1. Introduction
Krissie Le Hermida LCSW, CEAP (“Practice,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard information obtained through:
- Our website
- Online contact forms
- Telehealth platforms
- Intake documents
- Client communications
This Policy supplements our separate HIPAA Notice of Privacy Practices, which governs protected health information (“PHI”) created during the provision of clinical services.
2. Information We Collect
A. Protected Health Information (PHI)
When you become a client, we collect information necessary to provide therapy services, including:
- Name, address, email, phone number
- Date of birth
- Insurance information
- Mental health history
- Clinical notes
- Session records
- Payment information
This information is protected under HIPAA and California law.
B. Personal Information Collected Through Website
When you visit our website, we may collect:
- IP address
- Browser type
- Device type
- Pages visited
- Contact form submissions
- Appointment request details
If you submit a contact form, we collect:
- Name
- Phone number
- Message content
We request that you do not submit highly sensitive medical details through unsecured website forms.
3. How We Use Information
We use collected information to:
- Provide psychotherapy services
- Schedule appointments
- Process payments
- Communicate with clients
- Improve website functionality
- Comply with legal and ethical obligations
We do not sell personal or health information.
4. HIPAA Compliance
As a Licensed Clinical Social Worker (LCSW), we are a Covered Entity under HIPAA.
Your Protected Health Information may only be used or disclosed:
- For treatment, payment, and healthcare operations
- When required by law
- To prevent serious harm
- With your written authorization
You have the right to:
- Access your records
- Request amendments
- Request restrictions
- Receive an accounting of disclosures
- Request confidential communications
For full details, refer to our Notice of Privacy Practices.
5. California Privacy Rights (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect
- Request deletion of non-medical personal information
- Request correction of inaccurate information
- Opt out of data “sharing” for advertising (we do not sell or share personal data)
Note: Medical information governed by HIPAA and CMIA is exempt from certain CCPA provisions.
To exercise your rights, contact:
[Email Address]
6. Confidentiality of Medical Information (CMIA)
Under California’s Confidentiality of Medical Information Act:
- We may not disclose medical information without authorization
- We implement safeguards to protect electronic and paper records
- Violations may result in statutory penalties
7. Telehealth Privacy
If telehealth services are provided:
- We use HIPAA-compliant platforms
- Sessions are not recorded without written consent
- Clients are encouraged to use private spaces
- Electronic communications may carry inherent risks
8. Data Security
We implement reasonable administrative, physical, and technical safeguards, including:
- Encrypted storage
- Password-protected systems
- Secure client portals
- Limited access to records
No system can guarantee absolute security.
9. Third-Party Service Providers
We may use vendors for:
- Electronic health records (EHR)
- Billing services
- Website hosting
- Telehealth platforms
All vendors handling PHI are required to sign Business Associate Agreements (BAAs) in compliance with HIPAA.
10. Cookies & Tracking Technologies
Our website may use cookies for:
- Analytics
- Performance tracking
- Security
We do not use behavioral advertising trackers that collect PHI.
Users may disable cookies via browser settings.
11. Retention of Records
Client records are retained in accordance with:
- California Board of Behavioral Sciences regulations
- HIPAA retention standards
- Applicable malpractice insurance requirements
12. Children’s Privacy
Our services are not directed toward children under 13 without parental or guardian consent.
13. Changes to This Policy
We may update this Privacy Policy periodically. The updated version will be posted with a revised effective date.
14. Contact Information
KRISSIE LE-HERMIDA
Address: 625 Third Avenue, Chula Vista, CA 91910
Phone:
Email: admin@krissiele.com
If you believe your privacy rights have been violated, you may file a complaint with:
- U.S. Department of Health and Human Services
- California Department of Public Health
You will not be retaliated against for filing a complaint.