Halcyon Health

HIPAA Notice of Privacy Practices

Effective Date: January 22, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Responsibilities

SISU LLC, doing business as Halcyon Health (“Halcyon,” “we,” “us”), is required by law to:

• Maintain the privacy and security of your Protected Health Information (“PHI”)
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you if a breach occurs that may compromise your PHI

How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without your authorization:

1. Treatment. To provide, coordinate, or manage your healthcare and related services, including sharing information with other healthcare providers involved in your care.

2. Payment. To bill and collect payment for services provided, including disclosures to insurance companies, payment processors, or billing services when applicable.

3. Healthcare Operations. For quality assessment, improvement activities, training, licensing, and business operations necessary to run our practice.

Other Permitted Uses and Disclosures

We may also use or disclose your PHI:

• As required by federal, state, or local law
• To respond to court orders or legal processes
• For public health activities
• To prevent or lessen a serious and imminent threat to health or safety
• For health oversight activities (e.g., audits, investigations)

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including marketing communications involving PHI, sale of PHI, and certain disclosures of psychotherapy notes. You may revoke your authorization at any time in writing.

Your Rights Regarding Your Health Information

You have the right to:

• Access your medical records
• Request corrections to inaccurate or incomplete information
• Request restrictions on certain uses or disclosures
• Request confidential communications (e.g., alternative contact methods)
• Receive an accounting of disclosures
• Obtain a paper copy of this Notice
• File a complaint if you believe your privacy rights have been violated

To exercise any of these rights, contact us using the information below.

Electronic Medical Records

Halcyon uses Cerbo, a third-party electronic medical record (EMR) system, to store and manage PHI. Cerbo is HIPAA-compliant and maintains appropriate safeguards to protect your information.

Changes to This Notice

We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. The current version will always be available upon request and on our Website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:
Halcyon Health
Email: admin@halcyonoptimized.com

You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Contact Information

SISU LLC d/b/a Halcyon Health
admin@halcyonoptimized.com