Notice of Privacy Practices

Effective Date: 07/01/2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Northern Star ABA, LLC is committed to protecting the privacy of your and your child’s health information. We are required by law to maintain the privacy of Protected Health Information (“PHI”), to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. This Notice applies to all records of care generated by Northern Star ABA.

How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose PHI, along with examples. Not every use or disclosure will be listed, but all permitted uses fall within one of these categories.

For Treatment. We use PHI to provide, coordinate, and manage your child’s ABA therapy and related services. For example, our Board Certified Behavior Analyst (BCBA) and Registered Behavior Technicians (RBTs) may share information to develop and carry out your child’s treatment plan, and we may share information with other providers involved in your child’s care.

For Payment. We use and disclose PHI to obtain payment for services. For example, we may share information with your health plan to verify benefits, obtain prior authorization, or submit claims for the services we provide.

For Health Care Operations. We use and disclose PHI to support our business activities, such as quality assessment, staff training and supervision, licensing, and general administration.

Appointment Reminders & Communications. We may contact you to provide appointment reminders or information about your child’s care, using the contact information you provide.

To Parents, Guardians & Family. Because we serve children, we routinely share PHI with a parent or legal guardian as the child’s personal representative, consistent with applicable law. We may also share relevant information with family members you involve in your child’s care.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose PHI without your authorization in the following circumstances, to the extent permitted or required by law:

•       As required by federal, state, or local law;

•       For public health activities, such as preventing or controlling disease;

•       To report suspected abuse, neglect, or domestic violence to authorities permitted by law;

•       For health oversight activities, such as audits, investigations, and licensure;

•       In response to a court or administrative order, subpoena, or other lawful process;

•       To law enforcement under limited circumstances permitted by law;

•       To avert a serious and imminent threat to health or safety;

•       For workers’ compensation as authorized by law;

•       To coroners, medical examiners, or funeral directors as permitted by law;

•       For specialized government functions, such as military or national security activities.

Uses and Disclosures That Require Your Written Authorization

Other uses and disclosures not described in this Notice will be made only with your written authorization. This includes, in most cases: (1) marketing communications, (2) the sale of PHI, and (3) most uses and disclosures of psychotherapy notes. If you give us authorization, you may revoke it in writing at any time, except to the extent we have already relied on it.

Your Rights Regarding Your Health Information

•       Right to Inspect and Copy. You may inspect and obtain a copy of PHI we maintain in a designated record set, in the form and format you request when readily producible. We may charge a reasonable, cost-based fee.

•       Right to Request an Amendment. If you believe information is incorrect or incomplete, you may ask us to amend it. We may deny the request under certain circumstances and will explain any denial in writing.

•       Right to an Accounting of Disclosures. You may request a list of certain disclosures we have made of your PHI.

•       Right to Request Restrictions. You may request restrictions on how we use or disclose PHI. We are not required to agree except where required by law (for example, disclosures to a health plan for services you paid for in full out of pocket).

•       Right to Request Confidential Communications. You may ask us to communicate with you in a specific way or at a specific location.

•       Right to a Paper Copy of This Notice. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

•       Right to Be Notified of a Breach. You have the right to be notified if there is a breach of your unsecured PHI.

Our Responsibilities

•       We are required by law to maintain the privacy and security of your PHI;

•       We will let you know promptly if a breach occurs that may have compromised the privacy or security of your PHI;

•       We must follow the duties and privacy practices described in this Notice and give you a copy of it;

•       We will not use or share your information other than as described here unless you tell us we can in writing.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as information we receive in the future. The current Notice will be posted in our office and on our website, and will include its effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights (visit www.hhs.gov/ocr). We will not retaliate against you for filing a complaint.

Contact Information

Privacy Officer: Hanchen Fang

Northern Star ABA — 2001 Timberloch Place, Suite 500, The Woodlands, Texas,77380

Phone: (713) 510-5155   

Email: Admingroup@northernstaraba.com