Notice of Privacy Practices

Bostic Solutions (“the practice,” “we,” “us”) is required by law to maintain the privacy of your Protected Health Information (“PHI”), to provide you with this Notice describing our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of your unsecured PHI. We are required to abide by the terms of this Notice while it is in effect.

How We May Use and Disclose Your Health Information

Treatment. We may use and disclose your PHI to provide, coordinate, or manage your treatment, including sharing information with other clinicians involved in your care where appropriate.

Payment. We may use and disclose your PHI to bill and collect payment for services, including submitting claims to your health insurance plan and verifying coverage (including insurance type and eligibility) prior to treatment.

Health Care Operations. We may use and disclose your PHI to support the day-to-day operations of the practice, such as quality assessment, staff training, clinical supervision, and administrative activities.

As Required by Law. We will disclose PHI when required to do so by federal, state, or local law.

To Avert a Serious Threat to Health or Safety. We may disclose PHI when necessary to prevent a serious threat to your health or safety, or the health or safety of the public or another person, consistent with applicable law and ethical standards.

Public Health, Health Oversight, and Legal Proceedings. We may disclose PHI for public health activities, in response to a valid court or administrative order, or as otherwise permitted or required by law (for example, mandatory reporting of suspected abuse or neglect).

Psychotherapy Notes. Notes recorded during a counseling session that are kept separate from the rest of your medical record receive special protection under HIPAA. In almost all cases, we will obtain your written authorization before using or disclosing psychotherapy notes, even for treatment, payment, or health care operations purposes.

Telehealth

Most sessions at our practice are conducted via secure, encrypted telehealth video platforms rather than in person. The same privacy and confidentiality protections described in this Notice apply to telehealth sessions. To help protect your privacy during a telehealth session, we recommend joining from a private, quiet location where you will not be overheard and using a secure, personal internet connection rather than public Wi-Fi. As noted above under Google Calendar integration in our Privacy Policy, calendar entries associated with scheduling never include your name or clinical information — only whether a session is telehealth or in-person. For full details on telehealth risks, benefits, and what we ask of you, see our Telehealth Informed Consent.

Your Rights

• Right to Request Restrictions on certain uses and disclosures of your PHI.
• Right to Request Confidential Communications by an alternative means or at an alternative location.
• Right to Inspect and Copy your PHI, with limited exceptions.
• Right to Amend your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures of your PHI made by the practice, with certain exceptions.
• Right to a Paper Copy of this Notice at any time, even if you agreed to receive it electronically.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any information we receive in the future. An updated Notice will be available upon request from our office and posted on this page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our office or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

Contact Us

Questions about this Notice, or requests relating to the rights described above, can be directed to our office at info@bosticsolutions.com or (973) 910-0518.