Now and Beyond Counseling, LLC

Your Information. Your Rights. Our Responsibilities.

Effective Date: 10/23/2026

Privacy Officer: Nicole Brownback

Office Location: Oxford, Pennsylvania

Phone: (484) 746-9086

Email: contact@nowandbeyondcounseling.org

Website: www.nowandbeyondcounseling.org

Our Commitment to Your Privacy

At Now and Beyond Counseling, LLC, we understand that your mental health information is personal and sensitive. Protecting your privacy and maintaining the confidentiality of your information are essential parts of the care we provide.

This Notice of Privacy Practices explains how your protected health information (PHI) may be used and disclosed, how you can access your information, and the rights you have under the Health Insurance Portability and Accountability Act (HIPAA) and applicable Pennsylvania laws.

Protected health information includes information that identifies you and relates to your physical or mental health, healthcare services, treatment, or payment for healthcare.

This notice applies to the services provided by Now and Beyond Counseling, LLC, including:

• In-person mental health counseling at our Oxford, Pennsylvania office.

• Virtual mental health counseling provided to eligible clients in Pennsylvania.

• Related scheduling, patient intake, billing, and administrative services.

Please review this notice carefully.

1. Your Rights Regarding Your Health Information

As a patient, you have specific rights regarding your protected health information.

Access Your Medical Records

You have the right to request an electronic or paper copy of your medical records and other health information maintained by our practice.

We will generally provide a copy or summary of your information within 30 days of your request, subject to legally permitted extensions and exceptions.

We may charge a reasonable, cost-based fee when permitted by law.

Certain information, including separately maintained psychotherapy notes, may be excluded from the HIPAA right of access.

Request Corrections to Your Records

If you believe information in your medical record is incorrect or incomplete, you may ask us to amend it.

We will review your request and generally respond within 60 days, subject to legally permitted extensions.

If we deny your request, we will provide a written explanation and inform you of your applicable rights.

Request Confidential Communications

You have the right to request that we communicate with you in a specific way or at a particular location.

For example, you may ask us to contact you through a designated telephone number or mailing address.

We will accommodate reasonable requests.

Request Restrictions on Information Sharing

You may request that we limit how your health information is used or disclosed for treatment, payment, or healthcare operations.

We are not required to agree to every request. However, we will consider your preferences and comply with applicable laws.

If you pay for a healthcare service entirely out of pocket, you may request that information about that service not be shared with your health insurance plan for payment or healthcare operations.

We will honor qualifying requests unless disclosure is required by law.

Request an Accounting of Disclosures

You may request a list of certain disclosures of your protected health information made during the six years preceding your request.

Some disclosures, including many made for treatment, payment, and healthcare operations, are excluded from this accounting.

One accounting is generally available free of charge during a 12-month period. Additional requests may be subject to a reasonable, cost-based fee.

Receive a Copy of This Notice

You have the right to receive a paper or electronic copy of this Notice of Privacy Practices at any time.

A copy is available on our website and upon request through our office.

Choose Someone to Act on Your Behalf

If you have legally authorized another person to make healthcare decisions on your behalf, that person may exercise certain rights concerning your health information.

This may include a legal guardian, an individual with appropriate medical power of attorney, or another authorized personal representative.

We will verify the individual’s authority before providing access to protected information.

Additional confidentiality protections may apply to minors and their treatment records.

File a Privacy Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with Now and Beyond Counseling or the U.S. Department of Health and Human Services.

We will not retaliate against you for filing a complaint or exercising your privacy rights.

Contact information for submitting a complaint is provided at the end of this notice.

2. Your Choices About Sharing Information

You have choices regarding certain uses and disclosures of your protected health information.

When permitted by applicable law, you may tell us whether we can:

• Share relevant information with family members, close friends, or others involved in your care or payment for your care.

• Share information during disaster relief situations.

• Communicate with designated individuals about your treatment.

If you are unable to communicate your preferences, we may share limited information when legally permitted and reasonably necessary for your care or safety.

Uses That Require Written Authorization

Your written authorization is generally required for:

• Marketing uses or disclosures when authorization is required by HIPAA.

• The sale of protected health information.

• Most uses or disclosures of separately maintained psychotherapy notes.

• Other uses or disclosures not otherwise permitted or required by law.

You may revoke a written authorization at any time by submitting a written request, except to the extent that we have already acted in reliance on that authorization.

Fundraising Communications

If our practice conducts fundraising activities using information permitted by law, you will have the right to opt out of receiving those communications.

Additional protections apply to fundraising communications involving substance use disorder records protected under 42 CFR Part 2.

3. How We Use and Disclose Your Health Information

We may use and disclose protected health information for treatment, payment, healthcare operations, and certain other purposes permitted or required by law.

Treatment

We may use and disclose your information to provide, coordinate, or manage your mental health treatment.

For example, when permitted by applicable confidentiality laws, your therapist may coordinate with another healthcare provider involved in your care.

Payment

We may use and disclose information necessary to bill for and receive payment for services.

This may include:

• Verifying insurance eligibility and benefits.

• Submitting insurance claims.

• Processing payments.

• Maintaining billing records.

• Responding to authorized insurance-related requests.

For example, we may provide necessary information to your health insurance company to process payment for counseling services.

Healthcare Operations

We may use and disclose information necessary for the operation of our counseling practice.

Examples include:

• Scheduling appointments.

• Maintaining patient records.

• Managing treatment services.

• Conducting administrative and quality improvement activities.

• Meeting legal and professional obligations.

• Working with authorized service providers.

Third-party service providers that handle protected health information on our behalf must comply with applicable HIPAA requirements, including Business Associate Agreements when required.

4. Other Permitted or Required Uses and Disclosures

Certain circumstances may permit or require the use or disclosure of protected health information without your written authorization.

All disclosures remain subject to applicable federal and Pennsylvania confidentiality requirements.

Public Health and Safety

We may disclose information when permitted or required by law for purposes such as:

• Reporting suspected abuse or neglect.

• Addressing certain public health concerns.

• Preventing or reducing a serious and imminent threat to health or safety.

• Complying with applicable mandatory reporting requirements.

Compliance With the Law

We may disclose health information when required by applicable federal or Pennsylvania law.

This may include disclosures to government agencies authorized to investigate compliance with healthcare privacy laws.

Health Oversight Activities

We may provide information to legally authorized agencies conducting audits, inspections, investigations, or compliance reviews.

Workers’ Compensation

We may disclose information when permitted or required under applicable workers’ compensation laws.

Research

We may use or disclose information for authorized research activities when applicable privacy protections and legal requirements are satisfied.

Legal Proceedings and Law Enforcement

Under certain circumstances, information may be disclosed in response to valid legal processes, including court orders, subpoenas, or other legally authorized requests.

Mental health treatment records and privileged communications may be subject to additional confidentiality protections that restrict these disclosures.

We will comply with applicable federal and Pennsylvania laws before releasing information.

Other Legally Permitted Purposes

Certain disclosures may also be permitted for organ and tissue donation, medical examiners, coroners, funeral directors, and other purposes specifically authorized by law.

5. Additional Privacy Protections for Mental Health Records

Because Now and Beyond Counseling provides mental health services, certain patient records and communications may receive additional legal protections.

Confidentiality of Mental Health Treatment

Mental health treatment records and communications may be protected by Pennsylvania confidentiality laws in addition to HIPAA.

We will follow applicable state and federal laws that provide greater protection for patient privacy.

When additional protections apply, we will not disclose mental health treatment records or privileged communications without written authorization unless an applicable law permits or requires the disclosure.

Psychotherapy Notes

Psychotherapy notes that meet HIPAA’s legal definition and are maintained separately from the general medical record receive additional privacy protections.

In most circumstances, written authorization is required before these notes may be used or disclosed.

Limited legal exceptions may apply.

Psychotherapy notes are different from ordinary treatment records, progress notes, diagnoses, treatment plans, and billing information.

Substance Use Disorder Treatment Records

Now and Beyond Counseling does not operate as a specialized substance use disorder treatment program.

However, we may receive health information from other healthcare providers that is protected under federal substance use disorder confidentiality regulations, commonly referred to as 42 CFR Part 2.

To the extent that we create, receive, or maintain records protected by Part 2, we will handle those records in accordance with applicable federal requirements.

Protected Part 2 records generally cannot be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against a patient without the patient’s written consent or an appropriate court order accompanied by the legally required process.

When permitted by Part 2 and supported by the required patient consent, certain records may be used or disclosed for treatment, payment, and healthcare operations.

If fundraising communications involve protected Part 2 records, patients will receive the required advance notice and opportunity to opt out.

6. In-Person Counseling and Telehealth Services

Now and Beyond Counseling provides mental health counseling both in person and virtually.

In-Person Counseling

In-person counseling appointments are available at our office in Oxford, Pennsylvania.

Patient records, treatment information, and communications associated with office visits are subject to applicable privacy and confidentiality requirements.

Virtual Counseling

Virtual counseling services are available to eligible individuals located in Pennsylvania.

We use designated communication systems for telehealth services and take appropriate steps to protect patient information.

Appointment Scheduling and Patient Intake

Appointment scheduling and patient intake are handled through a separate booking platform.

That platform may collect information necessary to schedule appointments, complete intake documentation, manage patient records, or coordinate services.

Protected health information processed through these services is subject to applicable privacy and security requirements.

Patients may receive additional information concerning privacy practices as part of their intake documentation.

Electronic Communications

We encourage patients to use designated patient communication methods when sharing sensitive personal or medical information.

Standard email and text messaging may not provide the same security protections as designated secure patient communication systems.

For information about securely submitting medical records or confidential information, please contact our office.

7. Our Responsibilities to Protect Your Information

Now and Beyond Counseling is committed to protecting the confidentiality and security of your health information.

Under applicable law, we are required to:

• Maintain the privacy and security of protected health information.

• Follow the terms of our current Notice of Privacy Practices.

• Implement appropriate administrative, physical, and technical safeguards.

• Limit uses and disclosures of protected health information as required by law.

• Provide patients with access to their privacy rights.

• Notify affected individuals when a reportable breach of unsecured protected health information occurs.

• Make this notice available to patients and other individuals who request it.

We will not use or disclose your protected health information for purposes outside those described in this notice unless otherwise permitted or required by law or authorized by you in writing.

8. Changes to This Notice

Now and Beyond Counseling reserves the right to revise this Notice of Privacy Practices as permitted by law.

Any updated notice may apply to health information already maintained by our practice as well as information received in the future.

The most current version will be available:

• On our website at www.nowandbeyondcounseling.org.

• At our Oxford, Pennsylvania office.

• Upon request through our practice.

The effective date displayed at the beginning of this notice identifies the version currently in effect.

9. Questions, Privacy Requests, and Complaints

If you have questions about this notice, would like to exercise your privacy rights, or believe your information has been handled improperly, please contact our designated Privacy Officer.

Now and Beyond Counseling, LLC

Privacy Officer: Nicole Brownback

Office Location: Oxford, Pennsylvania

Phone: (484) 746-9086

Email: contact@nowandbeyondcounseling.org

Website: www.nowandbeyondcounseling.org

Please avoid including sensitive medical or mental health information in unsecured email communications. Contact our practice to arrange an appropriate method for submitting confidential information.

Filing a Complaint With the U.S. Department of Health and Human Services

You may also submit a privacy complaint to:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201

Phone: 1-877-696-6775

Website: https://www.hhs.gov/hipaa/filing-a-complaint/

Now and Beyond Counseling will not retaliate against any individual for filing a privacy complaint or exercising rights under HIPAA.

Now and Beyond Counseling, LLC

Compassionate Mental Health Counseling in Oxford, Pennsylvania, and Virtual Counseling Services Throughout Pennsylvania.

Effective Date: 10/23/2026