HIPAA Privacy Policy

Effective: July 1, 2025
Practice Name: Y’all Collective

NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are required by law to maintain the privacy and security of your protected health information (PHI), to provide you with this Notice of our privacy practices, and to notify you promptly if a breach occurs that may compromise the privacy or security of your information.

This Notice applies to all records of your care generated by Y’all Collective, whether made by practice personnel or others involved in your care. It describes how we may use and disclose your PHI and your rights regarding your medical information.

If you have questions about this notice or your privacy rights, contact our Privacy Officer listed above.

TABLE OF CONTENTS

  • How We May Use or Disclose Your Health Information

  • Uses and Disclosures That Require Authorization

  • Your Rights Regarding Your Health Information

  • Changes to This Notice

  • How to File a Complaint

  • Website Privacy Policy

  • Healthcare Disclaimer

A. HOW WE MAY USE OR DISCLOSE YOUR HEALTH INFORMATION

We may use and disclose your PHI for the following purposes without your written authorization:

1. Treatment

To provide, coordinate, or manage your healthcare and related services.

2. Payment

To bill and collect for services provided, including from insurance companies or third-party payers.

3. Healthcare Operations

For administrative functions, quality improvement, training, compliance programs, and other activities essential to the functioning of our practice.

4. Business Associates

We may share PHI with contractors or vendors (“business associates”) who perform services on our behalf, such as billing, legal, or IT support. Business associates must safeguard your PHI per HIPAA regulations and state law.

5. Appointment Reminders & Communications

We may contact you about appointments or treatment alternatives. You may opt out of such communications.

6. Friends and Family Involved in Your Care

Unless you object, we may disclose information to individuals involved in your care or payment for your care.

7. Public Health and Safety

We may disclose your PHI to:

  • Prevent or control disease or injury,

  • Report child or elder abuse (mandated by Colorado law),

  • Report adverse drug reactions or defective products,

  • Notify individuals of exposure to communicable diseases.

8. Health Oversight and Legal Matters

We may share PHI with government oversight agencies or if required by a court order, subpoena, or administrative order. Colorado law requires us to minimize the scope of disclosure.

9. Workers’ Compensation

We may release PHI relevant to a workers’ comp claim.

10. Organ and Tissue Donation, Coroners

As authorized by law for identifying deceased persons or facilitating organ donation.

11. Emergencies and Disaster Relief

As permitted to assist in disaster response or emergency treatment when consent cannot be obtained.

12. Specialized Government Functions

Such as military, national security, and correctional institution disclosures.

13. Breach Notification

If there is a breach of unsecured PHI, we will notify you in accordance with HIPAA and Colorado’s consumer data protection laws (C.R.S. § 6-1-716).

B. USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION

We will obtain your written permission before using your PHI for:

  • Marketing communications involving financial remuneration,

  • Sale of PHI,

  • Most sharing of psychotherapy notes.

You may revoke your authorization at any time in writing, except to the extent we have already relied on it.

C. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

1. Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We must honor a restriction if you pay in full out-of-pocket and request that we not share that information with your insurer.

2. Right to Confidential Communications

You may request how or where we communicate with you (e.g., only by mail or at work).

3. Right to Inspect and Copy

You may access your medical records, including electronic copies. Requests must be in writing. We may charge a reasonable cost-based fee in accordance with federal and Colorado law (C.R.S. § 25-1-802).

4. Right to Amend

You may request a correction to your records if you believe they are incomplete or inaccurate.

5. Right to an Accounting of Disclosures

You may request a list of disclosures of your PHI, excluding those for treatment, payment, or operations.

6. Right to a Paper or Electronic Copy of This Notice

You may request a copy of this notice at any time, even if you agreed to receive it electronically.

D. CHANGES TO THIS NOTICE

We reserve the right to update this notice at any time. Updated notices will be posted in our office and on our website.

E. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights:

OCRMail@hhs.gov
Complaint Form: https://www.hhs.gov/ocr/privacy/hipaa/complaints/

You will not be retaliated against for filing a complaint.

Privacy Policy

This privacy policy sets out how “Y’all Collective” uses and protects any information that you give “Y’all Collective” when you use this website. “Y’all Collective” is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. “Y’all Collective” may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 7/1/2025.

We may collect the following information:

  • name and job title

  • contact information including email address

  • demographic information such as postcode, preferences and interests

  • other information relevant to customer surveys and/or offers

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • Internal record keeping.

  • We may use the information to improve our products and services.

  • We may periodically send promotional email about new products, special offers or other information which we think you may find interesting using the email address which you have provided.

  • From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail.

  • We may use the information to customize the website according to your interests.

  • We may provide your information to our third party partners for marketing or promotional purposes.

  • We will never sell your information.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  1. whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes

  2. if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please fill out our contact us form requesting the information.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Healthcare Disclaimer

Information on this website is for educational purposes only and is not a substitute for medical advice, diagnosis, or treatment. Always consult your provider for medical questions.

Website Privacy Policy

Effective: July 1, 2025

Y’all Collective values your privacy. This policy outlines how we collect, use, and protect personal data gathered through our website.

Information We May Collect:

  • Name, contact details

  • Demographics and interests

  • Website usage and preferences

How We Use This Data:

  • Internal recordkeeping and service improvement

  • Occasional promotional emails (with your consent)

  • Website customization

  • Market research (with opt-out options)

  • We do not sell your data.

Data Sharing:

  • We may share your data with third-party service providers under strict confidentiality.

  • We may disclose personal information if required by law.

Cookies:

We use cookies to improve your website experience. You may choose to disable cookies in your browser settings.

Third-Party Links:

We are not responsible for privacy policies of other websites linked on ours.

Controlling Your Data:

You may opt out of marketing communications or request access to the data we hold about you. Contact us directly to update or correct your data.