HIPAA-Compliant Privacy Policy for Somatic Wholeness Counseling

At Somatic Wholeness Counseling, protecting your privacy and safeguarding your personal health information is a top priority. We are committed to complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state privacy laws. This Privacy Policy outlines how we collect, use, and protect your Protected Health Information (PHI) and how you can manage your information.

WE WILL NEVER SELL YOUR INFORMATION TO THIRD-PARTIES FOR MARKETING PURPOSES.

Information We Collect

As part of providing mental health services, we collect certain information, including:

- **Personal Information**: Name, address, phone number, email, date of birth, and emergency contact details.

- **Protected Health Information (PHI)**: Mental health history, medical conditions, treatment plans, diagnoses, session notes, and any other information relevant to your therapy.

- **Payment Information**: Credit card details, insurance information, and billing history.

How We Use Your Information

Your PHI may be used or disclosed for the following purposes in compliance with HIPAA regulations:

- **Treatment**: To provide and coordinate your care, including consultations with other healthcare professionals or mental health specialists as necessary.

- **Payment**: To obtain payment for your therapy services, including communicating with insurance providers, if applicable.

- **Healthcare Operations**: To support practice operations, such as quality assessment, training, accreditation, or licensing.

Texting and Electronic Communications

While texting and electronic communications may be convenient, they are not considered secure forms of communication under HIPAA. By opting into texting, you agree to the following conditions:

- **Consent for Texting**: You must provide written consent for texting and acknowledge that it is not a secure means of communication. We recommend limiting texts to administrative matters, such as appointment reminders and scheduling.

- **Restrictions on Content**: We will not discuss sensitive health information via text messages. You are encouraged to use more secure means (such as encrypted email or a HIPAA-compliant messaging app) for communication related to treatment.

- **Risks Acknowledged**: You acknowledge the potential risks to your privacy with text communication, including unauthorized access or data interception. You may withdraw your consent for texting at any time by notifying us in writing.

Disclosure of Information

Your PHI will **only** be used or disclosed as permitted or required under HIPAA and other applicable laws:

- **With Your Written Authorization**: PHI will not be disclosed for any non-routine purposes without your written authorization.

- **Without Your Authorization**: There are certain situations where your PHI may be shared without your consent, such as:

- To comply with legal requirements (e.g., reporting abuse or neglect, court orders).

- To prevent a serious threat to your health or safety or the health and safety of others.

- For treatment purposes, to coordinate care with other healthcare providers involved in your treatment.

Your Rights Regarding PHI

You have several rights under HIPAA concerning your PHI:

- **Access to Records**: You can request access to your therapy records at any time.

- **Amendment of Records**: You may request corrections to inaccurate or incomplete information in your records.

- **Request Confidential Communications**: You have the right to request that we communicate with you through alternative methods or at alternative locations (e.g., only at work or via mail).

- **Restrictions**: You may request restrictions on certain uses and disclosures of your PHI. We will comply with your requests if legally permitted.

- **Accounting of Disclosures**: You have the right to receive an accounting of any disclosures of your PHI made outside of routine treatment, payment, or healthcare operations.

- **Revoking Authorization**: You may revoke any previously granted authorization for the use or disclosure of your PHI in writing at any time, except to the extent that action has already been taken based on your authorization.

How We Protect Your Information

We implement the following safeguards to protect your PHI:

- **Administrative Safeguards**: Only authorized personnel have access to your information, and they receive ongoing HIPAA training.

- **Physical Safeguards**: All physical records are stored securely, and access is limited to authorized personnel.

- **Technical Safeguards**: Electronic records are stored in secure, HIPAA-compliant systems with encryption to protect against unauthorized access.

Use of Third-Party Services

In certain cases, we may use third-party vendors to help deliver services, such as billing or scheduling. We ensure that any third-party service provider who has access to your PHI is also HIPAA-compliant and enters into a **Business Associate Agreement (BAA)** with us to protect your information.

Changes to This Privacy Policy

We reserve the right to change this Privacy Policy as necessary to comply with changes in laws or regulations or to reflect changes in our practice operations. Any updates will be posted, and you will be notified of significant changes.

Complaints and Questions

If you believe your privacy rights have been violated or have concerns regarding your privacy, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS). Filing a complaint will not negatively impact your treatment.

Contact Information

- Kyle Vandenbroucke

- Somatic Wholeness Counseling

- (303)276-0870

- kyle@somaticwholenesscounseling.com

---

By engaging with our services, you acknowledge that you have read, understood, and agreed to this HIPAA-compliant Privacy Policy.