Privacy Policy and Terms and Conditions
Messaging Terms & Conditions:
You agree to receive informational messages (appointment reminders, account notifications, etc.) from De-Stress Psychological Services, LLC. Message frequency varies. Message and data rates may apply. For help, reply HELP or email us at contact@destresspsychology.com. You can opt out at any time by replying STOP.
Mobile SMS Messaging Privacy Policy:
Information collected:
We may collect information, such as name, phone number, and email address.
Use of information collected:
We may use the information we collect to perform the services requested including billing, customer service, appointment reminders and other administrative requests.
Sharing of information collected:
We may share information we collect with payment processors, legal authorities, partners so that these service providers can perform their normal duties. We do not share, sell, rent, or trade any information provided with third parties for promotional purposes.
As a current or prospective customer, you understand that you can text us STOP at any time to opt out of receiving SMS text messages from us. You can text us HELP at any time to receive help. You understand that the messaging frequency may vary. Messaging & data rates may apply. Your mobile information will not be shared with any third parties/affiliates for marketing/promotional purposes. All policies are followed as per CTIA guidelines 5.2.1. At any time if you want your information to be removed, you can contact us via our email address or regular mail.
You can contact us for any privacy related queries via our email address or regular mail.
Our email address:
contact@destresspsychology.com
Our address:
De-Stress Psychological Services, LLC 1298 Bay Dale Drive, Suite 211
Arnold, MD 21012
US
NOTICE OF PRIVACY PRACTICES / HIPAA PRIVACY POLICY
Notice of Policies and Practices to Protect the Privacy of Patient Health Information
This Notice is provided to you in accordance with the privacy regulations enacted as a result of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW THIS NOTICE CAREFULLY.
I. Uses and Disclosures for Treatment, Payment, and Health Care Operations
I may use or disclose your protected health information (PHI), for treatment, payment, and health care operations purposes with your written authorization.
• “PHI” refers to information in your health record that could identify you.
o Treatment is when I provide, coordinate, or manage your health care and other services related to your health care. An example of treatment would be when I consult with another health care provider, such as your family physician or another psychologist.
If you participate in a virtual visit (telehealth), your information will be shared
electronically via a secure transmission to facilitate the virtual visit.
If you are incapacitated or are in an emergency situation, I can exercise my
professional judgment and may use and disclose your PHI to provide for
emergency health care needs if I determine that it is in your best interest.
o Payment is when I obtain reimbursement for your healthcare. Examples of payment include, but are not limited to, when I use and/or disclose your PHI for billing and/or collections activities/services, or if I disclose your PHI to your health insurer to obtain reimbursement for your health care or to determine eligibility or coverage. As a fee-for-service, self-pay provider, I DO NOT directly disclose PHI to health insurers to obtain reimbursement for health care nor to determine eligibility or coverage. Rather, I collect payment from you at the time of service. Upon request, I can provide you with a Superbill, which is a document that you may choose to submit to your insurance company, AT YOUR OWN DISCRETION, in an attempt to receive reimbursement for your health care. A Superbill contains your PHI among other information. If the responsible party is different than you, the responsible party’s information will also be listed on the superbill. A superbill also lists the reimbursement recipient. It is YOUR responsibility to contact your insurance provider and determine your eligibility/coverage and reimbursement amount for the out-of-network services that you may receive at De-Stress Psychological Services, LLC.
o Health Care Operations are activities that relate to the performance and operation of my practice. Examples of health care operations include, but are not limited to, quality assessment and improvement activities, business-related matters such as audits and administrative services, and case management and care coordination. Business Associates of De-Stress Psychological Services, LLC may access and/or share PHI, such as the vendors SimplePractice, Hushmail for Healthcare, and iPlum (professional).
§ I use SimplePractice, a HIPAA-compliant practice management and all-in-one electronic health record software, to streamline administrative tasks, including scheduling appointments, billing, processing payments, managing clinical documentation and measurement-based care, secure messaging, conducting telehealth sessions (Platform), and allowing clients to manage their care with the Client Portal.
§ SimplePractice partnered with Payment Card Industry (PCI)-compliant Stripe to provide an integrated payment processing solution for online card payments.
§ I use Hushmail for Healthcare, a HIPAA-compliant platform, to host secure, encrypted email.
§ I use iPlum (Professional) to streamline HIPAA-compliant secure communications, including HIPAA-compliant calling, text messaging, and HIPAA-secure voicemail. Of note, all texts are encrypted/secure at my end no matter your end user application. However, secure texting means both ends (you and I) have the iPlum app and texts are encrypted end to end. As my client, you can get a free iPlum app (from the Apple app store or Google play) via my invitation for secure texting. Also, as my client, you can create a free account online at the iPlum portal instead of downloading the iPlum mobile app. Both the mobile app and the portal can be used for secure texting.
§ My website, hosted by SquareSpace, has a Contact Form developed by Hushmail.
§ If you participate in psychotherapy services with me, you consent to the use and disclosure of your PHI for the purposes described above. Your information will be handled in accordance with applicable federal and state privacy laws and used solely to facilitate the purposes described above. If an arrangement with a business associate involves the use or disclosure of your PHI, I will have a written contract in which the business associate agrees to maintain the confidentiality of your PHI.
• “Use” applies only to activities within my practice such as sharing, employing,
applying, utilizing, examining, and analyzing information that identifies you.
• “Disclosure” applies to activities outside of my practice such as releasing,
transferring, or providing access to information about you to other parties.
• “Authorization” is your written permission to disclose confidential mental health
information. All authorizations to disclose must be on a specific legally required form.
II. Other Uses and Disclosures Requiring Authorization
I may use or disclose PHI for purposes outside of treatment, payment, or health care operations when your appropriate authorization is obtained. In those instances when I am asked for information for purposes outside of treatment, payment, or health care operations, I will obtain an authorization from you before releasing this information. An authorization is also required before releasing Psychotherapy Notes. “Psychotherapy Notes” are given a greater degree of protection than PHI.
I do not keep “psychotherapy notes” as that term is defined in 45 CFR § 164.501; rather, I keep a record of your treatment and the services you receive from me.
You may revoke or modify all such authorizations (of PHI or psychotherapy notes) at any time, provided each revocation or modification is in writing. You may not revoke an authorization to the extent that (1) I have relied on that authorization (action has already been taken in reliance upon it); or (2) if the authorization was obtained as a condition of obtaining insurance coverage, law provides the insurer the right to contest the claim under the policy. Of note, a revocation or modification is not effective until I receive it in writing.
I will also obtain an authorization from you before using or disclosing PHI in a way that is not described in this Notice. An authorization is also required for using or disclosing PHI for marketing purposes or for using or disclosing PHI in a way that is considered a sale of PHI. However, as a licensed psychologist, I do not use or disclose your PHI for marketing purposes, and I do not sell your PHI in the regular course of my business.
III. Uses and Disclosures without Authorization
Other Uses and Disclosures of Health Information Required or Permitted by Law:
There are a number of unusual circumstances in which the privacy rule permits mental health providers to make certain disclosures without consent or authorization, though we will make every effort to discuss it fully with you before taking any action and we will disclose the minimum necessary information.
We may use or disclose PHI without your consent or authorization in the following circumstances:
· When disclosure is required by state or federal law, and the use or disclosure complies with and is limited to the relevant requirements of such law.
· Child Abuse – If I have reason to suspect that a child has been sexually or physically abused, or is subjected to abuse or neglect, I must report this suspicion to the appropriate authorities.
· Adult and Domestic Abuse – I may disclose PHI regarding you if I reasonably believe that you are a victim or perpetrator of elder or vulnerable adult abuse, neglect, or exploitation.
· Health Oversight Activities – If I receive a subpoena from an official Maryland agency because they are auditing/investigating my practice, I must disclose any PHI requested by the agency.
· Judicial and Administrative Proceedings – If you are involved in a court proceeding and a request is made for information about your diagnosis and treatment or the records thereof, I will attempt to claim such information is privileged under state law, and I will not to release information without your written authorization or a court order. The privilege does not apply when you are being evaluated by a third party, or where the evaluation is court ordered. You will be informed in advance if this is the case. Likewise, I may use/disclose your PHI without your Authorization when responding to a court or administrative order, although my preference is to obtain an Authorization from you before doing so. I may disclose your PHI in the course of any judicial or administrative proceeding as allowed or required by law, or as directed by a proper court order.
· Serious Threat to Health or Safety – If you communicate to me a specific threat of imminent harm against another individual or if I believe that there is clear, imminent risk of physical or mental injury being inflicted against another individual, I may make disclosures that I believe are necessary to protect that individual from harm. If I believe that you present an imminent, serious risk of physical or mental injury or death to yourself, I may make disclosures I consider necessary to protect you from harm.
· Appointment and Other Reminders, Check-In, and Results - I may use and disclose your PHI to contact you and remind you of an appointment. I may call you by name in the waiting room when I am getting you for your appointment. You may receive a voicemail, text message, and/or email reminding you of an appointment, but the minimum amount of information necessary to communicate the appointment will be left.
· I am allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. I must meet many conditions in the law before I can share your information for these purposes. For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.
· When the use and disclosure without your consent or authorization is allowed under sections of Section 164.512 of the Privacy Rule and Maryland’s confidentiality law. This includes certain narrowly-defined disclosures to law enforcement agencies, to a health oversight agency (such as HHS or the Maryland Department of Health and Mental Hygiene), to a coroner or medical examiner, for public health purposes relating to disease or FDA-regulated products, or for specialized government functions.
IV. Patient’s Rights and Psychologist’s Duties
Patient’s Rights:
You have the right to:
o Right to Request Restrictions – You have the right to request a restriction on certain uses and disclosures of protected health information by delivering the request in writing to my office. However, I am not required to grant the request, but I will comply with any request that is granted.
o Right to Restrict Disclosures When You Have Paid For Your Care Out-of-Pocket - When you pay out-of-pocket in full for my services, you have the right to restrict certain disclosures of PHI to a health plan for the purpose of payment or my operations with your health insurer. I will say “yes” unless a law requires me to share that information. If you have a clear preference for how I share your information in certain situations (e.g. sharing information with your family, close friends, etc.), talk to me. Tell me what you want me to do, and I will follow your instructions provided it does not violate my limits of confidentiality or interfere with your care.
o Right to Receive Confidential Communications by Alternative Means and at Alternative Locations – You have the right to request and receive confidential communications of PHI by alternative means and at alternative locations. (For example, you may not want a family member to know that you are seeing me. On your request, I will send your bills to another address.) You can also ask that I contact you in a specific way (for example, home or office phone). I will say “yes” to all reasonable requests.
o Right to Inspect and Copy – You have the right to request that you be allowed to inspect and/or receive a copy of your health record and billing record (electronic or paper copy) in my electronic health record system for as long as the PHI is maintained in the record. You may exercise this right by delivering the request in writing to our office using the form we provide to you upon request. I may deny your access to PHI under certain circumstances, such as if I believe the disclosure would be reasonably likely to endanger your life or physical safety. In some cases where access is denied, you may have the right to appeal the denial. On your request, I will discuss with you the details of the request and denial process for PHI. I will address your request to inspect or obtain a copy of your record within 21 working days after receiving your written request. If we agree in advance, I can provide you with a summary (or explanation) of your record in place of a copy of your record. We must agree in advance that it is acceptable for me to provide you with a summary (or explanation), and to the pro-rated fee of $180/hour for writing the summary or explanation. I generally must give you the summary no later than 30 days after receiving your written request. If you want physical hard copies of your record, you will be charged a copying fee of $0.60 (sixty cents) per page (plus postage, if applicable). Since these are professional records, they can be misinterpreted and/or upsetting to untrained readers. As a result, I recommend that you inspect them in my presence, so that we can discuss the contents as necessary. Generally, I must provide your medical record in the format (i.e., paper or electronic) that you request, if it is not difficult to do so. I also must make sure that I send your records to you in a secure manner. Due to security concerns, I am reluctant to send copies of medical records by e-mail or fax.
Of note, patients also have the right to inspect or obtain a copy (or both) of Psychotherapy Notes, unless the provider believes the disclosure of the record will be injurious to the patient’s health. However, as a reminder, I do not keep psychotherapy notes as that term is defined in 45 CFR § 164.501.
o Right to Amend – You have the right to request an amendment of PHI, to correct incomplete or incorrect information, for as long as the PHI is maintained in the record by delivering written request to my office using the form I provide to you upon request. On your request, I will discuss with you the details of the amendment process. I may deny your request. You have the right to file a statement of disagreement if your amendment is denied and require that the request for amendment and any denial be attached in all future disclosures of your protected health information.
o Right to an Accounting – You generally have the right to obtain an accounting of disclosures of your PHI as required to be maintained by law by delivering a written request to my office using the form I provide to you upon request. The accounting will not include internal uses of information for treatment, payment, or operations, disclosures made to you or made at your request. On your request, I will discuss with you the details of the accounting process.
o Right to a Paper Copy – You have the right, at any time, to obtain a paper copy of the Notice of Privacy Practices by making a request at my office, even if you have agreed to receive the notice electronically. I will provide you with a paper copy promptly.
o Right to Be Notified if There is a Breach of Your Unsecured PHI - You have a right to be notified if: (a) there is a breach of use or disclosure of your PHI in violation of the HIPAA Privacy Rule) involving your PHI; (b) that PHI has not been encrypted to government standards; and (c) my risk assessment fails to determine that there is a low probability that your PHI has been compromised.
o Right to Revoke - Any authorizations that you made previously to use or disclose information, except to the extent that the information or action has already been taken by delivering a written revocation to our office.
o Review this Notice - Before signing the consent authorizing use and disclosure of your protected health information for treatment, payment, and health care operations purposes.
Psychologist’s Duties:
I am required to:
• Maintain the privacy and security of your PHI as required by law and to provide you with this Notice of my legal duties and privacy practices with respect to your PHI that I collect and maintain.
• Abide by the terms currently in effect of this Notice, unless I notify you of changes.
• Notify you if I cannot accommodate a requested restriction or request.
• Notify you if a breach of your unsecured PHI occurs
V. Complaints
If you are concerned that I have violated your privacy rights, or you disagree with a decision I made about access to your records, you may file a complaint with me, as the Privacy Officer for my practice by contacting me at my primary office address, 1298 Bay Dale Drive, Suite 211, Arnold, MD 21012, or via phone at 410-260-0160.
You may also send a written complaint to the Secretary of the U.S. Department of Health and Human Services. I can provide you with the appropriate address upon request.
I will not retaliate against you if you file a complaint about my privacy practices.
VI. Effective Date, Restrictions, and Changes to Privacy Policy
This notice will go into effect on February 23, 2025 and will remain in effect until I replace it.
I reserve the right to change the terms of this notice and to make the new notice
provisions effective for all PHI that I maintain. The new Notice will be available upon request, as well as, in my office, and on my website.