Privacy Policy

Privacy Policy & Notice of Privacy Practices

​

OUR COMMITMENT TO YOUR PRIVACY

YOU Online Clinical Hypnosis Therapy® understands that health information about you and your health care is personal. We are committed to protecting your protected health information ("PHI"). PHI includes any information that could identify you and relates to your past, present, or future physical or mental health conditions, treatment, or payment for services. This notice describes our policies and practices in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA).

OUR DUTIES

We are required by law to:

• Make sure that your identifiable health information is kept private.

• Provide you with this notice of our legal duties and privacy practices regarding your PHI.

• Follow the terms of the notice currently in effect.

HOW WE MAY USE AND DISCLOSE YOUR PHI

We may use and disclose your PHI for the purposes of treatment, payment, and healthcare operations without your explicit written authorization. We may also disclose PHI for other specific reasons permitted or required by law.

• Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services, including consultation with other healthcare providers regarding your treatment.

• Payment: We may use and disclose your PHI to obtain payment for your services, which may include sharing information with your health insurance plan, billing services, or third-party payers.

• Healthcare Operations: We may use and disclose your PHI for administrative and operational aspects of running our practice, such as quality assessment, professional reviews, and training purposes.

Situations Requiring Your Authorization

For most other uses and disclosures, we need your specific written authorization. This includes:

• Use or disclosure of psychotherapy notes (which we store separately from your main medical records).

• Sharing information with family members or friends involved in your care, unless you are present and give verbal permission or in an emergency.

• For marketing purposes or the sale of your PHI (which we do not engage in).

You have the right to revoke your authorization at any time in writing, except to the extent that we have already taken action in reliance on that authorization.

Situations Permitted or Required by Law Without Authorization

We may disclose PHI without your written authorization in limited circumstances, including:

• When required by law: In response to a court order or other lawful government requests.

• Public health activities: Reporting vital events, communicable diseases, or for FDA-regulated products.

• Abuse or neglect reporting: Reporting suspected child or elder abuse or neglect, as we are legally mandated reporters.

• Health and safety threats: To avert a serious and imminent threat to the health or safety of you or others.

• Workers' compensation: For workers' compensation claims.

YOUR RIGHTS REGARDING YOUR PHI

You have the following rights regarding your health information. You can exercise these rights by submitting a written request to our Privacy Official.

• Right to Access: You have the right to inspect and obtain a copy of your health records, including an electronic copy if we maintain the records electronically. We may charge a reasonable, cost-based fee for copies.

• Right to Amend: You have the right to request an amendment to your health information if you feel it is incorrect or incomplete. We may deny your request under certain circumstances.

• Right to an Accounting of Disclosures: You have the right to receive an accounting of certain disclosures of your PHI made by us for the six years prior to the request.

• Right to Request Restrictions: You have the right to request that we restrict the use or disclosure of your PHI for treatment, payment, or healthcare operations. We are generally not required to agree to your request, but if we do, we will abide by it (except in emergencies).

• Right to Request Confidential Communications: You have the right to request that we communicate with you about health matters in a certain way or at a specific location. We will accommodate reasonable requests, provided you specify how payment will be handled or provide an alternative address/method of contact.

• Right to a Paper Copy of This Notice: You have the right to a paper copy of this notice at any time.

OUR ONLINE PRIVACY AND SECURITY PRACTICES

We take the security of your PHI very seriously, especially in an online setting.

• Secure Platforms: We use HIPAA-compliant technology vendors for video conferencing, client portals, and electronic communications that have signed Business Associate Agreements (BAAs) with us. A BAA is a contract that requires the vendor to protect the confidentiality and security of PHI.

• Encryption and Authentication: All electronic PHI is stored in secure, password-protected systems with strong authentication (multi-factor authentication is used where possible). Data and communications are encrypted to protect them during transmission and storage.

• Session Recordings: We will audio or video record sessions, Recordings are stored securely on encrypted devices or HIPAA-compliant cloud storage.

• Client Responsibilities: To maintain your privacy during virtual sessions, we recommend you use a private location and secure, private Wi-Fi networks (avoiding public Wi-Fi).

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.

CONTACT INFORMATION

If you have any questions about this Privacy Policy or our privacy practices, please contact us.

support@youonlinetherapy.com
[Website Address]

We reserve the right to change our privacy policies and practices as needed. Any changes will be available upon request or on our website.