INTEGRATIVE HEALTHCARE ALLIANCE

Privacy Policy and Notice of Privacy Practices

Original Effective Date: January 1, 2025

Last Revised: March 17, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED

AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

IIMPORTANT NOTICE TO ALL PATIENTS AND WEBSITE VISITORS

This document serves two purposes: (1) it is our HIPAA Notice of Privacy Practices, which

federal law requires us to provide to all patients, and (2) it is our general website Privacy Policy

describing how we handle information collected through our website at

integrativehealthcarealliance.com. Please read this document carefully. If you have questions,

contact our Privacy Officer using the information in Section 8.

1. About Integrative Healthcare Alliance

Integrative Healthcare Alliance ("IHA," "we," "us," or "our") is a telehealth psychiatric practice

founded by Paris O'Bike, PMHNP-BC, and serving clients in California. IHA is a HIPAA covered

entity subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its

implementing regulations, including the Privacy Rule (45 C.F.R. Parts 160 and 164).

Practice locations:

• 3028 East Coast Highway, Corona Del Mar, CA

• 9431 Haven Ave, Suite 101, Rancho Cucamonga, CA

• Telehealth services available throughout California

Contact information:

• Phone: (213) 267-7162

• Email: hello@integrativehealthcarealliance.com

• Website: integrativehealthcarealliance.com

IHA is committed to protecting your protected health information (PHI). Under HIPAA, we are

required to: maintain the privacy and security of your health information; provide you with this

Notice of our legal duties and privacy practices; follow the terms of this Notice; and notify you if

a breach occurs that may compromise your information.

2.1 What Is Protected Health Information (PHI)?

PHI is individually identifiable health information that relates to your past, present, or future

physical or mental health condition, the provision of healthcare to you, or payment for that care.

This includes information in your medical records, billing records, and any information we

receive in connection with your treatment.

2.2 How We May Use and Disclose Your PHI

We may use and disclose your PHI for the following purposes without your written authorization:

Treatment

We may use and share your PHI to provide, coordinate, or manage your healthcare and related

services. For example, we may share information with other providers involved in your care,

such as your primary care physician, therapist, or specialists, as part of our collaborative care

model.

Payment

We may use and disclose your PHI to bill and receive payment from you, your insurance

company, or other third-party payers for services rendered. Accepted carriers include Aetna,

Anthem, Cigna/Evernorth, Oscar Health, Oxford, and UnitedHealthcare/UBH. Self-pay options

are also available.

Healthcare Operations

We may use and disclose your PHI for administrative, quality improvement, training,

compliance, credentialing, and other operational purposes necessary to run our practice.

Other Permitted Disclosures

We may disclose your health information without your written authorization when required or

permitted by law, including for:

• Public health and safety purposes

• Legal proceedings (such as court orders or subpoenas)

• Health oversight activities (such as audits or licensing reviews)

• Workers' compensation

• Situations involving serious threats to health or safety

• Law enforcement purposes, as permitted by law

• Coroners, medical examiners, and funeral directors

• Appointment reminders and care-related communications

California law imposes additional mandatory reporting obligations that may require us to

disclose certain information to public health authorities, child protective services, or other

agencies as required by statute.

2.3 Uses and Disclosures Requiring Your Written Authorization

Certain uses and disclosures of your PHI require your written authorization, including:

• Most uses and disclosures of psychotherapy notes

• Uses and disclosures for marketing purposes

• Sale of your PHI

• Uses and disclosures for purposes not described in this Notice

You may revoke your authorization at any time in writing, except to the extent that we have

already taken action in reliance on it. To provide or revoke authorization, contact our Privacy

Officer using the information in Section 8.

2.4 Additional Protections for Mental Health Information

As a psychiatric practice, we handle highly sensitive mental health records. California law,

including the Confidentiality of Medical Information Act (CMIA) and the Lanterman-Petris-Short

Act (LPS Act), may provide additional protections beyond HIPAA for certain mental health

records, psychotherapy notes, and information related to substance use treatment. We apply

the most protective standard applicable.

Information related to substance use disorder treatment may also be protected under 42 C.F.R.

Part 2, which imposes stricter disclosure limitations than standard HIPAA requirements.

3. Your Rights Regarding Your PHI

You have the following rights with respect to your Protected Health Information. To exercise any

of these rights, submit a written request to our Privacy Officer using the contact information in

Section 8.

3.1 Right to Access and Receive a Copy of Your PHI

You have the right to request access to and copies of your health records and other PHI that we

use to make decisions about your care. We will respond within 30 days (or as required by

California law). We may charge a reasonable, cost-based fee for copies.

3.2 Right to Request Corrections or Amendments

If you believe PHI we hold about you is incorrect or incomplete, you may request that we amend

it. We will respond within 60 days. We may deny your request if the information was not created

by us, is not part of our records, or if we determine the information is accurate and complete. If

we deny your request, you have the right to submit a written statement of disagreement.

You may request that we restrict certain uses or disclosures of your PHI. For example, you may

request that we not share information with a particular family member or that we not share

certain information for payment purposes. We are not required to agree to your requested

restriction unless the disclosure is to a health plan for payment or healthcare operations and the

PHI pertains solely to services for which you paid out of pocket in full.

3.4 Right to an Accounting of Certain Disclosures

You have the right to request a list of disclosures we have made of your PHI during the six

years prior to your request, other than disclosures for treatment, payment, healthcare

operations, or disclosures you have authorized. We will respond within 60 days.

3.5 Right to Request Confidential Communications

You may request that we communicate with you in a specific way or at a specific location. For

example, you may request that we use a different phone number or email address. We will

accommodate reasonable requests. Because IHA is a telehealth-only practice, we may ask you

to specify your preferred method of secure electronic communication.

3.6 Right to Receive a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you agreed to

receive it electronically. Contact our Privacy Officer to request a copy.

3.7 Right to Be Notified of a Breach

If a breach of your unsecured PHI occurs, we are required by law to notify you promptly, in

accordance with HIPAA's Breach Notification Rule (45 C.F.R. Sections 164.400 through

164.414) and applicable California law, including the California Confidentiality of Medical

Information Act.

4. Our Privacy and Security Obligations

4.1 How We Protect Your PHI

IHA implements physical, administrative, and technical safeguards to protect your PHI in

compliance with HIPAA's Security Rule (45 C.F.R. Sections 164.302 through 164.318),

including:

• HIPAA-compliant telehealth and scheduling platforms

• Encrypted electronic communications and records

• Role-based access controls limiting PHI access to authorized workforce members

• Business Associate Agreements (BAAs) with all vendors who access or process PHI on

our behalf

• Regular workforce training on HIPAA compliance and data privacy

• Policies and procedures for responding to security incidents

We work with third-party service providers ("Business Associates") who may have access to

your PHI in the course of providing services to us. These include our electronic health record

vendor, scheduling platforms, billing services, and other technology vendors. We require all

Business Associates to sign HIPAA-compliant Business Associate Agreements and to protect

your PHI in accordance with applicable law.

5. Website Privacy Policy

This section applies to information collected through our website at

integrativehealthcarealliance.com, which is hosted on the Squarespace platform. This section

does not apply to your medical records or PHI collected in the context of your clinical care,

which are governed by Sections 2 through 4 of this document.

5.1 Information We Collect Through the Website

Information You Provide Voluntarily

When you contact us through our website, subscribe to our email list, book a consultation, or

otherwise interact with us online, you may provide us with:

• Your name and contact information (email address, phone number)

• Information you share in contact forms or consultation requests

• Insurance information provided during intake or scheduling

Please note: Do not submit sensitive clinical or mental health information through unsecured

website contact forms. If you need to share clinical details, please use our secure patient portal

or contact us by phone.

Information Collected Automatically

When you visit our website, our hosting platform (Squarespace) and any analytics tools we use

may automatically collect certain technical information, including:

• IP address and approximate geographic location

• Browser type and operating system

• Pages visited and time spent on the site

• Referring website or search query

• Device type

This information is collected using cookies, pixels, and similar tracking technologies and is used

to understand how visitors interact with our website and to improve our content.

5.2 Cookies and Tracking Technologies

Our website uses cookies (small text files stored on your device) to support site functionality and

analyze traffic. Squarespace may set functional and analytics cookies necessary for the website

Integrative Healthcare Alliance | integrativehealthcarealliance.com | (213) 267-7162to operate. We may also use third-party analytics services such as Google Analytics to

understand website traffic patterns.

You can control cookies through your browser settings. Disabling cookies may affect the

functionality of certain features on our site.

5.3 Email Communications

If you subscribe to our email list, we will send you health-related information, practice updates,

and other content we believe may be relevant to your wellness. Every marketing email we send

includes an unsubscribe link. You may opt out at any time by clicking "Unsubscribe" in any

email or by contacting us at hello@integrativehealthcarealliance.com.

Note: Unsubscribing from marketing emails does not affect appointment reminders or other

communications related to your active clinical care.

5.4 Third-Party Links and Services

Our website may contain links to third-party websites, such as our scheduling platform and

review platforms. These third parties have their own privacy policies, and we are not responsible

for their practices. We encourage you to review the privacy policy of any third-party site you

visit.

5.5 Online Scheduling and Booking

Appointment booking through our website directs you to our scheduling platform. Information

you provide during booking, including insurance information and clinical intake details, is

handled in accordance with our HIPAA Notice of Privacy Practices and is protected as PHI. We

maintain a Business Associate Agreement with our scheduling and EHR vendor.

6. California Privacy Rights

California residents have specific privacy rights under California law, including the California

Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Please note that information collected and used by a HIPAA covered entity in the context of

providing healthcare services is generally exempt from CCPA. The following rights apply to

personal information collected through our website that is not PHI.

6.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal

information we have collected about you through our website, the sources from which it was

collected, the purposes for collection, and the categories of third parties with whom we share it.

6.2 Right to Delete

You have the right to request deletion of personal information we have collected about you

through our website, subject to certain exceptions (for example, information we are required to

retain by law or that is necessary to complete a transaction).

Integrative Healthcare Alliance | integrativehealthcarealliance.com | (213) 267-71626.3 Right to Correct

You have the right to request correction of inaccurate personal information we hold about you.

6.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information, and we do not share your personal information with

third parties for cross-context behavioral advertising purposes. If this practice changes, we will

update this policy and provide you with a right to opt out.

6.5 Right to Non-Discrimination

We will not discriminate against you for exercising your California privacy rights. You will receive

the same quality of care regardless of whether you submit a privacy request.

6.6 How to Submit a California Privacy Request

To submit a CCPA/CPRA request, contact our Privacy Officer using the information in Section

8. We will verify your identity before processing your request and respond within 45 days (with a

possible 45-day extension when reasonably necessary).

7. Minors

Our services are intended for adults aged 18 and older. We do not knowingly collect personal

information from individuals under 18 through our website without verifiable parental consent. If

you believe we have inadvertently collected information from a minor, please contact us

immediately.

For minors who are patients under applicable California law, parental access rights to records

are governed by state law, including California Family Code Section 6924 and other applicable

provisions governing minors' consent to mental health treatment.

8. Questions, Complaints, and Privacy Officer Contact

IHA has designated a Privacy Officer responsible for ensuring compliance with HIPAA and this

Notice. If you have questions about this policy, wish to exercise your rights, or believe your

privacy rights have been violated, please contact:

Privacy Officer: Femi Orokunle

Integrative Healthcare Alliance

• Phone: (213) 267-7162

• Email: f.orokunle@integrativehealthcarealliance.com

• Website: integrativehealthcarealliance.com

• Mailing Address: 9431 Haven Ave, Suite 101, Rancho Cucamonga, CA

We will not retaliate against you for filing a complaint.

Integrative Healthcare Alliance | integrativehealthcarealliance.com | (213) 267-7162To file a complaint with the U.S. Department of Health and Human Services (HHS):

• Office for Civil Rights (OCR): www.hhs.gov/ocr/privacy/hipaa/complaints

• Phone: 1-800-368-1019 (toll-free) or 1-800-537-7697 (TDD)

• Mail: U.S. Department of Health and Human Services, 200 Independence Avenue, S.W.,

Washington, D.C. 20201

To file a complaint with the California Attorney General:

• Website: oag.ca.gov/privacy/ccpa

9. Changes to This Policy

We reserve the right to update this Privacy Policy and Notice of Privacy Practices at any time.

Material changes will be posted on our website at integrativehealthcarealliance.com with a

revised effective date. If you are a current patient, we will notify you of material changes in

accordance with HIPAA requirements. We reserve the right to make the new terms effective for

all PHI we maintain, including PHI we created or received before the changes.