Privacy Policy & Notice of Privacy Practices

Introduction

We understand the importance of protecting your personal health information and are committed to maintaining the privacy and confidentiality of our patients' information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.

Information We Collect

We collect various types of information, including:

Protected Health Information (PHI):
- Name, address, and contact information
- Date of birth and demographic information
- Medical history and conditions
- Treatment records and progress notes
- Payment and insurance information
- Any other information related to your physical or mental health

Website Usage Information:
- IP addresses
- Browser type
- Device information
- Cookies and tracking data
- Website interaction patterns

How We Use Your Information

We use your information for:
1. Providing mental health services
2. Treatment planning and coordination
3. Billing and payment processing
4. Insurance claims and verification
5. Appointment scheduling and reminders
6. Legal and regulatory compliance
7. Quality assurance and improvement


Disclosure of Information

We may disclose your information:
- To other healthcare providers for treatment purposes
- For payment and healthcare operations
- When required by law or court order
- To prevent a serious threat to health or safety
- For public health activities
- For health oversight activities

Special Protections for Mental Health Information

Mental health records receive special protection under state and federal laws. We:
- Require specific authorization for most disclosures
- Maintain stricter confidentiality standards
- Limit access to authorized personnel only
- Provide additional safeguards for substance abuse treatment records

Website Security

Our website uses:
- SSL encryption
- Secure forms
- Regular security scanning
- Firewall protection
- Secure hosting services

Limitations of Liability

This website is for informational purposes only and does not constitute medical advice. We are not liable for any damages arising from the use of this website.

Emergency Services

This website is not intended for medical emergencies. If you are experiencing a mental health emergency, call 911 or visit your nearest emergency room.

Changes to Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will be posted on our website with an updated effective date.

Acknowledgment

By using our website and services, you acknowledge that you have read and understand this privacy policy.

*This privacy policy is intended to comply with all applicable federal and state laws, including HIPAA requirements. This document should be reviewed by qualified legal counsel before implementation.*

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Kendal Allsop, LCSW-S (the “Practice”) is committed to protecting your privacy. The Practice is required by federal law to maintain the privacy of Protected Health Information (“PHI”), which is information that identifies or could be used to identify you. The Practice must provide you with this Notice of Privacy Practices (this “Notice”), which explains the Practice's legal duties and privacy practices and your rights regarding PHI that we collect and maintain.

YOUR RIGHTS
Your rights regarding PHI are explained below. To exercise these rights, please submit a written request to the Practice at the below address.

To inspect and copy PHI.
• You can ask for an electronic or paper copy of PHI. The Practice may charge you a reasonable fee.
• The Practice may deny your request if it believes the disclosure will endanger your or another person's life. You may have a right to have this decision reviewed.

To amend PHI.
• You can ask to correct PHI you believe is incorrect or incomplete. The Practice may require you to make your request in writing and provide a reason for the request.
• The Practice may deny your request. The Practice will send a written explanation for the denial and allow you to submit a written statement of disagreement.

To request confidential communications.
• You can ask the Practice to contact you in a specific way. The Practice will say “yes” to all reasonable requests.

To limit what is used or shared.
• You can ask the Practice not to use or share PHI for treatment, payment, or business operations. The Practice is not required to agree on whether it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask the Practice not to share PHI with your health insurer.
• You can ask the Practice not to share your PHI with family members or friends by stating the specific restriction requested and to whom you want the restriction to apply.

To get a list of those with whom your PHI has been shared.
• You can ask for a list, called an accounting, of the times your health information has been shared. You can receive one accounting every 12 months at no charge, but you may be charged a reasonable fee if you ask for one more frequently.

To receive a copy of this Notice.
• You can ask for a paper copy of this Notice, even if you agree to receive the Notice electronically.

To choose someone to act for you.
• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights.

To file a complaint if you feel your rights are violated.
• You can file a complaint by contacting the Practice using the following information:
Kendal Allsop, LCSW-S
2102 Ivy Cove, Katy, TX 77494
218-769-2773
Kendal@kendalallsop.com

• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• The Practice will not retaliate against you for filing a complaint.

To opt out of receiving fundraising communications.
• The Practice may contact you for fundraising efforts, but you can ask not to be contacted again.


OUR USES AND DISCLOSURES
1. Routine Uses and Disclosures of PHI
The Practice is allowed under federal law to use and disclose PHI without your written authorization for specific routine uses and disclosures, such as those made for treatment, payment, and the operation of our business. The Practice typically uses or shares your health information in the following ways:

To treat you.
• The Practice can use and share PHI with other professionals treating you.
• Example: Your primary care doctor asks about your mental health treatment.

To run the health care operations.
• The Practice can use and share PHI to run the business, improve your care, and contact you.
• Example: The Practice uses PHI to send you appointment reminders if you choose.

To bill for your services.
• The Practice can use and share PHI to bill and get payment from health plans or other entities.
• Example: The Practice gives PHI to your health insurance plan, so it will pay for your services.

2. Uses and Disclosures of PHI That May Be Made Without Your Authorization or Opportunity to Object
The Practice may use or disclose PHI without your authorization or an opportunity for you to object, including:

To help with public health and safety issues
• Public health: To prevent the spread of disease, assist in product recalls, and report adverse reactions to medication.
• Required by the Secretary of Health and Human Services: We may be required to disclose your PHI to the Secretary of Health and Human Services to investigate or determine our compliance with the requirements of the final rule on Standards for Privacy of Individually Identifiable Health Information.
• Health oversight: For audits, investigations, and inspections by government agencies that oversee the health care system, government benefit programs, other government regulatory programs, and civil rights laws.
• Serious threat to health or safety: To prevent a serious and imminent danger.
• Abuse or Neglect: To report abuse, neglect, or domestic violence.

To comply with law, law enforcement, or other government requests
• Required by law: If required by federal, state, or local law.
• Judicial and administrative proceedings: Respond to a court order, subpoena, or discovery request.
• Law enforcement: For law, locate and identify you or disclose information about a victim of a crime.
• Specialized Government Functions: For military or national security concerns, including intelligence, protective services for heads of state, or your security clearance.
• National security and intelligence activities: For intelligence, counterintelligence, protection of the President, other authorized persons or foreign heads of state, for purpose of determining your own security clearance and other national security activities authorized by law.
• Workers' Compensation: To comply with workers' compensation laws or support claims.

To comply with other requests
• Coroners and Funeral Directors: To perform their legally authorized duties.
• Organ Donation: For organ donation or transplantation.
• Research: For research that has been approved by an institutional review board.
• Inmates: The Practice created or received your PHI in the course of providing care.
• Business Associates: To organizations that perform functions, activities or services on our behalf.

3. Uses and Disclosures of PHI That May Be Made With Your Authorization or Opportunity to Object
Unless you object, the Practice may disclose PHI:
To your family, friends, or others if PHI directly relates to that person's involvement in your care.

If it is in your best interest because you are unable to state your preference.

4. Uses and Disclosures of PHI Based Upon Your Written Authorization
The Practice must obtain your written authorization to use and/or disclose PHI for the following purposes:
• Marketing, sale of PHI, and psychotherapy notes.
• You may be able to revoke your authorization by contacting the Practice in writing using the information above. The Practice won't be able to use or share PHI other than as described in the Notice unless you give your permission in writing.

OUR RESPONSIBILITIES
• The Practice is required by law to maintain the privacy and security of PHI.
• The Practice must abide by the terms of this Notice currently in effect. Where more stringent state or federal law governs PHI, the Practice will abide by the more strict law.
• The Practice reserves the right to amend the Notice. All changes apply to PHI collected and maintained by the Practice. Should the Practice make changes, you may obtain a revised Notice by requesting a copy from the Practice or using the information above.
• The Practice will inform you if PHI is compromised in a breach.

This Notice is effective on March 13, 2025.