Notice of Privacy Practices

Last updated: October 2026

Effective date: October 2026

Our responsibilities

EverBloom Pediatric Therapy Group LLC ("EverBloom," "we") is required by law to maintain the privacy and security of your protected health information ("PHI"), to give you this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you promptly if a breach occurs that may have compromised the privacy or security of your information. When we refer to "you," this includes the child receiving services and the parent or legal guardian acting on the child's behalf.

How we may use and disclose your health information

Treatment

We use and share your information to provide, coordinate, and manage services. For example, our BCBA and RBTs share information to carry out your child's treatment plan, and we may coordinate with your child's physician or other providers.

Payment

We use and share information to bill and receive payment from health plans, Medicaid, or funding programs. For example, we give your health plan information about your child's services to obtain authorization or payment.

Health care operations

We use and share information to run our practice, improve care, train staff, conduct quality reviews and audits, and meet licensing and credentialing requirements.

Other uses and disclosures permitted or required by law

We may also use or share your information, as allowed or required by law, to:

• Comply with federal, state, or local law;
• Report suspected child abuse, neglect, or abandonment to the Florida Department of Children and Families or other authorities;
• Prevent or lessen a serious threat to the health or safety of a person or the public;
• Support public health activities and health oversight agencies (for example, audits, investigations, and licensure);
• Respond to court or administrative orders, subpoenas, and certain law enforcement requests;
• Address workers' compensation claims;
• Work with our business associates, who must protect your information under a written agreement.

Where Florida law provides stronger privacy protections than federal law, we follow Florida law.

Your choices

You can tell us whether we may share information with family members or others involved in your child's care, unless you are unable to tell us (for example, in an emergency), in which case we may share information if we believe it is in your child's best interest.

Uses that require your written authorization

We will not use or share your information for marketing, sell your information, or share psychotherapy notes without your written permission. Other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

Your rights

• Get a copy of your records. You may ask to see or get an electronic or paper copy of your child's health record. We will respond as required by law and may charge a reasonable, cost-based fee.
• Ask us to correct your records. You may ask us to correct information you believe is incorrect or incomplete. We may say no, but we will explain why in writing.
• Request confidential communications. You may ask us to contact you in a specific way (for example, a certain phone number) or at a different address. We will agree to reasonable requests.
• Ask us to limit what we use or share. You may ask us not to use or share certain information for treatment, payment, or operations. We are not required to agree, except that if you pay for a service out of pocket in full, you may ask us not to share that information with your health plan, and we will agree unless the law requires us to share it.
• Get a list of those with whom we have shared information. You may ask for an accounting of certain disclosures we made in the six years before your request.
• Get a copy of this Notice. You may ask for a paper copy at any time, even if you agreed to receive it electronically.
• Choose someone to act for you. A parent, legal guardian, or person with legal authority may exercise these rights on your child's behalf. We will confirm that person's authority before acting.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints, by calling 1-877-696-6775, or by writing to 200 Independence Avenue S.W., Washington, D.C. 20201. We will not retaliate against you for filing a complaint.

Changes to this Notice

We may change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available upon request, in our office, and on our website.

Privacy contact

For questions about this Notice or to exercise your rights, contact our Privacy Officer: