HIPAA Policies and Privacy Practices

This notice describes how your protected health information (PHI) may be used and disclosed, as well as how you can get access to this information. Your records hold special, elevated protections under HIPAA and require specific written consent for release, except under certain circumstances, as detailed below.

Our Pledge Regarding Health Information.

We understand that health information about you and your care is personal. We are committed to protecting health information about you. We create a record of the care and services you receive to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated by this solo practice.

Your Rights.

Your rights include but are not limited to:

• You have the right to access your records
• You have the right to request corrections to your records
• You have the right to request confidential communications, including but not limited to requesting not be contacted through a certain method, such as requesting to not be contacted via phone call
• You have the right to file a complaint if you believe your rights have been violated

Changes to the Terms of This Notice.

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request and prominently posted on our website.

Our Legal Duties.

We are required by law to:

• Maintain the privacy and security of your protected health information (PHI).
• Provide you with this notice of our legal duties and privacy practices with respect to your PHI.
• Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
• Follow the terms of the notice that is currently in effect.

How We May Use and Disclose Your Health Information

The following categories describe different ways that we use and disclose health information.

1. For Treatment

We can use your health information and share it with other professionals who are treating you, but only with your explicit, separated written authorization before any disclosure, except for limited circumstances like specific legal defense or serious safety threats.

2. For Healthcare Operations

We can use and share your health information to run our practice, improve your care, and contact you when necessary.

3. For Payment / Billing

We can use and share your health information to bill and get payment from health plans or other entities.

4. Psychotherapy Notes

Notes documenting or analyzing the contents of our conversation during a private or group therapy session are kept separate from the rest of your medical record. These "psychotherapy notes" require your explicit, separate written authorization before any disclosure, except for limited circumstances like specific legal defense or serious safety threats.

5. As Required by Law

We will share information about you if state or federal laws require it, including with the U.S. Department of Health and Human Services if they want to see that we are complying with federal privacy law.

6. To Avert a Serious Threat to Health or Safety

We can use and share health information about you to prevent a serious threat to your health and safety or the health and safety of the public or another person.

7. Special Situations (Lawsuits, Law Enforcement, Worker's Compensation, Public Health)

We may disclose your PHI for public health activities, law enforcement purposes, or in response to a valid court or administrative order if we are required to.

Right to a Copy.

You are entitled to an electronic and paper copy of this notice, which you may request at any time.

Complaints.

If you feel we have violated your privacy rights, you can file a complaint with us by contacting us by email: aubrey@desertpoppytherapy.com, or by phone (928)325-2913. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.