Sharing & Disclosure Policy

1. Our Commitment to Privacy

At In Therapy, we recognize that your mental health information is deeply personal. We are committed to protecting the privacy, security, and confidentiality of your protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA), applicable state laws, and ethical standards governing psychotherapy practice.

2. Information We Collect

To provide safe and effective care, we collect and maintain the following types of information:

• Demographic & Contact Details: Name, date of birth, address, phone number, email, emergency contacts.
• Clinical Records: Session notes, assessment results, treatment plans, progress reports, and diagnostic information.
• Administrative & Billing Data: Insurance information, payment records, appointment history, and consent forms.
• Digital Communications: Secure portal messages, email correspondence, and telehealth session metadata (encrypted and stored securely).

3. Permitted Uses & Disclosures

We may use or share your PHI only for the following purposes, and only to the extent necessary:

• Treatment Coordination: Sharing information with other licensed healthcare providers involved in your care (with your written consent).
• Payment & Billing: Processing insurance claims, verifying coverage, and collecting co-pays or outstanding balances.
• Healthcare Operations: Quality improvement, staff training, compliance audits, and administrative functions that support our clinical services.

4. Legal, Safety & Mandatory Disclosures

While confidentiality is fundamental to therapy, there are legally mandated and safety-critical exceptions where we may disclose information without your explicit consent:

• Imminent Risk: If you pose a serious, imminent threat of harm to yourself or others, we are legally required to notify law enforcement, emergency services, or identifiable potential victims.
• Abuse or Neglect: Suspected abuse, neglect, or exploitation of minors, elders, or vulnerable adults triggers mandatory reporting to appropriate state authorities.
• Court Orders & Legal Proceedings: We may disclose records in response to a valid court order, subpoena, or legal mandate, after making reasonable efforts to notify you unless prohibited by law.
• Public Health & Safety: Reporting communicable diseases, death, or injury as required by federal, state, or local health authorities.

5. Your Rights & Choices

You have the right to control and access your health information under HIPAA and applicable regulations:

• Right to Access & Copy: Request a copy of your records within 30 days of submission. A reasonable fee may apply for copying/transmission.
• Right to Amend: Request corrections to inaccurate or incomplete records. We will respond in writing within 15 business days.
• Right to Request Restrictions: Ask us to limit certain uses or disclosures. We will accommodate reasonable requests where legally permissible.
• Right to Confidential Communications: Specify alternative contact methods or addresses for communications regarding your care.
• Right to an Accounting of Disclosures: Request a log of disclosures made for non-treatment, non-payment, or non-operations purposes over the past six years.

6. Contact & Complaint Procedures

If you have questions about this policy, wish to exercise your rights, or believe your privacy has been compromised, please contact our Privacy Officer directly:

7. Policy Updates & Acknowledgment

We may update this Sharing & Disclosure Policy periodically to reflect changes in services, technology, or regulatory requirements. The updated effective date will be posted at the top of this page. Continued use of our services constitutes acknowledgment of the current policy. You are encouraged to review this document annually or when significant changes occur.