Privacy Policy & HIPAA Notice

Blooming Mind is committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws. This policy describes our practices regarding both general personal information and Protected Health Information (PHI).

The website contact form should ONLY be used for:

• Requesting general information about our services
• Scheduling appointment requests
• Insurance and billing questions (without PHI)
• General administrative inquiries

The website contact form should NEVER be used for:

• Describing symptoms or medical conditions
• Discussing medications or treatments
• Sharing mental health information or history
• Emergency or crisis situations
• Any information you wish to keep confidential

Through our website contact form, we collect:

• Name
• Email address
• Phone number (optional)
• Reason for inquiry (from predefined categories)
• Message content (which should not contain PHI)

For established patients (through secure channels only):

• Medical history and treatment information
• Insurance information
• Prescription information
• Other health-related information necessary for treatment

Under HIPAA, you have specific rights regarding your Protected Health Information:

• Right to Access: You may request copies of your medical records
• Right to Amend: You may request corrections to your health information
• Right to Accounting: You may request a list of disclosures of your PHI
• Right to Request Restrictions: You may request limitations on how we use your PHI
• Right to Confidential Communications: You may request we communicate with you in a specific way
• Right to Notice: You have the right to receive this privacy notice

To exercise any of these rights, please contact us directly at our office. Do not submit requests through the website contact form.

Website Security:

• HTTPS encryption for all website traffic
• Rate limiting to prevent abuse
• Security headers to prevent common attacks
• Regular security updates and monitoring

Patient Information Security:

• PHI is never collected through the website
• Patient records are stored in HIPAA-compliant systems only
• Access controls and audit logs for all PHI access
• Regular security training for all staff
• Business Associate Agreements with all vendors handling PHI

Our website uses the following third-party services:

• Vercel: Website hosting (does not process PHI)
• Email Service: For contact form submissions only (not HIPAA-compliant, no PHI transmitted)

• Call 911 immediately
• Call the National Crisis Hotline: 988
• Go to your nearest emergency room

For questions about this privacy policy, your rights under HIPAA, or to exercise your privacy rights, please contact us directly:

Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

Legal Disclaimer

This website provides general information only and does not constitute medical advice. The contact form is not a secure method of communication and should never be used to transmit protected health information. By using this website, you acknowledge and accept these limitations. Always consult with a qualified healthcare provider for medical advice and treatment.