HIPAA notice

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: November 1, 2026

This notice applies to the health information created or received by Wellness Institute of Neurodevelopment LLC (2 Chelsea Blvd., Houston, TX 77006) and CBF Pediatric Services, CSP (610 Ave. Escorial, San Juan, PR 00920), which operate together as the Wellness Institute of Neurodevelopment (WIN), and to their physicians, nurse practitioners, therapists, staff and telemedicine services. When this notice says "we" or "WIN," it means both centers.

Our duties

We are required by law to keep the privacy of your protected health information ("health information"), to give you this notice of our legal duties and privacy practices, and to follow the notice currently in effect.
We will notify you if a breach occurs that may have compromised the privacy or security of your unsecured health information.
We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by letting us know in writing.
Where Texas or Puerto Rico law gives your information more protection than federal law, we follow the more protective law.

How we may use and share your health information

Treatment. We use your information and share it with other professionals who are treating you. Example: your WIN physician shares lab results with the therapist who designs your Phase III program, or with your pediatrician or neurologist.

Payment. We use and share your information to bill and get paid by health plans or other payers. Example: we send information about your visit to your health plan so it will pay for the service.

Health care operations. We use and share your information to run our practice, improve your care and contact you when necessary. Example: we review treatment outcomes to improve our programs, or train our staff.

Appointment reminders and services. We may contact you by phone, text or email to remind you of appointments, follow up on your care, or tell you about treatment alternatives or health-related services we offer.

Family and friends involved in your care. Unless you tell us not to, we may share relevant information with a family member, friend or other person involved in your care or payment for your care. For a child, we generally share information with the parent or legal guardian, except where law limits that.

Business associates. We share information with companies that perform services for us, such as laboratories, our electronic health record, billing and communication vendors. They must sign a contract to protect your information.

Other uses and disclosures allowed or required by law

We may share your information without your written authorization in the following situations, as the law permits:

As required by law, including when the U.S. Department of Health and Human Services asks to check that we are complying with federal privacy law.
Public health and safety, such as preventing disease, reporting adverse reactions to medications or devices, and reporting suspected abuse, neglect or domestic violence to the authorities as required by law.
To prevent a serious threat to your health or safety or that of others.
Health oversight activities, such as audits, investigations, inspections and licensure.
Lawsuits and legal actions, in response to a court or administrative order, or a subpoena under the conditions the law requires.
Law enforcement, for limited purposes such as responding to a valid legal process.
Coroners, medical examiners and funeral directors, when an individual dies.
Organ and tissue donation organizations.
Research, when an institutional review or privacy board has approved the use under the law's safeguards.
Specialized government functions, such as military, national security and presidential protective services.
Workers' compensation claims, as the law allows.

Uses that require your written permission

We will ask for your written authorization before we use or share your information for marketing, before we sell your information, and before we share psychotherapy notes (except in limited cases the law allows). Any other use not described in this notice also requires your written authorization, which you may revoke in writing at any time (it will not affect what we already did in reliance on it).

If we receive records of substance use disorder treatment that are protected by federal law (42 CFR Part 2), we will not use or share them in a civil, criminal, administrative or legislative proceeding against you without your written consent or a court order that meets the law's requirements.

Your rights

Get a copy of your health record. You can ask to see or get an electronic or paper copy of your medical and billing records. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask us to correct your record. You can ask us to correct information you think is incorrect or incomplete. We may say "no," but we will tell you why in writing within 60 days.

Request confidential communications. You can ask us to contact you in a specific way (for example, a particular phone or email) or at a different address. We will say "yes" to all reasonable requests.

Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment or our operations. We are not required to agree, and we may say "no" if it would affect your care. If you pay for a service or item out of pocket in full, you can ask us not to share that information with your health plan for payment or operations, and we will say "yes" unless the law requires us to share it.

Get a list of those with whom we've shared information. You can ask for a list (accounting) of the times we've shared your information in the six years before your request, who we shared it with, and why. It will not include disclosures for treatment, payment, operations, and certain others. One list a year is free; we may charge a reasonable fee for additional lists within 12 months.

Get a copy of this notice. You can ask for a paper copy of this notice at any time, even if you agreed to receive it electronically. Copies are available at both centers.

Choose someone to act for you. If you have a medical power of attorney or a legal guardian, that person can exercise your rights. We will confirm the person has this authority before we act.

Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, at our centers and on this website.

Questions and complaints

If you have questions or want to exercise any of these rights, contact our Privacy Officer at WIN

Privacy Officer, Wellness Institute of Neurodevelopment
Email: info@wellneuro.com
Houston: 2 Chelsea Blvd., Houston, TX 77006 · 832-703-1090
San Juan: 610 Ave. Escorial, San Juan, PR 00920 · 787-474-0400
Toll-free: 844-309-5999

If you believe your privacy rights have been violated, you can file a complaint with us using the information above, or with the U.S. Department of Health and Human Services Office for Civil Rights by writing to 200 Independence Avenue S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

About this website

Information you send through this website's contact form or chat assistant (name, phone, email, center, a short reason for contacting us) is used to respond to you and schedule an orientation. Please do not send medical details through the website; our team will collect them securely. The chat assistant does not store conversation transcripts.