HIPAA Notice of Privacy Practices

Effective Date: January 22, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Responsibilities
SISU LLC, doing business as Halcyon Health (“Halcyon,” “we,” “us”), is required by law to:

• Maintain the privacy and security of your Protected Health Information (“PHI”)

• Provide you with this Notice of our legal duties and privacy practices

• Follow the terms of this Notice currently in effect

• Notify you if a breach occurs that may compromise your PHI

​

How We May Use and Disclose Your Health Information
We may use and disclose your PHI for the following purposes without your authorization:

1. Treatment
To provide, coordinate, or manage your healthcare and related services, including sharing information with other healthcare providers involved in your care.

2. Payment
To bill and collect payment for services provided, including disclosures to insurance companies, payment processors, or billing services when applicable.

3. Healthcare Operations
For quality assessment, improvement activities, training, licensing, and business operations necessary to run our practice.

Other Permitted Uses and Disclosures
We may also use or disclose your PHI:

• As required by federal, state, or local law

• To respond to court orders or legal processes

• For public health activities

• To prevent or lessen a serious and imminent threat to health or safety

• For health oversight activities (e.g., audits, investigations)
   

Uses and Disclosures Requiring Your Authorization
We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including:

• Marketing communications involving PHI

• Sale of PHI

• Certain disclosures of psychotherapy notes

You may revoke your authorization at any time in writing.

Your Rights Regarding Your Health Information
You have the right to:

• Access your medical records

• Request corrections to inaccurate or incomplete information

• Request restrictions on certain uses or disclosures

• Request confidential communications (e.g., alternative contact methods)

• Receive an accounting of disclosures

• Obtain a paper copy of this Notice

• File a complaint if you believe your privacy rights have been violated

To exercise any of these rights, contact us using the information below.

Electronic Medical Records
Halcyon uses Cerbo, a third-party electronic medical record (EMR) system, to store and manage PHI. Cerbo is HIPAA-compliant and maintains appropriate safeguards to protect your information.

Changes to This Notice
We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. The current version will always be available upon request and on our Website.

Complaints
If you believe your privacy rights have been violated, you may file a complaint with:
Halcyon Health
Email: admin@halcyonoptimized.com

You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
Contact Information
SISU LLC d/b/a Halcyon Health
📧 admin@halcyonoptimized.com