have already relied upon it.

3. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

   We may use or disclose your health information without your written authorization when permitted or required by law.

   For treatment

   We may use and share your health information with behavioral health professionals and other health care providers involved in your care.

   For example, information may be shared with another provider involved in coordinating or providing services to you.

   For payment

   We may use and disclose your health information to bill and receive payment for services provided to you.

   For health care operations

   We may use and disclose your health information to operate our organization, improve the quality of our services, coordinate care, conduct administrative activities, and manage our practice.

   As required by law

   We may disclose your health information when federal, state, or local law requires us to do so.

   Public health and safety

   We may disclose health information for certain public health purposes, including preventing disease, reporting certain conditions, reporting adverse reactions to medications, and addressing suspected abuse, neglect, or domestic violence when permitted or required by law.

   Abuse or neglect

   We may disclose information to appropriate authorities when we reasonably believe that an individual may be a victim of abuse, neglect, or domestic violence, when permitted or required by law.

   Health oversight

   We may disclose information to government agencies for activities authorized by law, including audits, investigations, inspections, licensing, and other oversight activities.

   Legal proceedings

   We may disclose health information in response to a court or administrative order, subpoena, discovery request, or other lawful process when the applicable legal requirements are satisfied.

   Law enforcement

   We may disclose health information for certain law enforcement purposes when permitted by applicable law.

   Serious threats to health or safety

   We may use or disclose health information when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.

   Workers’ compensation

   We may disclose health information as necessary to comply with workers’ compensation laws and other similar programs established by law.

   Other permitted uses

   We may also use or disclose health information for other purposes permitted under HIPAA and applicable federal or state law.

4. BEHAVIORAL HEALTH AND MENTAL HEALTH INFORMATION

   Because Back 2 Business provides behavioral health services, certain mental health information may receive additional protections under federal or state law.

   We will comply with applicable laws governing the use and disclosure of mental health information, psychotherapy notes, and other specially protected records.

   Where applicable, state or federal law may provide greater privacy protection than HIPAA. In such circumstances, we will follow the law that provides the applicable level of protection.

5. SUBSTANCE USE DISORDER INFORMATION

   If Back 2 Business creates or maintains substance use disorder patient records that are protected under 42 CFR Part 2, additional federal confidentiality protections may apply.

   We will comply with applicable Part 2 requirements regarding the use and disclosure of those records.

   Where applicable, information protected by Part 2 will not be used or disclosed for investigations or legal proceedings against you except as permitted by applicable law, including where appropriate, your written consent or a court order and subpoena.

6. OUR RESPONSIBILITIES

   We are required by law to:

   • Maintain the privacy and security of your protected health information.
   • Provide you with this Notice of Privacy Practices describing our legal duties and privacy practices.
   • Follow the privacy practices described in this notice while it is in effect.
   • Notify you promptly if a breach occurs that may have compromised the privacy or security of your protected health information.
   • Provide you with a copy of this notice upon request.

   We will not use or disclose your health information other than as described in this notice or as otherwise permitted or required by law unless you provide written authorization.

   We reserve the right to change the terms of this notice. Any revised notice will apply to all health information we maintain and will be made available upon request and on our website.

7. YOUR RIGHT TO FILE A COMPLAINT

   If you believe that your privacy rights have been violated, you may file a complaint with Back 2 Business Behavioral Health Services.

   • Phone:440-561-9881
   • Email:admin@back2businessbh.com
   • Address:26300 Euclid Avenue, Suite 819 Euclid, Ohio 44132

   You may also file a complaint with the:

   U.S. Department of Health and Human Services Office for Civil Rights

   You may submit a complaint through the HHS Office for Civil Rights complaint process or contact the Office for Civil Rights directly.

   You will not be retaliated against for filing a privacy complaint.

8. CONTACT US

   If you have questions about this Notice of Privacy Practices or would like additional information about our privacy practices, please contact us:

   Back 2 Business Behavioral Health Services
   • Phone:440-561-9881
   • Email:admin@back2businessbh.com
   • Address: 26300 Euclid Avenue, Suite 819 Euclid, Ohio 44132
   • Effective Date of Notice: September 11, 2026

   This Notice of Privacy Practices is also available on our website at: www.back2businessbh.com