Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Understanding Your Health Record/Information

This notice describes the practices of Cambridge Biotherapies — Harmony Mind Health P.C.; Cambridge TMS, Inc.; and CBIO Management, LLC (collectively, “Practice”) — and that of any physician or provider with staff privileges with respect to your protected health information created while you are a patient at the Practice. The Practice, physicians with staff privileges, and personnel authorized to have access to your medical chart are subject to this notice. In addition, the Practice and physicians with staff privileges may share medical information with each other for treatment, payment, or health care operations described in this notice.

We create a record of the care and services you receive at the Practice. We understand that medical information about you and your health is personal, and we are committed to protecting it. This notice applies to all of the records of your care at the Practice. It will tell you about the ways in which we may use and disclose medical information about you, and it describes your rights and certain obligations we have regarding the use and disclosure of medical information.

Your Health Information Rights

Although your health record is the physical property of the Practice, the information belongs to you. You have the right to:

  • Inspect and request a paper or electronic copy of your health record as provided by law;
  • Request that we amend your health record as provided by law (we will notify you if we are unable to grant your request);
  • Request communication of your health information by alternative means or at alternative locations, and we will accommodate reasonable requests;
  • Request a restriction on certain uses and disclosures of your information for treatment, payment, and health care operations, and as to disclosures permitted to persons involved with your care. We are not required to agree, unless the request relates to a restriction on disclosures to your health insurer regarding health care items or services for which you have paid out-of-pocket and in full;
  • Obtain an accounting of disclosures of your health information as provided by law;
  • Obtain a paper copy of this Notice of Privacy Practices; and
  • Choose someone to act for you if you have given someone medical power of attorney or if someone is your legal guardian; we will verify the person’s authority before we take action.

You may exercise the rights set forth in this notice by providing a written request to Cambridge Biotherapies at the address provided for your location (see locations listed at the end of this notice) or at https://cbio.health.

Our Responsibilities

In addition to the responsibilities set forth above, we are also required to:

  • Maintain the privacy of your health information;
  • Provide notice of any unauthorized acquisition, access, use, or disclosure of your protected health information to the extent it was not otherwise secured, subject to certain exceptions under the law;
  • Provide you with a notice as to our legal duties and privacy practices with respect to information we maintain about you;
  • Abide by the terms of this notice; and
  • Notify you if we are unable to agree to a requested restriction on certain uses and disclosures.

We reserve the right to change our practices and to make the new provisions effective for all protected health information we maintain, including information created or received before the change. Should our information practices change, we will have the revised notice available upon your request and will post the revised notice at each location.

Uses and Disclosures That Do Not Require Your Authorization

The following categories describe ways that we may use and disclose medical information without your authorization. Not every use or disclosure in a category will be listed, but all of the ways we are permitted to use and disclose information without your authorization should fall within one of these categories.

Treatment.

We may disclose medical information about you to doctors, nurses, technicians, or other personnel who are involved in taking care of you, and to coordinate different treatments, such as prescriptions, lab work, and infusions. We may also provide a subsequent health-care provider with copies of reports to assist in treating you.

Payment.

A bill may be sent to you or a third-party payer. The information on or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used.

Health Care Operations.

We may use the information in your health record to assess the care and outcome in your case and others like it, in an effort to continually improve the quality and effectiveness of the health care and services we provide.

We will also use and disclose your health information as otherwise allowed by law. Examples include: business associates (under written contracts that require them to safeguard your information); notification of, and disclosure to, family members or others involved in your care (unless you object); disaster relief; research approved by an institutional review board; appointment reminders and communications about treatment alternatives; reports to the Food and Drug Administration regarding adverse events; workers’ compensation; public health activities; reports of abuse, neglect, or domestic violence; judicial, administrative, and law enforcement purposes; health oversight activities; to avert serious threats to health or safety; special government functions; and as otherwise required or allowed by federal, state, or local law. We use a third party to maintain our electronic medical records and limit access to personnel with an actual need to access your information.

Special Protections for Certain Information

Some kinds of information — such as HIV-related information, alcohol and substance use disorder treatment information, mental health and psychotherapy information, and genetic information — are considered so sensitive that state or federal laws provide special protections for them. Therefore, some parts of this general Notice of Privacy Practices may not apply to these types of information. If you have questions or concerns about the ways these types of information may be used or disclosed, please speak with your health care provider.

When We Need Your Written Authorization

We will not use or disclose your health information without your written authorization, except as described in this notice. Uses and disclosures not described in this notice will be made only with your written authorization. Examples that require your authorization include most uses of psychotherapy notes and uses and disclosures for marketing purposes. We will not sell your protected health information. If you provide written authorization, you may revoke it at any time, except to the extent that we have already relied upon it.

Breach Notification

You have the right to be notified following a breach of your unsecured protected health information if there is more than a low probability that the information has been compromised. The notice will include a description of what happened, the type of information involved, steps you should take to protect yourself, a brief description of our investigation and mitigation, and contact procedures to answer your questions.

For More Information or to Report a Problem

If you have questions and would like additional information, you may contact our Privacy Officer at (617) 803-9722 or privacy@cbio.health.

If you believe your privacy rights have been violated, you may file a complaint with Cambridge Biotherapies by contacting the Privacy Officer at the number above, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201; calling (877) 696-6775; or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. There will be no retaliation against you for filing a complaint.

This Notice of Privacy Practices is effective as of June 17, 2026.

Cambridge Biotherapies locations:

  • Cambridge: 6 Bigelow Street, Cambridge, MA 02139
  • Beverly: 100 Cummings Center, Suite 206 N, Beverly, MA 01915
  • Springfield: 1550 Main Street, Suite 108, Springfield, MA 01103

Main: (888) 646-0566 | Fax: (877) 325-2792 | info@cbio.health | https://cbio.health