HIPAA & Privacy Policy.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, phone number, email address, mailing address, and other contact details.
• Health Information (PHI): Information related to your mental health, treatment history, or other protected health information, as defined by HIPAA.
• Usage Information: Browser type, IP address, pages visited, and cookies related to use of our website.
• SMS Communications: If you opt in, we may collect and store SMS interactions between you and our staff or system.

2. SMS Text Messaging and Consent

By providing your mobile phone number and opting in through our website or other communication channels, you consent to receive text messages from us. These messages may include:

• Appointment reminders
• Intake or assessment instructions
• General communications from your care provider
• Billing notifications or follow-ups

Message frequency may vary. Message and data rates may apply. You can reply STOP to unsubscribe at any time or HELP for assistance.

We will never send marketing messages via SMS without your explicit consent.

3. How We Use Your Information

We use your information to:

• Provide mental health services and coordinate care
• Send appointment reminders and communicate about your treatment
• Respond to inquiries and support requests
• Fulfill legal or regulatory obligations (including HIPAA)
• Improve our services and website experience

4. Sharing and Disclosure of Information

We do not sell or share your personal or health information with third parties for marketing purposes.

We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors in support services (e.g., customer service, scheduling, SMS delivery) under HIPAA-compliant agreements. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may share your information:

• With your consent or at your request
• With health care providers involved in your care
• With third-party service providers (e.g., our SMS provider) under HIPAA-compliant agreements
• As required by law (e.g., in response to subpoenas, court orders, or legal obligations)

5. Data Security and Retention

We implement reasonable administrative, technical, and physical safeguards to protect your data in compliance with HIPAA, TCPA, and CTIA standards.

We retain personal and health information only as long as necessary for treatment, legal, and operational purposes.

6. Your Rights

You have the right to:

• Access or request a copy of your health records
• Request corrections to inaccurate information
• Withdraw consent for SMS or other communication
• File a complaint with us or the U.S. Department of Health & Human Services (HHS)

To exercise your rights, please contact us using the details below.

7. Contact Us

If you have any questions about this Privacy Policy or wish to update your preferences:

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Website, Cookies, and Additional Disclosures

This section covers a few additional practices related to our website and your privacy.

Cookies

Our website uses cookies, which are small files that a site transfers to your device through your browser (if you allow it) to help the site recognize your browser and remember certain information. We use cookies to understand your preferences based on site activity, and to compile aggregate data about site traffic and interactions so we can offer a better experience over time. We may also use trusted third-party services, such as analytics providers, that track this information on our behalf.

You can choose to have your browser warn you each time a cookie is being sent, or turn off all cookies, through your browser settings. Since each browser is a little different, check your browser's Help menu for the correct way to adjust your cookies. If you turn cookies off, some features of the site may not function properly.

Do Not Track Signals

We honor Do Not Track (DNT) browser signals. We do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place. We also do not allow third-party behavioral tracking.

Children's Privacy

In line with the Children's Online Privacy Protection Act (COPPA), we do not specifically market to children under the age of 13.

Data Breach Notification

In the event of a data breach, we will notify affected users by in-site notification within seven business days, in line with Fair Information Practice Principles.

HIPAA Notice of Privacy Practices

This notice describes how medical and mental health information about you may be used and disclosed, and how you can get access to this information. As a covered entity under the Health Insurance Portability and Accountability Act (HIPAA), Ideal Psychology Group is required by law to protect the privacy of your health information, to provide you with this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

Protected Health Information (PHI)

Protected Health Information is any information that could identify you and relates to your past, present, or future mental health, the care you receive, or payment for that care. This includes information such as your name, contact details, diagnosis, session notes, and billing records.

How We May Use and Disclose Your Health Information

We use and disclose your health information only as necessary and as permitted by law. The most common reasons include:

• For treatment. Your therapist uses your information to provide and coordinate your care, including consulting with other providers involved in your treatment when appropriate.
• For payment. We use your information to bill and receive payment from you or your insurance, such as submitting claims and verifying coverage.
• For health care operations. We may use your information to run our practice, support quality of care, and carry out administrative functions.

Disclosures Permitted or Required Without Authorization

In limited situations, the law permits or requires us to share your information without your written authorization. These include:

• When required by law or court order.
• To prevent a serious and imminent threat to your health or safety, or the safety of others.
• To report suspected abuse, neglect, or domestic violence as required by law.
• For public health and safety activities as permitted by law.
• For health oversight activities such as audits or investigations by authorized agencies.

Outside of these situations, we will always ask for your written authorization before using or sharing your information, and you may revoke that authorization at any time.

Your Rights Under HIPAA

In addition to the rights described above, under HIPAA you have the right to:

• Inspect and request a copy of your health records.
• Request a correction to your information if you believe it is inaccurate or incomplete.
• Request restrictions on how your information is used or disclosed.
• Request to receive confidential communications in a specific way or at a specific location.
• Receive a list of certain disclosures we have made of your information.
• Receive a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Be notified in the event of a breach of your unsecured protected health information.

Our Responsibilities

We are required by law to maintain the privacy and security of your protected health information, to notify you promptly if a breach occurs that may have compromised the privacy or security of your information, and to follow the duties and privacy practices described in this notice. We will not use or share your information other than as described here unless you tell us we can in writing. If you give us written permission, you may change your mind at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above, or with the U.S. Department of Health and Human Services Office for Civil Rights. We will never retaliate against you for filing a complaint.