Privacy Policy and Notice of Privacy Practices
Table of Contents
- Introduction and Entity Identification
- What Information We Collect
- How We Use Your Information
- How We Share Your Information
- Your Rights Regarding Your Health Information
- How We Protect Your Information
- Electronic Communications and Telehealth
- Breach Notification
- Use of Your Information for Marketing and Fundraising
- Children and Minors
- Psychotherapy Notes and Special Categories
- Workforce Training and Compliance
- Patient Authorization and Revocation
- Changes to This Policy
- Contact Information
1. Introduction and Entity Identification
Protecting the privacy and confidentiality of your protected health information (“PHI”) is a core obligation of our practice. This Privacy Policy explains how your health information is collected, used, and disclosed when you receive care or use our website, in compliance with the federal Health Insurance Portability and Accountability Act (“HIPAA”), applicable state law, and professional ethical standards.
This Policy governs services provided by Jose Gonzalez-Soto Psychiatric Mental Health Nurse Practitioner, PLLC (“the Practice”). The Practice provides services to clients located in Florida and New York only. Because the Practice operates in both states, the entity responsible for your care and your PHI depends on where you are located and receive services:
- Florida clients: Services are provided by Jose Gonzalez-Soto Psychiatric Mental Health Nurse Practitioner, PLLC, doing business as “Reintegrate Mental Health & Counseling”, a registered fictitious name (d/b/a) of the Practice in the State of Florida. References to “Reintegrate,” “ReIntegrate Mental Health & Counseling,” “we,” “us,” or “our” as applied to Florida clients refer to the Practice operating under this trade name.
- New York clients: Services are provided directly by Jose Gonzalez-Soto Psychiatric Mental Health Nurse Practitioner, PLLC, under its full legal name. The Practice does not use the “Reintegrate” trade name in connection with services rendered to New York clients. References to “we,” “us,” or “our” as applied to New York clients refer to the Practice under its legal name only.
In all other respects, the privacy practices, safeguards, and patient rights described in this Policy apply equally regardless of which of these two states you are located in or which name the Practice uses to serve you.
2. What Information We Collect
We collect personal and health information reasonably necessary to provide psychiatric and mental health care, including but not limited to:
- Identifying information, such as name, date of birth, and contact details
- Health history, diagnoses, and treatment records (excluding separately maintained psychotherapy notes; see Section 11)
- Insurance and billing information
- Communications exchanged through telehealth platforms or electronic messaging
- Limited technical information collected through use of our website, such as IP address, for security and site-performance purposes
3. How We Use Your Information
Your information is used to:
- Provide treatment, counseling, and medication management
- Coordinate care and consult with other treating providers as clinically appropriate
- Process billing and insurance claims
- Conduct healthcare operations, including quality assurance, staff training, and compliance auditing
4. How We Share Your Information
We do not sell your PHI or share it for marketing purposes. Disclosure of your PHI without your written authorization occurs only as permitted or required by law, including disclosures to:
- Other healthcare providers involved in your treatment, for care coordination
- Health plans or insurers, for payment of services rendered
- Public health authorities, where reporting is mandated by law
- Third-party service providers acting under a HIPAA Business Associate Agreement, such as telehealth and electronic health record vendors
5. Your Rights Regarding Your Health Information
You have the right to:
- Access and obtain copies of your medical and billing records, subject to applicable legal limitations
- Request amendment or correction of your information
- Request restrictions on certain uses or disclosures of your PHI
- Request confidential communications by alternative means or at alternative locations
- Receive an accounting of disclosures of your PHI made within the preceding six years
- File a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated, without fear of retaliation
6. How We Protect Your Information
We maintain administrative, physical, and technical safeguards designed to protect your PHI against unauthorized access, alteration, or disclosure. These safeguards include encrypted telehealth communications, secure electronic recordkeeping systems, role-based access controls, and periodic risk assessments consistent with state and federal law. All workforce members complete HIPAA privacy and security training upon onboarding and annually thereafter.
7. Electronic Communications and Telehealth
By using telehealth or other electronic communications with us — including email, text messaging, and video conferencing — you acknowledge the inherent risks associated with electronic transmission of data. We employ commercially reasonable security measures; however, no method of electronic transmission or storage is entirely secure. If you have concerns about the privacy of a particular communication method, please notify us and we will discuss alternatives with you.
8. Breach Notification
In the event of a breach of unsecured PHI, the Practice will provide notification in accordance with HIPAA and any applicable state breach notification laws, including a description of the breach, steps being taken to mitigate harm, and contact information for further assistance.
9. Use of Your Information for Marketing and Fundraising
We will not use or disclose your PHI for marketing or fundraising purposes without your prior written authorization. You may revoke this authorization at any time, and doing so will not affect your ability to receive treatment.
10. Children and Minors
For clients under age 18, PHI is handled in accordance with the applicable state’s laws governing minor confidentiality, parental or guardian consent and access, and relevant professional ethical guidelines.
11. Psychotherapy Notes and Special Categories
Psychotherapy notes — separately maintained records documenting the details of a counseling session, kept apart from the rest of your medical record — receive heightened protection under HIPAA. We will not disclose psychotherapy notes without your specific written authorization, except as otherwise permitted or required by law. Information relating to substance use disorder treatment, where applicable, receives additional protection under 42 CFR Part 2.
12. Workforce Training and Compliance
All members of our workforce complete regular HIPAA and privacy compliance training to ensure your information is handled lawfully and ethically at all times.
13. Patient Authorization and Revocation
Except as permitted or required by law, any use or disclosure of your PHI requires your written authorization. You may revoke that authorization at any time, in writing, except to the extent we have already acted in reliance on it.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices. Material updates will be posted to our website along with a revised effective date.
15. Contact Information
For questions about this Policy or to exercise your privacy rights, please contact:
Jose Gonzalez-Soto Psychiatric Mental Health Nurse Practitioner, PLLC
d/b/a Reintegrate Mental Health & Counseling (Florida clients)
Email: support@reintegratementalhealth.com
