Notice of Privacy Practices

Effective October 11, 2026

Eclipse Mental Wellness, PLLC (“we” or “the practice”) is a psychiatric practice in Fuquay-Varina, North Carolina, led by Stephanie Lastra, PMHNP-BC. This notice explains how we may use and share your protected health information and the rights you have over it.

Your records are kept in Charm Health, our electronic health record and patient portal, which we also use for video visits. Prescriptions are sent electronically through DrFirst. Insurance billing is handled through Headway. Secure messaging with the practice is available through the Spruce app.

Our responsibilities

• We are required by law to keep your health information private and secure.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by telling us in writing.

How we may use and share your health information

Treatment

We use your information to provide and coordinate your care. That can include sharing it with other providers involved in your care, such as your primary care provider, a therapist, or your pharmacy.

Payment

We use and share information to get paid for your care. Insurance claims are submitted through Headway, which receives the information a claim needs, such as your diagnosis, dates of service, and service codes, and which may share it with your health plan. If you pay in full out of pocket for a service, you can ask us not to share information about that service with your health plan, and we will honor that request.

Health care operations

We may use your information to run the practice, such as for quality review, licensing and credentialing, training, and business planning.

Appointment reminders and communications

We may contact you about appointments, refills, and your care by phone, text message, email, the Charm patient portal, or the Spruce app. You can tell us which you prefer.

The Spruce app gives you end-to-end encrypted messaging with the practice. If you choose to text the office number instead, messages are secure on our end, but they are stored on your own phone in your text messages, where anyone with access to your phone could see them. Texting is always your choice, and the Spruce app is available if you would rather keep messages encrypted.

Family and friends

Our default is not to discuss your care with family members or friends unless you tell us you want us to. In an emergency, or if you are unable to make decisions for yourself, we may share information that is directly relevant to their involvement with someone who is involved in your care. For patients under 18, see “Patients aged 14 to 17” below.

Business associates

Some services are provided by companies that work on our behalf and have agreed in writing to protect your information. They include Charm Health (electronic health record, patient portal, and video visits), DrFirst (electronic prescribing), and Spruce Health (secure messaging). Headway handles insurance billing and receives the information described under “Payment” above.

Uses and disclosures that do not require your permission

The law allows or requires us to share your information without your authorization in certain situations, including:

• When required by law, including reporting suspected abuse or neglect of a child, or of a disabled or older adult.
• Public health activities, such as reporting to public health authorities.
• Health oversight, such as audits, inspections, and licensing reviews.
• Legal proceedings, in response to a court order, subpoena, or other lawful process, within the limits that apply to mental health records.
• Law enforcement, in the limited circumstances the law allows.
• To prevent a serious threat to your health or safety or to the health or safety of another person.
• Controlled substances. Pharmacies report controlled-substance prescriptions to the North Carolina Controlled Substances Reporting System (CSRS), and we review the CSRS as required by state law before prescribing.
• Workers’ compensation, military, and national security purposes, as authorized by law.

Uses and disclosures that require your written authorization

We will ask for your written permission before we:

• Share psychotherapy notes, where we keep them separately from the rest of your record.
• Use your information for marketing.
• Sell your information.
• Use or share your information for any purpose not described in this notice.

You can revoke an authorization in writing at any time. The revocation applies from that point forward and does not undo anything we did while the authorization was in effect. Records of treatment for a substance use disorder may have additional protections under federal law.

Patients aged 14 to 17

We see patients aged 14 and older. For a patient under 18, a parent or legal guardian must consent to treatment and to any medication, except in the limited situations where North Carolina law lets a minor consent on their own. We ask every minor patient for their own agreement to be seen, and their views matter in how we plan care. A parent or guardian who consents to a minor’s care generally has the right to see the minor’s records and to take part in decisions about it, subject to limits in state and federal law. We talk with both the young person and the parent about what will and will not be shared, so there are no surprises.

Your rights

• See and get a copy of your record. Ask us in writing. We will usually respond within 30 days and may charge a reasonable copying fee allowed by North Carolina law (N.C. Gen. Stat. § 90-411).
• Ask us to correct your record if you think something is wrong or missing. We may say no, but we will tell you why in writing.
• Ask for confidential communications, for example that we contact you only at a certain phone number or address. We will honor reasonable requests.
• Ask us to limit what we use or share. We are not required to agree, except when you have paid in full out of pocket for a service and ask us not to tell your health plan.
• Get a list of disclosures we have made in the past six years, other than for treatment, payment, and operations, and other than ones you authorized.
• Get a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Choose someone to act for you, such as a health care power of attorney or legal guardian.
• File a complaint if you believe your privacy rights have been violated. See below.

Complaints

If you believe your privacy rights have been violated, you can contact our Privacy Officer using the details below. You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue SW, Washington, DC 20201, by calling 1-800-368-1019, or online at hhs.gov/hipaa/filing-a-complaint. We will not retaliate against you for filing a complaint.

Changes to this notice

We can change this notice, and the new notice will apply to all the information we hold, including information we already have. The current notice is posted in our office and on this page, and you can ask for a copy at any time.

Contact