PRIVACY POLICY

Your privacy matters. This page explains how we protect and use information, both from this website and from your therapy.

Therapy information (protected health information)

Information about your care is protected by HIPAA and by the laws of the state where you receive services. We use and share it only as follows.

• Treatment: to provide and coordinate your care. We will ask your permission before speaking with another provider.
• Payment: to process your payment and, if you choose, to provide a receipt for your own use, through our secure payment and practice-management systems.
• Operations: to run the practice, such as scheduling, billing, quality review, and secure record-keeping with vendors who sign agreements to protect your information.
• As required by law: for example, a court order, or reports required by law about child or elder abuse or neglect.
• Safety: when needed to prevent a serious and immediate threat to you or someone else.
• Legal proceedings: in response to a valid court order or legal process, as the law requires.

We need your written authorization for anything else, including psychotherapy notes, marketing, or sale of your information. You may cancel an authorization in writing at any time.

Your rights

You may: see and get a copy of your records; ask for corrections; ask for a list of certain disclosures; ask us to limit certain uses; ask that we contact you in a particular way, such as email or phone only; get a paper copy of our full Notice of Privacy Practices; and file a complaint without fear of retaliation. To use any of these rights, email welcome@be4au.org.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, 1-877-696-6775, www.hhs.gov/ocr.

Website information

We collect only what you choose to give us (such as a message you send) and basic website analytics. We do not sell your information. Booking happens on Carepatron, a third-party secure platform, which has its own privacy policy. Please do not send sensitive clinical details by regular email or contact form. Use the secure client portal instead.

Email and text

Regular email and text are not fully secure. Use them for scheduling only.

Changes

We may update this policy. The date at the top shows the latest version. Our full Notice of Privacy Practices is given to every client at onboarding.