Privacy Policy
Health & Psychiatry
(A DBA of Health and Psychiatrists Consultants LLC)
1. INTRODUCTION AND SCOPE OF POLICY
This Privacy Policy (the “Policy”) governs the collection, use, storage, disclosure, and protection of personal information and Protected Health Information (“PHI”) by Health and Psychiatrists Consultants LLC, a Florida limited liability company doing business as Health & Psychiatry (the “Company,” “we,” “us,” or “our”), in connection with your access to and use of https://healthandpsychiatry.com (the “Platform”) and any associated services, including telepsychiatry, psychiatric evaluation, medication management, and related healthcare services.
This Policy applies to all users of the Platform, including patients, prospective patients, and any individuals whose information is collected in connection with the provision of services.
This Policy is intended to supplement, and not replace, the Company’s Notice of Privacy Practices (NPP), which governs the use and disclosure of PHI under HIPAA.
2. REGULATORY FRAMEWORK AND COMPLIANCE
The Company operates as a healthcare provider and is subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), including the Privacy Rule, Security Rule, and Breach Notification Rule. These regulations govern the protection of individually identifiable health information and require implementation of safeguards to ensure confidentiality, integrity, and availability of PHI .
In addition to HIPAA, the Company complies with:
- Applicable state privacy and health information laws, which may impose stricter requirements than federal law depending on the patient’s location
- The Federal Trade Commission (FTC) Health Breach Notification Rule, which requires notification to affected individuals in the event of unauthorized disclosure of unsecured health information
- Industry standards governing telehealth privacy and data security, including secure transmission and storage of patient information
Where state law provides greater privacy protection or additional rights, such law shall prevail.
3. CATEGORIES OF INFORMATION COLLECTED
The Company collects information directly from you, automatically through your use of the Platform, and from third parties involved in your care or payment process.
Such information may include personally identifiable information, demographic data, contact information, and health-related information provided in connection with clinical services.
Health information includes medical history, psychiatric evaluations, diagnoses, treatment plans, medication information, and communications between you and providers.
Additionally, the Company may collect technical and usage data, including device identifiers, IP addresses, browser type, access times, and interaction data relating to your use of the Platform.
4. PROTECTED HEALTH INFORMATION (PHI)
PHI includes any individually identifiable health information that relates to your physical or mental health condition, the provision of healthcare to you, or payment for such healthcare.
The Company uses and discloses PHI strictly in accordance with HIPAA for purposes including treatment, payment, and healthcare operations. PHI is protected through administrative, technical, and physical safeguards designed to prevent unauthorized access or disclosure, including encryption, access controls, and secure storage systems.
Telepsychiatry services involve electronic transmission of PHI, and the Company ensures that such transmission occurs through secure and compliant communication channels consistent with HIPAA requirements .
5. PURPOSES OF INFORMATION USE
Information collected by the Company is used for purposes including, but not limited to, the provision of healthcare services, scheduling and appointment management, communication with patients, billing and payment processing, compliance with legal and regulatory obligations, quality assurance, operational improvement, and system security.
Information may also be used to verify identity, ensure patient safety, and maintain the integrity of clinical records.
6. TELEHEALTH PRIVACY CONSIDERATIONS
The provision of telepsychiatry services introduces specific privacy and security considerations, including risks associated with electronic communication, remote access, and patient environments.
You acknowledge that telehealth interactions may be subject to limitations in privacy due to environmental factors, technology vulnerabilities, or connectivity issues, although the Company employs reasonable safeguards to mitigate such risks.
The Company requires identity verification, secure communication channels, and documented patient consent for telehealth interactions in order to maintain compliance with applicable regulations .
7. DISCLOSURE OF INFORMATION
The Company may disclose information, including PHI, to healthcare providers involved in your care, administrative personnel, and third-party service providers acting as business associates under legally binding agreements requiring compliance with HIPAA standards.
Information may also be disclosed to insurance providers, billing entities, legal authorities, or regulatory bodies where required by law or necessary to protect the rights, safety, or welfare of individuals.
Disclosures are limited to the minimum necessary information required for the intended purpose, except where broader disclosure is authorized by law or by the patient.
8. BUSINESS ASSOCIATES AND THIRD-PARTY SERVICES
The Company utilizes third-party service providers, including telehealth platforms, cloud infrastructure providers, payment processors, and data storage vendors, which may have access to PHI in the course of providing services.
Such entities are engaged as “Business Associates” and are contractually obligated to implement safeguards consistent with HIPAA and to protect PHI from unauthorized use or disclosure.
The Company is not responsible for the independent privacy practices of third-party websites or services not controlled by the Company.
9. DATA SECURITY AND SAFEGUARDS
The Company implements a comprehensive security program that includes administrative, technical, and physical safeguards designed to protect personal information and PHI from unauthorized access, alteration, disclosure, or destruction.
These safeguards include, but are not limited to, encryption of data in transit and at rest, role-based access controls, audit logging, secure authentication mechanisms, and regular risk assessments.
HIPAA requires covered entities to ensure the confidentiality, integrity, and availability of electronic PHI through such safeguards .
10. DATA RETENTION
The Company retains personal information and PHI for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and professional recordkeeping requirements.
Retention periods may vary depending on applicable laws and the nature of the information, and may extend for several years following the conclusion of treatment.
11. PATIENT RIGHTS
Under HIPAA and applicable state laws, you may have rights with respect to your PHI, including the right to access, inspect, and obtain copies of your health records, request corrections or amendments, request restrictions on certain uses or disclosures, and receive an accounting of disclosures.
You may also have the right to request confidential communications and to file complaints regarding privacy practices without fear of retaliation.
Certain rights may be subject to limitations under applicable law.
12. BREACH NOTIFICATION
In the event of a breach involving unsecured PHI or personal health information, the Company will provide notification in accordance with applicable laws, including HIPAA and, where applicable, the FTC Health Breach Notification Rule.
Such notification may include details regarding the nature of the breach, the information involved, and steps you may take to protect yourself.
13. COOKIES AND TRACKING TECHNOLOGIES
The Platform may utilize cookies, analytics tools, and similar technologies to enhance user experience, analyze usage patterns, and improve system performance.
Such technologies may collect non-health-related data; however, the Company does not knowingly use tracking technologies in a manner that violates HIPAA or applicable healthcare privacy standards.
13A. Sensitive Data and Advertising Restrictions
The Company does not knowingly use Protected Health Information or health-related user activity for targeted advertising, remarketing, or behavioral profiling.
The Company further does not permit the use of tracking technologies in a manner that would transmit PHI to third-party advertising platforms, including but not limited to social media platforms, search engines, or analytics providers, in violation of applicable laws or regulatory guidance.
Where analytics tools are utilized, such tools are configured to avoid collection of PHI and to operate on an anonymized or de-identified basis to the extent reasonably practicable.
14. CROSS-BORDER DATA TRANSFERS
While the Company operates within the United States, certain service providers or technical systems may process data in other jurisdictions. In such cases, the Company ensures that appropriate safeguards are in place to protect information in accordance with applicable laws.
15. CHILDREN’S PRIVACY
The Platform is not intended for use by minors without the involvement of a parent or legal guardian. Where services are provided to minors, the Company collects and processes information in accordance with applicable laws governing parental consent and access.
16. LIMITATIONS OF PRIVACY PROTECTION
While the Company implements robust safeguards, no system can guarantee absolute security. You acknowledge that there are inherent risks associated with electronic communication and data transmission, and the Company shall not be liable for unauthorized access resulting from factors beyond its reasonable control.
17. CHANGES TO THIS POLICY
The Company reserves the right to modify this Privacy Policy at any time. Updated versions will be posted on the Platform, and continued use of the Platform constitutes acceptance of such modifications.
18. CONTACT INFORMATION
For questions, requests, or complaints regarding this Privacy Policy or privacy practices:
Health & Psychiatry
Email: legal@healthandpsychiatry.com
Phone: +1 (833) 377-2526