Notice of Privacy Practices

Graves Performance Therapy Ben Graves, PT, DPT Effective date: September 1, 2026 This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Graves Performance Therapy is a private cash practice of Ben Graves, PT, DPT. It is a separate entity and is not owned by, operated by, or affiliated with Lillian M. Hudspeth Memorial Hospital. This notice applies only to Graves Performance Therapy private cash visits (including visits on the course, court, field, or in a weight room). It does not replace the privacy practices of the hospital. Hospital or insurance care is scheduled and documented through the hospital, not through this website.

The public website form collects only scheduling information: your first name, last initial, email, phone number, requested visit type, location, and time window. Do not send clinical details through the website, ordinary email, or text. If a secure portal is offered later, use that for medical information.

We may collect and maintain: - First name, last initial, email, and phone number - Appointment date, time, location, and visit type - Records created after you are seen, such as evaluation findings, plan of care, home program, and billing for the visit - Limited communications about scheduling We do not ask this website form for Social Security number, insurance ID, date of birth, home address, full last name, photos, diagnosis, or injury history.

We use and disclose protected health information as permitted by the HIPAA Privacy Rule and the Texas Medical Records Privacy Act (Texas Health and Safety Code Chapter 181).

We use your information to evaluate you, treat you, document care, coordinate follow-up, and communicate with you about your visits. If you ask us to send records to another provider, we may do that.

We use your information to collect the cash fee due at the visit, send a receipt, or create a superbill if you request one. This practice’s website form does not bill insurance.

We may use information to schedule visits, keep records, improve the practice, obtain legal or accounting advice, train (if staff are hired), or maintain insurance.

If you agree on the scheduling form, we may email or text you about confirmation, reschedule, directions, cancellation, or payment-at-visit reminders. Those messages will not include diagnosis or treatment details.

Vendors who store or transmit scheduling or record information for us (website host, email, scheduling software, EHR) are required to protect that information by contract when they are business associates.

We may disclose information when the law allows or requires it, including: - As required by the Texas Board of Physical Therapy Examiners or other regulators - For public health, abuse/neglect reporting, or health oversight - For judicial or administrative proceedings, or as required by court order or lawful subpoena - For law enforcement in limited situations allowed by law - To prevent a serious and imminent threat to health or safety - For workers’ compensation or similar programs if applicable - To a family member or person involved in your care if you agree, do not object, or if we infer from the circumstances that it is appropriate, using professional judgment and the minimum necessary information We will not sell your information. We will not use scheduling data for marketing without your separate written permission.

Written authorization is required for most uses not described above, including marketing that uses your protected health information and most sharing of detailed clinical records with someone you did not involve in your care. You may revoke an authorization in writing, except to the extent we have already relied on it.

You have the right to: - Ask to see or get a copy of records we keep about you - Ask us to correct records you believe are wrong or incomplete - Ask us to limit how we use or share information. We may not be able to agree to every request. We will not use or disclose information for marketing without the permission required by law - Ask us to contact you in a specific way, such as email only or a particular phone number - Get a list of certain disclosures we have made (an accounting of disclosures) - Get a paper copy of this notice at any time, even if you received it electronically - File a complaint without retaliation

Contact: Graves Performance Therapy Attn: Privacy Email: [email protected] Hospital scheduling only: (325) 387-1291 We will respond within the time required by law.

If you believe your privacy rights have been violated, you may complain to us using the contact information above. You may also complain to: U.S. Department of Health and Human Services, Office for Civil Rights https://www.hhs.gov/ocr/complaints 1-800-368-1019 Texas Attorney General, Consumer Protection https://www.texasattorneygeneral.gov Complaints about the licensed practice of physical therapy may be directed to: Texas Board of Physical Therapy Examiners / ECPTOTE 1801 Congress Ave, Suite 10.900 Austin, TX 78701 ptot.texas.gov (512) 305-6900 You will not be retaliated against for filing a complaint.

We are required by law to maintain the privacy of protected health information, give you this notice of our legal duties and privacy practices, and notify you if a breach of unsecured protected health information occurs as required by federal and Texas law. We must follow this notice until it is replaced.

We may change this notice. The new notice will apply to information we already have and information we get in the future. The current notice will be posted on this website with its effective date.

By requesting a visit through this website, you are given this notice. You can also ask for a paper copy at your first visit.