Notice of privacy practices.

1. Our commitment to your privacy

Princeton Pediatrics is committed to protecting the privacy of your child's protected health information (PHI). We are required by federal law — including the Health Insurance Portability and Accountability Act of 1996 (HIPAA) — to maintain the privacy of PHI, to provide you with this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

This notice applies to all records of your child's care generated by Princeton Pediatrics, whether created by our staff or received from another provider.

2. Information we collect

In the course of providing care for your child, we collect and maintain protected health information that may include:

• Demographic information (name, date of birth, address, phone, email)
• Insurance and billing information
• Medical history, allergies, and immunization records
• Examination findings, test results, and diagnoses
• Treatment plans, prescriptions, and referrals
• Records received from other providers or hospitals

3. How we may use and disclose your child's health information

We may use and disclose your child's PHI without your written authorization for the following purposes:

3.1 Treatment

We use PHI to provide your child with medical care. For example, we may share information with specialists, pharmacies, laboratories, or hospitals involved in your child's care.

3.2 Payment

We may use and disclose PHI to obtain payment for the services we provide — for example, to verify insurance coverage, submit claims, or follow up on outstanding balances.

3.3 Health care operations

We may use PHI for activities necessary to run the practice, such as quality assessment, staff training, accreditation, licensing, and care coordination.

3.4 Required by law

We will disclose PHI when required by federal, state, or local law — including but not limited to reporting suspected child abuse or neglect, reporting certain communicable diseases to public health authorities, responding to subpoenas or court orders, and reporting to the FDA regarding adverse events.

3.5 Public health and safety

We may disclose PHI to prevent or control disease, report births and deaths, report reactions to medications, and notify people who may have been exposed to a communicable disease.

3.6 Appointment reminders and care-related communications

We may contact you to remind you of upcoming appointments, follow up after a visit, or provide information about treatment alternatives or health-related services that may be relevant to your child's care.

4. Uses and disclosures that require your written authorization

Any use or disclosure of PHI not described in this notice will only be made with your written authorization. Specifically, we will obtain your written authorization before:

• Using or disclosing PHI for marketing purposes
• Selling PHI to any third party
• Disclosing psychotherapy notes (if any)

You may revoke an authorization at any time in writing, except to the extent we have already acted in reliance on it.

5. Your rights

As the parent or legal guardian of a minor child, you have the following rights regarding your child's PHI:

• Right to access and inspect — You may request to inspect and obtain a copy of your child's medical records. We may charge a reasonable fee for copying and mailing.
• Right to request an amendment — If you believe information in the record is incorrect or incomplete, you may request that we amend it. We may deny the request under certain circumstances, in which case you may submit a written statement of disagreement.
• Right to an accounting of disclosures — You may request a list of certain disclosures we have made of your child's PHI over the previous six years.
• Right to request restrictions — You may request that we limit how we use or disclose PHI. We are not required to agree, except where the disclosure is to a health plan for a service you paid for in full out of pocket.
• Right to confidential communications — You may request that we contact you by alternative means or at an alternative location (for example, by mobile phone only).
• Right to a paper copy of this notice — You may request a paper copy of this notice at any time, even if you have agreed to receive it electronically.
• Right to notification of a breach — You have the right to be notified if there is a breach of your child's unsecured PHI.

To exercise any of these rights, please submit a written request to our office at the address below.

6. How we protect your information

We maintain physical, electronic, and administrative safeguards to protect your child's PHI. Our electronic medical records system is HIPAA-compliant and access is restricted to authorized personnel. Paper records are stored in secure areas. All staff are trained on privacy practices.

7. Changes to this notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have about your child, as well as any information we receive in the future. The current notice will be posted in our office and on our website. You may request a copy of the current notice at any time.

8. Complaints

If you believe your child's privacy rights have been violated, you may file a complaint with us at the contact below, or with the U.S. Department of Health and Human Services, Office for Civil Rights:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
1-877-696-6775
www.hhs.gov/ocr

We will not retaliate against you for filing a complaint.

9. Contact us

To exercise any of your rights, request a copy of this notice, or with any other questions about our privacy practices, please contact our Privacy Officer:

Princeton Pediatrics — Privacy Officer
136 S. 2nd Street
Princeton, TX 75407
469-581-8115
info@princetonpediatricstx.com

Effective date: May 2026. This Notice of Privacy Practices is provided in compliance with HIPAA and the HITECH Act.