HIPAA Notice of Privacy Practices
NOTICE OF PRIVACY PRACTICES
Effective Date: February 14th, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1. OUR LEGAL DUTY
We are required by federal law, including the Health Insurance Portability and Accountability Act (HIPAA), to:
- Maintain the privacy and security of your protected health information (“PHI”)
- Provide you with this Notice explaining our legal duties and privacy practices
- Follow the terms of this Notice currently in effect
- Notify you if a breach occurs that may have compromised the privacy or security of your information
We may change our privacy practices at any time. Any revised Notice will apply to all information we maintain and will be available upon request and on our website.
2. HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
We may use or disclose your health information without your written authorization for the following purposes:
Treatment
We may use and disclose your information to provide, coordinate, or manage your care.Example: consultation with another healthcare provider involved in your treatment.
Payment
We may use your information to obtain payment for services provided.Example: submitting information to your insurance company for reimbursement.
Health Care Operations
We may use information for practice operations such as:
- Quality improvement
- Supervision or consultation
- Licensing or accreditation activities
- Administrative and business management
3. USES AND DISCLOSURES REQUIRED OR PERMITTED BY LAW
We may disclose information when required or permitted by law, including:
- Public health reporting
- Health oversight activities
- Judicial or administrative proceedings
- Law enforcement purposes (as legally required)
- Serious threats to health or safety
- Abuse, neglect, or domestic violence reporting
- Workers’ compensation claims
4. OTHER USES REQUIRE YOUR AUTHORIZATION
We will not use or disclose your information for the following without your written authorization:
- Psychotherapy notes (with limited legal exceptions)
- Marketing purposes
- Sale of your health information
- Any other use not described in this Notice
You may revoke authorization at any time in writing.
5. SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER (SUD) RECORDS
Some records related to substance use disorder diagnosis or treatment may be protected under 42 CFR Part 2, which provides stricter confidentiality protections than HIPAA.
If your records are protected under these laws:
- Certain disclosures permitted under HIPAA may not be allowed without your specific written consent.
- Your substance use disorder records generally cannot be used or disclosed for legal or investigative purposes without authorization or a court order.
- You have the right to receive notice of how these records may be used and disclosed and your rights regarding them.
These additional protections are required under federal law and are reflected in this Notice.
6. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the right to:
Inspect and Obtain Copies
Request access to your health records in paper or electronic form.
Request Corrections
Ask us to correct information you believe is incorrect or incomplete.
Request Confidential Communications
Ask us to contact you in a specific way (e.g., only by phone or email).
Request Restrictions
You may request limits on certain uses or disclosures, including treatment, payment, or healthcare operations. While we are not always required to agree, we will consider all requests.
Receive an Accounting of Disclosures
Request a list of certain disclosures we have made.
Obtain a Paper Copy of This Notice
You may request a copy at any time.
7. COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with:
U.S. Department of Health and Human ServicesOffice for Civil Rightshttps://www.hhs.gov/ocr/privacy/hipaa/complaints/
You will not be retaliated against for filing a complaint.
8. HOW TO CONTACT US
If you have questions about this Notice or your privacy rights, contact:
Privacy Officer: Elizabeth Phillips
Practice Name: Messy Bun Therapy
Phone: +1 (720) 251-4726
Email: lizphillips@messybuntherapy.com
Address: 8089 South Lincoln Street Suite 203 Littleton, CO 80122