Notice of Privacy Practices

Healing Endeavor‍ ‍

Narineh Kamali, Licensed Clinical Social Worker (LCSW)‍ ‍

California License No. LCSW126875

Virtual Mental Health Services Throughout California

Website: www.healingendeavor.com‍ ‍

Email: support@healingendeavor.com‍ ‍

Telephone: (818) 805-0827

Effective Date: October 10, 2026

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU CAN ACCESS THIS INFORMATION, AND HOW TO FILE A COMPLAINT CONCERNING YOUR PRIVACY RIGHTS. PLEASE REVIEW IT CAREFULLY.

You have the right to receive a paper or electronic copy of this notice and to discuss it with Narineh Kamali, LCSW, at (818) 805-0827 or support@healingendeavor.com.

Healing Endeavor, operated by Narineh Kamali, LCSW, is committed to protecting the privacy and confidentiality of your personal and health information.

This Notice of Privacy Practices explains how protected health information (PHI) may be used and disclosed, your rights regarding that information, and our responsibilities under the Health Insurance Portability and Accountability Act (HIPAA), applicable California laws, and other federal privacy regulations.

1. How We May Use and Disclose Your Health Information

Your protected health information may be used or disclosed for treatment, payment, and healthcare operations, as permitted by applicable law.

Treatment

We may use and disclose your health information to provide psychotherapy services, coordinate care, consult with other healthcare professionals, or facilitate referrals when legally permitted.

Payment

We may use or disclose information necessary to verify insurance coverage, submit claims, process payments, and manage billing-related activities.

Healthcare Operations

We may use health information for administrative functions, quality improvement, practice management, recordkeeping, compliance activities, and other legally permitted healthcare operations.

Other Uses Permitted or Required by Law

We may use or disclose health information without your authorization in circumstances permitted or required by law, including:

- Reporting suspected abuse or neglect when legally required.

- Addressing serious threats to health or safety when disclosure is legally authorized.

- Complying with applicable court orders and other valid legal requirements.

- Certain public health and health oversight activities.

- Workers' compensation activities when authorized by law.

- Research activities when permitted under applicable privacy requirements.

- Other circumstances permitted or required by federal or California law.

California law may provide additional confidentiality protections for mental health records. Where applicable, those additional protections will be followed.

2. Uses and Disclosures Requiring Your Written Authorization

Certain uses and disclosures of protected health information require your written authorization.

These generally include:

- Most uses and disclosures of psychotherapy notes, as specifically defined under HIPAA.

- Uses and disclosures for marketing when authorization is legally required.

- Any sale of protected health information.

- Other disclosures requiring authorization under federal or California law.

You may revoke your authorization in writing at any time, except to the extent that actions have already been taken in reliance on that authorization.

Uses or disclosures not described in this notice or otherwise permitted by law will require your authorization.

3. Special Protections for Sensitive Health Information

Psychotherapy Notes

Psychotherapy notes maintained separately from the general clinical record receive additional confidentiality protections under HIPAA.

Most uses and disclosures of psychotherapy notes require specific written authorization, subject to legally recognized exceptions.

Substance Use Disorder Treatment Records

Certain substance use disorder treatment records receive additional confidentiality protections under federal regulations, including 42 CFR Part 2.

When these protections apply, Healing Endeavor will comply with applicable requirements regarding consent, use, disclosure, and redisclosure.

When protected Part 2 records are disclosed pursuant to a valid consent for treatment, payment, or healthcare operations, subsequent uses and disclosures may be permitted under HIPAA, subject to applicable restrictions.

Part 2 records generally cannot be used or disclosed in civil, criminal, administrative, or legislative proceedings against a patient without the specific consent or court authorization required by federal law.

When legally applicable, additional rights and protections concerning these records will be honored.

4. Your Rights Regarding Your Health Information

You have the following rights, subject to applicable legal requirements.

Right to Access Your Records

You may request to inspect or receive copies of your health records.

Requests will be processed within legally required time frames, subject to applicable exceptions.

Right to Request Corrections

If you believe information in your health record is inaccurate or incomplete, you may request an amendment.

Certain requests may be denied as permitted by law, and an explanation will be provided when required.

Right to Request Confidential Communications

You may request that we communicate with you through a particular method or at a designated location.

Reasonable requests will be accommodated as required by law.

Right to Request Restrictions

You may ask us to limit certain uses or disclosures of your health information.

Although we are not required to agree to every requested restriction, we will honor restrictions required by law.

If you pay in full out of pocket for a healthcare service, you may request that information relating solely to that service not be disclosed to your health plan for payment or healthcare operations, unless disclosure is otherwise required by law.

Right to an Accounting of Disclosures

You may request a list of certain disclosures of your protected health information, subject to applicable exceptions and legal requirements.

Right to Receive a Copy of This Notice

You may request a paper or electronic copy of this Notice of Privacy Practices at any time.

Right to Designate a Personal Representative

A legally authorized personal representative may exercise certain privacy rights on your behalf, subject to applicable confidentiality laws.

Right to File a Complaint

You may file a complaint if you believe your privacy rights have been violated.

You will not be penalized or retaliated against for filing a privacy complaint.

5. Our Responsibilities

Healing Endeavor is committed to fulfilling its responsibilities under applicable federal and California privacy laws.

These responsibilities include:

- Maintaining the privacy and security of protected health information.

- Following the privacy practices described in this notice.

- Providing a copy of this notice upon request.

- Limiting uses and disclosures of health information as required by law.

- Obtaining written authorization when required.

- Notifying affected individuals following a breach of unsecured protected health information when legally required.

- Maintaining appropriate administrative, physical, and technical safeguards.

- Complying with applicable additional protections for sensitive health information.

Healing Endeavor is required to follow the terms of the Notice of Privacy Practices currently in effect.

6. Electronic Health Records and Record Retention

Healing Endeavor utilizes Headway as its electronic health record (EHR), telehealth, scheduling, billing, and practice management platform.

Healing Endeavor does not maintain a separate electronic health record system. Clinical documentation, treatment records, and routine client-related communications are managed through Headway.

Headway's medical record retention policy is ten (10) years.

Under California Business and Professions Code Section 4993, Licensed Clinical Social Workers are required to retain adult client records for a minimum of seven (7) years following the termination of therapy.

For clients who are minors, records must be retained for at least seven (7) years after the client reaches 18 years of age.

Although Healing Endeavor currently provides services to adults ages 18 and older, applicable record-retention requirements will be followed.

Healing Endeavor remains responsible for ensuring compliance with applicable federal and California record-retention requirements, including maintaining access to records when legally required.

Records may be reviewed or disclosed for legally permitted purposes, including insurance audits, payment verification, and healthcare operations, subject to applicable privacy and confidentiality protections.

Client records are maintained with appropriate confidentiality and security safeguards consistent with applicable federal and California privacy laws.

7. Telehealth and Client Communication

Healing Endeavor provides virtual psychotherapy services to adults physically located within California.

Telehealth sessions are conducted through Headway's designated telehealth platform.

All routine client-related communications, including appointment scheduling, treatment-related correspondence, and clinical messaging, are managed through Headway.

Clients are encouraged to use Headway's designated communication features for treatment-related matters.

Healing Endeavor does not use ordinary email, text messaging, or website contact forms for routine clinical communications.

Clients should avoid submitting sensitive personal or clinical information through ordinary email, text messages, or website contact forms.

Although reasonable administrative, technical, and physical safeguards are used to protect health information, electronic communications and telehealth services may involve inherent privacy and security risks.

Healing Endeavor follows applicable federal and California confidentiality requirements when providing telehealth services.

8. Disclosure to Family Members and Others Involved in Your Care

With your permission, or when otherwise permitted by applicable law, relevant health information may be shared with family members, caregivers, or other individuals involved in your care or payment for your care.

You may express preferences or request restrictions regarding certain disclosures, subject to applicable legal requirements.

Additional federal or California confidentiality protections may limit disclosures of mental health information.

9. Legal Limits to Confidentiality

Confidentiality is an essential part of the therapeutic relationship.

However, there are circumstances in which disclosure of information may be required or permitted by law.

These may include:

- Legally mandated reports of suspected child abuse, elder abuse, or dependent adult abuse.

- Certain situations involving serious threats to personal or public safety.

- Legally enforceable court orders or other lawful requirements.

- Health oversight or public health activities authorized by law.

- Other disclosures permitted or required under applicable federal or California law.

When a disclosure is legally permitted or required, Healing Endeavor will follow the applicable confidentiality requirements and limitations.

10. Marketing, Fundraising, and Sale of Health Information

Healing Endeavor does not sell clients' protected health information.

We will obtain written authorization before using or disclosing protected health information for marketing when required by law.

If fundraising activities involving protected health information are conducted where legally permitted, individuals will be provided an opportunity to opt out of applicable fundraising communications.

If fundraising communications involve substance use disorder treatment records protected under 42 CFR Part 2, additional notice and consent protections will be followed as required by law.

11. Complaints and Privacy Questions

If you have questions about this notice, wish to exercise your privacy rights, request access to your records, or raise concerns about how your information is handled, please contact:

Privacy Contact‍ ‍

Narineh Kamali, LCSW‍ ‍

Healing Endeavor

Email: support@healingendeavor.com‍ ‍

Telephone: (818) 805-0827

Website: www.healingendeavor.com

Please refrain from including sensitive clinical information in ordinary email communications.

You may also file a complaint with:

U.S. Department of Health and Human Services‍ ‍

Office for Civil Rights (OCR)

Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

You will not be penalized or retaliated against for filing a privacy complaint.

12. Changes to This Notice

Healing Endeavor reserves the right to revise this Notice of Privacy Practices to reflect changes in federal or California law, privacy requirements, or practice operations.

Any revised notice may apply to protected health information already maintained by the practice, as permitted by law.

The most current notice will be available on the Healing Endeavor website or upon request.

Effective Date: October 10, 2026