Notice of Privacy Practices — Women's Health and Integrative Psychiatry

Effective date: November 20, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.

Who this notice covers

This notice describes the privacy practices of Women's Health and Integrative Psychiatry ("the Practice," "we," "us"), the medical practice of Erin Griffiths, D.O. It applies to all health information we create or receive about you, including information from telehealth visits.

Your health information is personal, and we are committed to protecting it. Mental health information receives special protection under federal and California law. Where California law is stricter than federal law, we follow California law.

If you have questions about this notice, contact our Privacy Officer:

Erin Griffiths, D.O. Dr. Erin Griffiths, 3680 Wilshire Blvd Ste 404-1717 Los Angeles, CA 90010 747-877-5788 dreringriffiths@womenshealthpsychiatry.com

How we may use and disclose your health information

We may use and share your health information for the following purposes without your written authorization.

Treatment. We use your information to provide and coordinate your care. For example, we may share relevant information with your primary care clinician, gynecologist, therapist, pharmacy, or laboratory.

Payment. We use your information to bill and collect payment for services. For example, we may give you a statement ("superbill") that you can submit to your insurer for reimbursement, or share information with your insurer if you ask us to.

Health care operations. We use your information to run the Practice and improve care. Examples include quality review, scheduling, record keeping, and legal or accounting services.

Business associates. We work with vendors who help us operate, such as our electronic health record, telehealth platform, and billing services. These vendors must sign agreements requiring them to protect your information.

Appointment reminders and health information. We may contact you with appointment reminders, or with information about treatment options and health-related services that may interest you.

Other uses and disclosures permitted or required by law

In limited situations, the law permits or requires us to share your information without your authorization. We share only the minimum necessary.

• When required by law. We disclose information when federal, state, or local law requires it.

• Abuse or neglect. We must report suspected child abuse or neglect, and suspected abuse or neglect of an elder or dependent adult.

• Serious threat to health or safety. We may disclose information to prevent a serious and imminent threat to you or another person. This includes warning an identifiable person, and notifying law enforcement, of a serious threat of physical violence.

• Public health activities. We may disclose information to public health authorities, for example to report certain diseases or adverse medication events to the FDA.

• Health oversight. We may disclose information to agencies that oversee health care, such as the Medical Board of California, for audits, investigations, and licensure.

• Judicial and administrative proceedings. We may disclose information in response to a court order, or to a subpoena that meets legal requirements. California law gives communications with your psychiatrist additional protection in legal proceedings.

• Law enforcement. We may disclose limited information as the law permits, for example in response to a valid warrant or court order.

• Coroners and medical examiners. We may disclose information needed to identify a deceased person or determine a cause of death.

• Specialized government functions. We may disclose information for national security or protective services as authorized by law.

• Workers' compensation. We may disclose information as needed to comply with workers' compensation laws.

• Research. We may use or disclose information for research only with your authorization, or under a waiver approved by a review board.

Family and others involved in your care. We may share information with a family member, friend, or other person you identify, if you agree or do not object when given the chance. In an emergency, or if you cannot make decisions, we will use our professional judgment about what is in your best interest.

Information with special protections

Some kinds of health information have stronger protections than those described above.

Psychotherapy notes. These are notes your clinician keeps separately from your medical record to document or analyze a counseling session. We will not use or disclose them without your written authorization, except as the law specifically allows, such as for your treatment by the clinician who wrote them or to defend ourselves in a legal action you bring.

Substance use disorder treatment records. We may receive records about you from a substance use disorder treatment program covered by federal law (42 CFR Part 2). We will not use or disclose those records, or testimony about their content, in any civil, criminal, administrative, or legislative proceeding against you unless you give written consent or a court orders it after you have received notice and an opportunity to be heard. A court order must be accompanied by a subpoena or similar legal requirement before the records are used or disclosed. If you consent to our using these records for treatment, payment, and health care operations, we may use and share them for those purposes as this notice describes.

Reproductive and gender-affirming care. California law limits sharing of medical information about abortion, contraception, and gender-affirming care. We will not release this information in response to an out-of-state subpoena, request, or investigation that seeks to enforce another state's laws against care that is lawful in California.

HIV test results and genetic information. California law generally requires your specific written authorization before we disclose HIV test results or genetic test results, with narrow exceptions.

Uses and disclosures that require your written authorization

We will ask for your written authorization before using or sharing your information for any purpose this notice does not describe. This includes:

• Most uses and disclosures of psychotherapy notes

• Marketing, meaning communications that encourage you to buy a product or service, where we are paid by a third party to make them

• Sale of your health information. We do not sell health information.

You may revoke an authorization at any time by writing to our Privacy Officer. A revocation does not affect actions we took before we received it.

Redisclosure. Information we disclose under this notice or your authorization may be redisclosed by the person who receives it. If that person is not required to follow federal privacy law, the information may no longer be protected by it.

Your rights

You have the following rights regarding your health information. To exercise any of them, send a written request to our Privacy Officer.

-See and get a copy of your record. You may inspect your record or receive a paper or electronic copy. We will respond within the time California law requires, generally 5 working days to inspect and 15 days for copies. We may charge a reasonable, cost-based fee. In limited circumstances we may deny access to mental health records; if we do, we will explain why and how you can have the decision reviewed.

-Ask us to correct your record. You may ask us to amend information you believe is incorrect or incomplete. If we deny the request, we will tell you why in writing within 60 days. You may also add a written statement of up to 250 words to your record about anything you believe is incomplete or incorrect.

-Request confidential communications. You may ask us to contact you in a specific way or at a specific location, such as a particular phone number or email address. We will accommodate reasonable requests.

-Ask us to limit what we use or share. You may ask us to restrict how we use or share your information for treatment, payment, or operations. We are not required to agree. However, if you pay for a service in full out of pocket, you may ask us not to share information about that service with your health insurer, and we will agree unless a law requires the disclosure.

-Get a list of disclosures. You may request an accounting of certain disclosures we made in the six years before your request. It does not include disclosures for treatment, payment, operations, or those you authorized. One accounting per 12 months is free.

-Get a copy of this notice. You may ask for a paper copy at any time, even if you agreed to receive it electronically.

-Choose someone to act for you. A person with your medical power of attorney, or your legal guardian, may exercise your rights. We will confirm their authority before acting.

-Be notified of a breach. We will notify you promptly if a breach compromises the privacy or security of your information.

Our responsibilities

• We are required by law to maintain the privacy and security of your health information.

• We must give you this notice of our legal duties and privacy practices.

• We must follow the terms of the notice currently in effect.

• We will not use or share your information other than as described here unless you tell us in writing that we may.

Changes to this notice

We may change this notice, and the changes will apply to all information we hold about you. The current notice is always posted on our website at [website URL] and is available on request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer using the contact information above. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

• Online: www.hhs.gov/hipaa/filing-a-complaint

• Mail: 200 Independence Avenue SW, Washington, DC 20201

• Phone: 1-877-696-6775

We will not retaliate against you for filing a complaint.