Protected Health Information (PHI) Policy

Purpose of this policy

This policy explains how Klarity Clinic (“Klarity,” “we,” “our,” “us”) safeguards protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and related regulations. It supplements our Notice of Privacy Practices and applies to every Klarity workforce member, contractor, and partner with access to PHI.

How we protect PHI

• • Role-based access controls that restrict PHI to authorized personnel.
• • Encryption of PHI at rest and in transit across our clinical platforms.
• • HIPAA-compliant electronic medical record and secure messaging systems.
• • Business associate agreements with vendors who process or store PHI on our behalf.
• • Workforce HIPAA training, confidentiality agreements, and sanctions for violations.
• • Physical safeguards at every Klarity facility, including secure storage and visitor protocols.

Permitted uses and disclosures

Klarity may use and disclose PHI for treatment, payment, and healthcare operations without additional authorization as permitted by HIPAA. Other uses—such as marketing, research, or releasing psychotherapy notes—require your written authorization. You may revoke any authorization in writing at any time.

We may also disclose PHI without your authorization when required by law (for example, reporting abuse, responding to subpoenas, or addressing public health concerns) consistent with HIPAA allowances.

Your HIPAA rights

• • Request, inspect, or obtain a copy of your medical record.
• • Ask us to amend PHI you believe is inaccurate or incomplete.
• • Receive an accounting of certain disclosures we have made.
• • Request confidential communications at alternate addresses or numbers.
• • Request restrictions on specific uses or disclosures (we will honor requests when required by law and whenever operationally feasible).
• • Receive notice if a breach compromises the privacy or security of your PHI.

To exercise any right, contact the Klarity Privacy Officer using the information below. We respond within 30 days or notify you if additional time is required.

Questions & complaints

Klarity takes patient privacy seriously. If you believe your privacy rights have been violated, or if you have questions about this policy, contact:

• • Privacy Officer: [email protected]
• • Phone: 844-552-7489
• • Mail: Klarity Clinic, Attn: Privacy Officer, 5145 S Durango Dr STE 103, Las Vegas, NV 89113

You may also submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights. Klarity will not retaliate against you for filing a complaint.

Effective date

This PHI Policy is effective as of November 6, 2025. We will update this page whenever our privacy practices change in material ways.