How We Use Your Information

Our Commitment to Confidentiality

At In Therapy, your privacy and trust are foundational to the therapeutic relationship. We handle all personal and health-related information with the utmost care, adhering to strict ethical standards, HIPAA regulations, and applicable data protection laws. This page outlines how we collect, use, protect, and share your information.

Information We Collect

We only collect information that is necessary to provide you with safe, effective, and personalized therapeutic care. This includes:

How We Use Your Information

Your information is used strictly for purposes that directly benefit your therapeutic journey and ensure the operational integrity of our practice:

• Delivering Care: To schedule sessions, prepare for appointments, track progress, and adjust treatment plans in collaboration with your therapist.
• Administrative & Billing: To process payments, verify insurance eligibility, generate receipts, and manage appointment reminders.
• Platform Security: To verify identity, prevent unauthorized access, and maintain HIPAA-compliant digital infrastructure.
• Quality Improvement: To conduct anonymized, aggregate reviews of care delivery (never identifiable to you) to enhance therapist training and service standards.
• Legal & Ethical Compliance: To fulfill mandatory reporting obligations, respond to lawful requests, or maintain professional licensure requirements.

Information Sharing & Disclosure

We maintain strict boundaries around who can access your information. Data is only shared in the following circumstances:

• With Your Consent: You may authorize us to share records with other healthcare providers, family members, or insurance representatives.
• Treatment Team: Licensed therapists, care coordinators, and billing specialists directly involved in your care.
• Legal Requirements: Court orders, subpoenas, or mandatory reporting of imminent harm, abuse, or neglect as required by state/federal law.
• Service Providers: HIPAA-compliant vendors hosting our secure platform, billing systems, and communication tools (bound by strict data processing agreements).

Data Security & Protection

Protecting your information is a technical and ethical priority. We implement industry-leading safeguards:

• End-to-end encryption for all video sessions and secure messaging
• Role-based access controls ensuring only authorized clinicians view your records
• Regular third-party security audits and penetration testing
• Automatic session timeouts and multi-factor authentication for staff portals
• Secure, geographically distributed backups with rapid recovery protocols

While no system is completely immune to risk, we continuously monitor and update our defenses to meet or exceed HIPAA, GDPR, and SOC 2 standards.

Your Rights & Choices

You maintain full control over your information. Under applicable privacy laws, you have the right to:

• Request access to your complete clinical records
• Request corrections or amendments to inaccurate information
• Restrict certain uses or disclosures of your data
• Receive a copy of your information in a portable format
• Withdraw consent for non-mandatory data processing at any time
• Request deletion of non-essential administrative data (subject to legal retention requirements)

To exercise these rights, please contact our Privacy Officer through the secure portal or the contact information below. We respond to all legitimate requests within 30 days.

Policy Updates

We may revise this policy to reflect changes in our practices, technology, or legal obligations. Material changes will be communicated via secure email or platform notification. Your continued use of our services after updates constitutes acceptance of the revised terms.