Privacy Policy – My OCD Clinic

Introduction

This policy applies to information collected through myocdclinic.com, our patient intake forms, our telehealth video platform, and any communications you have with our team by phone, email, or secure messaging.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our website or services.

Information We Collect

We collect information you provide directly to us, as well as information generated through the course of your care:

Contact details such as your name, email address, phone number, and mailing address
Demographic and insurance information provided during intake and eligibility verification
Mental health history, current medications, and treatment goals shared during your evaluation
Screening tool results, including Y-BOCS and OCI-R assessments
Appointment history, session notes, and care plans created by your provider
Billing and payment information related to insurance claims or self-pay charges

How We Use Your Information

We use the information we collect to:

Schedule appointments and verify your insurance coverage before each visit
Provide psychiatric evaluation, diagnosis, and ongoing OCD-focused care
Coordinate care between your provider and any ERP therapist you work with
Process billing, submit insurance claims, and generate Good Faith Estimates where applicable
Send appointment confirmations, reminders, and secure video links
Respond to questions submitted through our website or by phone and email
Meet our legal, regulatory, and recordkeeping obligations as a licensed healthcare practice

HIPAA and Protected Health Information

As a healthcare provider, My OCD Clinic is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Any information that identifies you and relates to your physical or mental health, the care you receive, or payment for that care is considered Protected Health Information (PHI).

Our full HIPAA Notice of Privacy Practices describes in detail how PHI may be used and disclosed, and the rights you have regarding your own health information. That notice is provided to every new patient and is available upon request.

If there is ever a conflict between this general Privacy Policy and our HIPAA Notice of Privacy Practices regarding your protected health information, the HIPAA Notice of Privacy Practices governs.

Telehealth Privacy Considerations

All appointments at My OCD Clinic are conducted via a HIPAA-compliant, encrypted video platform. Video sessions are not recorded by our practice unless you are specifically informed and give consent in advance.

You are responsible for choosing a private, secure location for your own telehealth visits. We recommend using headphones and a private room whenever possible to protect your own confidentiality on your end of the connection.

Sharing and Disclosure

We do not sell your personal or health information. We may share information only in the following circumstances:

With your ERP therapist or other treatment team members, to coordinate your care
With insurance companies, for eligibility verification, billing, and claims processing
With business associates who perform services on our behalf, such as our EHR or billing platform, under a signed Business Associate Agreement
When required by law, such as in response to a court order or to prevent serious harm to you or others
With your written authorization, for any purpose not otherwise described here

Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted data storage, encrypted video visits, and access controls that limit who on our team can view your records.

No method of electronic storage or transmission is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

Your Rights

Depending on applicable law, you generally have the right to:

Request access to a copy of your medical records
Request corrections to information you believe is inaccurate
Request a list of certain disclosures we have made of your information
Request restrictions on certain uses or disclosures of your information
Request confidential communications at an alternate address or phone number

To exercise any of these rights, contact us using the information at the bottom of this page. We will respond within the timeframe required by applicable state law.

Cookies and Website Data

Our website may use cookies and similar technologies to understand how visitors use myocdclinic.com and to improve site performance. This browsing data is separate from your medical record and is not used to make clinical decisions about your care.

You can adjust your browser settings to limit or block cookies, though some website features may not function as intended if you do so.

Children's Privacy

My OCD Clinic provides services exclusively to adults aged 18 and older. Our website and services are not directed to individuals under 18, and we do not knowingly collect information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page indicates when this policy was most recently revised. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.