How we handle protected health information

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who this notice applies to

Book Therapy Session operates an independent directory of licensed mental-health therapists. When you submit our matching form, you share information that may include protected health information (PHI) — information about your mental-health concerns, treatment preferences, and contact details. This notice describes how we use and disclose that information.

The licensed therapists listed in the directory maintain their own independent practices. Each therapist's own Notice of Privacy Practices applies to the clinical care they provide once you become their client. This notice covers only the matching process operated by the directory.

How we use and disclose your information

We use the information you provide on the matching form for the following purposes:

• To match you with a licensed therapist whose specialties, location, language, and insurance acceptance fit what you've told us.
• To route your inquiry to the intake coordinator at the practice of the therapist we recommend.
• To follow up with you about your inquiry, at the contact information you provided.

We do not use your information for marketing purposes. We do not sell your information. We do not share it with third parties other than the therapist's practice we route you to, and the vendors we use to deliver email and operate the matching service. Each such vendor that touches PHI is bound by a Business Associate Agreement (BAA) per HIPAA requirements.

Other permitted uses and disclosures

We may use or disclose your information without your further authorization in the limited circumstances HIPAA permits, including:

• When required by law, regulation, or court order.
• For public health and safety activities required by law, including the prevention of serious threat to a person's health or safety.
• For audits or compliance reviews by the U.S. Department of Health and Human Services.

Your rights

You have the right to:

• Inspect and obtain a copy of the information we hold about you. Email [email protected] to request a copy.
• Request correction of information that is incorrect or incomplete.
• Request deletion of your information. We will honor deletion requests subject to legal record-keeping obligations.
• Request a list of disclosures we have made of your information.
• Request that we restrict certain uses or disclosures.
• Withdraw your authorization at any time. Withdrawal applies prospectively and does not affect any actions we have already taken based on your prior authorization.
• File a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

Breach notification

We will notify you in writing if we discover that your protected health information has been the subject of a breach, as required by HIPAA's Breach Notification Rule. Notice will be sent within 60 calendar days of the discovery of the breach.

Changes to this notice

We reserve the right to change this notice. Any changes will apply to information we already hold about you as well as information we receive in the future. We will post the current version on this page and note the effective date.

Contact and complaints

For privacy questions, requests to exercise the rights above, or complaints, contact our Privacy Officer at [email protected].

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/privacy/hipaa/complaints.

Crisis resources

Book Therapy Session is not a crisis service. If you are in immediate danger, call 911. For mental-health crisis support, call or text 988 (Suicide & Crisis Lifeline), available 24 hours a day across the U.S.