Notice of Privacy Practices
Last Updated: June 25, 2026
This Notice of Privacy Practices (the “Notice”) describes how Haven Health of California, P.C. (“Haven Health,” “we,” or “our”) may use and disclose your protected health information to carry out treatment, payment, or health care operations, and for other purposes that are permitted or required by law. It also describes your rights to access and control your protected health information. Please review this Notice carefully.
“Protected health information” or “PHI” is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health condition, treatment, or payment for health care services.
This Notice applies to all PHI created or maintained by Haven Health. We reserve the right to revise this Notice at any time. Any revision will be effective for all of your records that we have created or maintained in the past and for any records we may create or maintain in the future. The most current version of this Notice will be available on our website and upon request.
USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION
Your protected health information may be used and disclosed by our health care providers, our staff, and others outside of our office who are involved in your care and treatment for the purpose of providing health care services to you, to support our business operations, to obtain payment for your care, and for any other use authorized or required by law.
Treatment. We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. For example, we may share your PHI with other health care providers, specialists, or facilities to whom you have been referred to ensure they have the information necessary to diagnose or treat you.
Payment. We may use and disclose your PHI to bill for services provided and to collect payment from you directly, or, as applicable, from health plans or other entities responsible for payment of your care.
Health Care Operations. We may use and disclose your PHI for our health care operations, including quality assessment and improvement activities, training of health care professionals, business management, and administrative activities. For example, we may use your PHI to contact you to remind you of an appointment or to inform you about treatment alternatives or other health-related benefits and services that may be of interest to you.
Disclosures to Family or Friends. We may disclose your PHI to individuals involved in your care or payment for your care, such as a family member, relative, or close friend, unless you direct us otherwise. If you are unable to make a decision about a disclosure in an emergency, we will use our best judgment to act in your best interest.
Disclosures Required by Law. We will use and disclose your PHI when required to do so by federal, state, or local law, including to a public health authority authorized to receive reports of child abuse or neglect, and to governmental agencies authorized to receive reports of abuse, neglect, or domestic violence.
Substance Use Disorder Records. If we receive or maintain records about you from a substance use disorder treatment program covered by 42 CFR Part 2 (a “Part 2 Program”), through a general consent you provided to that Part 2 Program for treatment, payment, and/or health care operations purposes, we may use and disclose your records for those same purposes as described in this Notice. If we receive or maintain your Part 2 Program record through specific consent you provide to us or another third party, we will use and disclose your Part 2 Program record only as expressly permitted by you in your consent. In no event will we use or disclose your Part 2 Program records in any civil, criminal, administrative, or legislative proceeding against you, unless (1) you provide written consent, or (2) a court issues an order authorizing such disclosure after providing you notice of the order.
Please be aware that after we share your information in a manner permitted by this Notice, the recipient may redisclose that information. Once PHI is shared with entities not bound by HIPAA, such as law enforcement or other third parties, those entities may redisclose the information, and it may lose its HIPAA protections.
USES AND DISCLOSURES IN SPECIAL CIRCUMSTANCES
Public Health Reporting. We may disclose your PHI to public health authorities for purposes authorized by law, including preventing or controlling disease, injury, or disability, and reporting to the FDA regarding products or services under FDA jurisdiction.
Health Oversight Activities. We may disclose your PHI to a health oversight agency for investigations, audits, inspections, surveys, licensure and disciplinary actions, and civil, administrative, or criminal proceedings authorized by law.
Lawsuits and Disputes. We may disclose your PHI in response to a court or administrative order, subpoena, request for discovery, or other lawful legal process. Absent a court order, we will generally disclose your PHI only if you have authorized the disclosure or efforts have been made to inform you of the request or to obtain a protective order.
Law Enforcement. We may disclose your PHI to law enforcement officials in limited circumstances as required or permitted by law, including in response to a valid warrant, subpoena, or court order; to report a crime or suspected criminal conduct; or to assist in locating a missing person or identifying a suspect.
Deceased Patients. We may disclose your PHI to a medical examiner or coroner to identify a deceased individual or determine the cause of death, and to funeral directors to the extent necessary to fulfill their responsibilities.
Research. We may use or disclose your PHI for research purposes with your written authorization, or when the research has been reviewed and approved by an Institutional Review Board or Privacy Board in compliance with applicable law.
Serious Threats to Health or Safety. We may use and disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety, or the health or safety of another person or the public. In such cases, we will only make disclosures to a person or organization able to help prevent the threat.
ADDITIONAL CALIFORNIA PRIVACY PROTECTIONS
California law provides additional privacy protections for certain categories of health information beyond those required by federal law. We comply with the California Confidentiality of Medical Information Act (CMIA) and all other applicable California privacy laws. In particular:
Mental Health Records. Your mental health records receive additional protections under California law and will not be disclosed without your written authorization except as specifically required or permitted by law.
HIV/AIDS Information. Your HIV/AIDS test results and related information will not be disclosed without your specific written authorization except as permitted by California Health and Safety Code.
Reproductive Health Information. We will not use or disclose PHI related to reproductive health care for purposes of investigating or imposing liability on any person for seeking, obtaining, providing, or facilitating lawful reproductive health care.
YOUR RIGHTS
You have the following rights with respect to your PHI:
Right to Access and Copies. You have the right to inspect and obtain a copy of your PHI that we use to make decisions about your care, including health and billing records. You may request a paper or electronic copy. We will provide your records, or an explanation if we are unable to fulfill the request, generally within 30 days. We may charge a reasonable, cost-based fee for copying, mailing, and associated supplies.
Right to Amend. You have the right to request a correction or amendment to your PHI if you believe it is inaccurate or incomplete. Your request must be in writing and include the reason for the amendment. We may deny your request if the information is accurate and complete, was not created by us, or is not part of the PHI we maintain. We will notify you of our decision within 60 days.
Right to an Accounting of Disclosures. You have the right to receive a written accounting of certain disclosures of your PHI that we have made, other than disclosures for treatment, payment, and health care operations and certain other disclosures. Your request must be in writing and specify a time period of no more than six (6) years prior to the date of the request. We will provide one accounting per year at no charge; additional requests within 12 months may be subject to a reasonable, cost-based fee.
Right to Request Restrictions. You have the right to request that we limit how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request unless you request that we not share information about a health care item or service for which you paid out-of-pocket in full, in which case we will honor your request unless required by law to share that information.
Right to Confidential Communications. You have the right to request that we communicate with you in a specific way or at a specific location. For example, you may ask us to contact you by email or at your home address rather than your work address. We will accommodate all reasonable requests.
Right to a Paper Copy of This Notice. You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
Right to Receive Notice of a Breach. You have the right to receive prompt written notice if a breach of your unsecured PHI occurs. Notification will be made no later than 60 days from the date we discover the breach and will include a description of what occurred, the type of PHI involved, steps you should take to protect yourself, what we are doing to investigate and mitigate harm, and contact information for you to ask questions.
OUR DUTIES
We are required by law to:
- Maintain the privacy of your PHI;
- Provide you with this Notice describing our legal duties and privacy practices;
- Follow the terms of the Notice currently in effect; and
- Notify you in the event of a breach of your unsecured PHI.
We must follow the duties and privacy practices described in this Notice.
COMPLAINTS
If you believe your privacy rights have been violated or are concerned about how your PHI has been handled, you may file a complaint with our HIPAA Privacy Officer at:
Haven Health of California, P.C.
Attn: Michael Piscadlo
6221 Wilshire Blvd. Suite 216
Los Angeles, CA 90048
213-415-2214
help@havenhealth.care
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/
We will not retaliate against you for filing a complaint.
CONTACT US
If you have any questions about this Notice or our privacy practices, please contact us at:
Haven Health of California, P.C.
Attn: Michael Piscadlo
6221 Wilshire Blvd. Suite 216
Los Angeles, CA 90048
213-415-2214
REVISIONS TO THIS NOTICE
We reserve the right to revise this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. You are entitled to a copy of the Notice currently in effect. Any significant changes to this Notice will be posted on our website. You then have the right to object or withdraw as provided in this Notice.
