Notice of Privacy Practices

Effective Date: September 12, 2026

Iyali Mental Wellness

YOUR INFORMATION. YOUR RIGHTS. OUR RESPONSIBILITIES.

This Notice of Privacy Practices describes how medical information about you may be used and disclosed by Iyali Mental Wellness and how you can obtain access to that information.

Please review this notice carefully.

YOUR RIGHTS

When it comes to your health information, you have certain rights.

Get a copy of your health information

You may request to inspect or obtain a copy of your protected health information maintained by Iyali Mental Wellness, subject to applicable federal and state law.

Ask us to correct your health information

You may ask us to correct health information that you believe is incorrect or incomplete. We may deny a request in certain circumstances permitted by law, but we will provide a written explanation when required.

Request confidential communications

You may ask us to contact you in a particular way or at a particular location.

For example, you may request that we contact you only by phone, contact you at a particular telephone number, or communicate with you in another reasonable manner.

We will consider reasonable requests and will comply with requests when required by law.

Ask us to limit what we use or share

You may ask us to limit the use or disclosure of your health information for treatment, payment, or healthcare operations.

We are not required to agree to every request, except where applicable law requires otherwise.

Request restrictions on certain disclosures to health plans

If you pay for a healthcare item or service completely out of pocket, you may request that we not disclose information about that item or service to your health plan for purposes of payment or healthcare operations, except when disclosure is required by law.

Get a list of certain disclosures

You may request an accounting of certain disclosures of your health information made by Iyali Mental Wellness, subject to the exceptions and limitations provided by law.

Get a copy of this notice

You may request a paper copy of this notice at any time. You may also access the current notice on our website.

Choose someone to act for you

If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise rights and make choices regarding your health information as permitted by law.

We will verify the person's authority before taking action.

File a complaint

You may file a complaint with Iyali Mental Wellness if you believe your privacy rights have been violated.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not retaliate against you for filing a complaint.

YOUR CHOICES

For certain health information, you may tell us your preferences about what we share.

You may request that we:

• Share information with family members, friends, or others involved in your care when appropriate;

• Contact you in a particular manner or at a particular location; or

• Limit certain disclosures when permitted by law.

When the law requires your written authorization for a particular use or disclosure, we will obtain that authorization.

You may revoke an authorization in writing at any time to the extent permitted by law, except to the extent we have already relied on the authorization.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

The following are examples of permitted uses and disclosures of protected health information.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare.

For example, we may use your health information to provide mental-health services, coordinate care with other healthcare professionals involved in your treatment, or make referrals when appropriate.

Payment

We may use and disclose your health information to obtain payment for services.

For example, we may provide information to a health plan or other payer when necessary to obtain payment for healthcare services.

Healthcare Operations

We may use and disclose health information for healthcare operations.

Healthcare operations may include activities such as quality assessment, administrative activities, compliance activities, credentialing, auditing, and other activities permitted by law.

Individuals Involved in Your Care

We may disclose health information to a family member, close personal friend, or other person you identify who is involved in your care or payment for your care, when permitted by law and when appropriate.

You may object to certain disclosures.

Required by Law

We may use or disclose your health information when required by federal, state, or local law.

Public Health

We may disclose health information for public-health activities as permitted or required by law.

Abuse, Neglect, or Domestic Violence

We may disclose health information to appropriate authorities when required or permitted by law to report suspected abuse, neglect, or domestic violence.

Health Oversight

We may disclose health information to governmental agencies for activities authorized by law, such as audits, investigations, inspections, licensure activities, and other oversight activities.

Judicial and Administrative Proceedings

We may disclose health information in response to a court or administrative order or other lawful process when permitted or required by law.

Law Enforcement

We may disclose health information to law-enforcement officials when permitted or required by applicable law.

Serious Threats to Health or Safety

We may use or disclose health information when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.

Workers' Compensation

We may disclose health information as authorized by laws relating to workers' compensation and similar programs.

Business Associates

We may disclose health information to companies and individuals that provide services to Iyali Mental Wellness when those disclosures are permitted by law and the service provider is required to appropriately safeguard the information.

Examples may include technology, billing, administrative, communication, scheduling, electronic medical record, or telehealth service providers.

OTHER USES AND DISCLOSURES

Certain uses and disclosures of protected health information require your written authorization.

Examples may include:

• Most uses and disclosures of psychotherapy notes, where applicable;

• Uses and disclosures for marketing purposes when authorization is required; and

• Disclosures that constitute a sale of protected health information when authorization is required.

Other uses and disclosures not described in this notice will be made only with your written authorization when required by law.

You may revoke an authorization in writing as permitted by law.

COMMUNICATION METHODS

Iyali Mental Wellness uses several communication methods to provide and coordinate services.

OptiMantra

Iyali Mental Wellness uses OptiMantra for patient portal functions and telehealth services.

Patients should use the patient portal when instructed by the practice for communications or information relating to their care.

Spruce

Iyali Mental Wellness may provide patients with access to Spruce for secure messaging.

Patients are encouraged to use Spruce secure messaging for sensitive communications with the practice rather than ordinary text messaging.

Email

Iyali Mental Wellness uses Proton Mail for business email.

Iyali Mental Wellness maintains a Business Associate Agreement with Proton for applicable services.

Email may be used for appropriate communications with patients and prospective patients. However, patients should use the secure patient portal or secure messaging system provided by the practice when communicating sensitive healthcare information whenever appropriate.

Ordinary Text Messages

Patients sometimes send text messages to the practice's office telephone number.

Ordinary text messaging should not be used to send sensitive medical or mental-health information.

Please use Spruce secure messaging or the OptiMantra patient portal for sensitive healthcare communications.

TELEHEALTH

Iyali Mental Wellness provides telehealth services through OptiMantra.

Health information created or obtained during a telehealth encounter is protected in the same manner as other protected health information, subject to applicable federal and state law.

Arizona law provides confidentiality protections for medical records and information and recognizes confidentiality protections in telehealth encounters.
Patients should participate in telehealth appointments from a private location when reasonably possible and should take reasonable steps to prevent others from overhearing or viewing confidential communications.

MENTAL-HEALTH INFORMATION

Mental-health information may receive special protections under applicable federal and state law.

Iyali Mental Wellness will maintain the confidentiality of patient information and records and will disclose information only as permitted or required by applicable law.

Arizona law provides specific confidentiality protections for health and mental-health records.

OUR RESPONSIBILITIES

Iyali Mental Wellness is required by law to:

• Maintain the privacy and security of protected health information;

• Provide you with this notice describing our legal duties and privacy practices;

• Follow the privacy practices described in the current notice;

• Notify you if a breach occurs that compromises the privacy or security of your protected health information when notification is required by law; and

• Not use or disclose your health information other than as described in this notice or otherwise permitted or required by law, unless you provide written authorization.

Iyali Mental Wellness reserves the right to change this notice and make the revised notice applicable to all protected health information we maintain.

If the notice is materially changed, the revised notice will be made available as required by law.

QUESTIONS OR PRIVACY COMPLAINTS

If you have questions about this notice or believe your privacy rights have been violated, please contact:

Iyali Mental Wellness
1255 W. Baseline Rd., Suite B-139
Mesa, AZ 85202
Phone: 623-294-9495
Email: info@iyalimentalwellness.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: https://www.hhs.gov/ocr/complaints/index.html

You will not be retaliated against for filing a complaint.

EFFECTIVE DATE

This Notice of Privacy Practices is effective September 12, 2026.

A current copy of this notice will be made available on the Iyali Mental Wellness website and upon request.