Privacy Policy

Last Updated: January 15, 2025

Introduction

Vitruvian Behavioral Health® ("we," "us," or "our") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

As a healthcare provider, we are required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with notice of our legal duties and privacy practices. This policy applies to all information collected through our website, telehealth services, and in-person visits.

HIPAA Compliance

We comply with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable federal and state laws regarding the protection of your health information. Our Notice of Privacy Practices, which is provided to all clients, contains detailed information about how we may use and disclose your PHI.

Your PHI will only be used or disclosed for treatment, payment, healthcare operations, or as otherwise permitted or required by law. We will not sell your PHI or use it for marketing purposes without your explicit written authorization.

Information We Collect

Personal Information

When you use our services or website, we may collect:

  • Name, address, phone number, and email address
  • Date of birth and Social Security Number (for insurance purposes)
  • Insurance information and billing details
  • Emergency contact information
  • Employment information (when relevant to treatment)

Protected Health Information (PHI)

In the course of providing mental health services, we collect:

  • Medical and psychiatric history
  • Current symptoms and diagnoses
  • Treatment plans and progress notes
  • Medication information
  • Assessment and testing results
  • Communications between you and your treatment providers

Website Information

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our site
  • Referring website addresses
  • Cookies and similar tracking technologies

How We Use Your Information

We use your information for the following purposes:

Treatment

To provide, coordinate, and manage your mental health care and related services, including consultations with other healthcare providers.

Payment

To bill and collect payment for services, including submitting claims to your insurance company and processing payments.

Healthcare Operations

To support our business activities, including quality assessment, staff training, licensing, and accreditation activities.

Communication

To contact you regarding appointments, treatment reminders, and important information about your care.

Disclosure of Your Information

We may disclose your information in the following circumstances:

  • With Your Authorization: We will obtain your written consent before disclosing PHI for purposes other than treatment, payment, or healthcare operations.
  • To Other Healthcare Providers: When necessary for your treatment or care coordination, with appropriate safeguards in place.
  • To Insurance Companies: For payment and coverage verification purposes.
  • As Required by Law: To comply with federal, state, or local laws, court orders, or legal processes.
  • For Public Health Activities: To report certain conditions or prevent serious threats to health or safety.
  • To Prevent Harm: When necessary to prevent or lessen a serious and imminent threat to your health or safety or that of others.

Special Protections for Mental Health Information

Mental health records receive additional protections under federal and state law. Psychotherapy notes, which are notes recorded by a mental health professional documenting or analyzing the contents of conversation during a private counseling session, are kept separate from your medical record and require your specific authorization for disclosure.

We will not disclose your mental health information without your authorization except in limited circumstances permitted by law, such as when necessary to prevent serious harm to yourself or others.

Your Rights

Under HIPAA and applicable state laws, you have the following rights:

Right to Access

You have the right to inspect and obtain a copy of your health records, with limited exceptions.

Right to Amend

You may request amendments to your health information if you believe it is incorrect or incomplete.

Right to an Accounting of Disclosures

You may request a list of certain disclosures we have made of your health information.

Right to Request Restrictions

You may request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations.

Right to Confidential Communications

You may request that we communicate with you in a specific way or at a specific location.

Right to File a Complaint

You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information from unauthorized access, use, or disclosure. These measures include:

  • Encrypted electronic health records and secure data storage
  • Secure, HIPAA-compliant telehealth platforms
  • Staff training on privacy and security practices
  • Access controls limiting who can view your information
  • Regular security assessments and updates
  • Secure disposal of records when no longer needed

Telehealth Services

When you use our telehealth services, we take additional precautions to protect your privacy:

  • We use HIPAA-compliant video conferencing platforms with end-to-end encryption
  • Sessions are conducted in private, secure environments
  • We do not record telehealth sessions without your explicit consent
  • We recommend you participate from a private location where you cannot be overheard

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. These technologies help us:

  • Remember your preferences and settings
  • Understand how you use our website
  • Improve our website functionality
  • Analyze website traffic and trends

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

Third-Party Links

Our website may contain links to third-party websites, such as our client portal or insurance provider sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

We provide mental health services to minors with appropriate parental or guardian consent. Parents and guardians have certain rights regarding their child's health information, subject to applicable state laws regarding minor consent and confidentiality in mental health treatment.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your information is being handled, please contact us:

Vitruvian Behavioral Health®

100 Cummings Center, Ste 207P, Beverly, MA 01915

978-791-3879

info@vitruvianhealth.org

Regulatory Information

If you believe your privacy rights have been violated, you may file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
www.hhs.gov/ocr/complaints

You will not be retaliated against for filing a complaint.