Privacy Policy

Access Mental Health Counseling, PLLC
Effective date: August 13, 2020

Who we are

Access Mental Health Counseling, PLLC (“Access MHC,” “we,” “us,” or “our”) provides counseling and related professional services in New York, including telehealth.
Office: 380 N. Broadway, Penthouse East, Jericho, NY 11753 • Tel: 516-325-1965
Websites: https://accessmhc.com and https://www.accessmentalhealthcounseling.com

This page includes:

our Website Privacy Policy (how we handle information collected via our sites), and
a HIPAA Notice of Privacy Practices (summary) (how we use and disclose protected health information in the course of care). If there is any conflict, the HIPAA notice governs for health information.

1) Website Privacy Policy

Information we collect via the websites

Information you provide: name, contact details, scheduling preferences, general messages you submit through forms or by email/phone. Please don’t share sensitive or urgent information through the website; call 911 for emergencies.
Telehealth/EHR portals: If you access a client portal or telehealth service from our site, those platforms may collect information to create your account and deliver services. These vendors operate under Business Associate Agreements (BAAs) when they handle protected health information (PHI).
Payment information: If payments are made online, they are processed by third-party processors. We don’t store full card numbers on our sites.
Device & analytics data: IP address, browser type, pages viewed, and timestamps. We may use basic analytics (e.g., first-party cookies) to understand site use and improve content.

How we use website information

To respond to inquiries and schedule appointments
To operate, secure, and improve our sites and services
To comply with law, protect our rights, and prevent fraud or misuse

Cookies & similar technologies

We may use limited, first-party cookies and basic analytics. You can control cookies through your browser settings. We do not sell your personal information or use your PHI for targeted advertising.

Sharing of website information

We share information only with:

Service providers who help us run the sites (hosting, security, analytics, forms, payment) under agreements that limit their use of your data
Telehealth/EHR vendors (under BAAs when PHI is involved)
Legal/compliance recipients when required by law or to protect rights and safety

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Data security

We use administrative, technical, and physical safeguards appropriate to our services. No method of transmission or storage is 100% secure.

Data retention

We keep website records for as long as needed for the purpose collected, to comply with legal obligations, and to maintain business records. Clinical records follow separate professional and legal retention rules.

Children’s privacy

Our sites are not directed to children under 13. If you believe a child provided personal information, contact us to request deletion.

Your privacy choices & rights

You can request access, correction, or deletion of website information we maintain (subject to legal limits).
California/CT/CO/VA residents: You may have additional rights under state privacy laws. We do not sell or share personal information for targeted advertising. You can contact us to exercise rights; we will verify your request.

Do Not Track

We do not respond to “Do Not Track” signals due to industry standards not being uniform.

International visitors

Our websites are operated in the United States. By using the sites, you understand your information may be processed in the U.S.

2) HIPAA Notice of Privacy Practices (Summary)

This summary explains how we may use and disclose your Protected Health Information (PHI) and your rights. We are required by law to maintain the privacy of PHI, provide this notice, and follow it. For a full Notice of Privacy Practices, contact us using the information below.

How we may use and disclose PHI

Treatment: To provide, coordinate, or manage your care (e.g., consult with another provider, with your consent where required).
Payment: To bill and collect payment for services (e.g., billing details to your insurer or responsible party).
Healthcare operations: For quality assessment, licensing, training, audits, and business planning.
Required or permitted by law: Public health, abuse/neglect reporting, health oversight, judicial/administrative proceedings, law enforcement, to avert a serious threat to health or safety, specialized government functions, and worker’s compensation, as applicable.
Business Associates: Vendors who assist us (e.g., EHR/telehealth, billing) may access PHI under BAAs and must protect it.
Other uses: For any use not described above, we will obtain your written authorization (e.g., marketing communications or most disclosures of psychotherapy notes). You may revoke an authorization in writing at any time, except to the extent action has already been taken in reliance on it.

Your rights under HIPAA

Access: Receive a copy of your record (with limited exceptions).
Amend: Request corrections to your record.
Accounting: Receive a list of certain disclosures made without your authorization.
Restrictions: Request limits on how we use or disclose PHI (we will consider and may agree when feasible).
Confidential communications: Request that we contact you in a specific way (e.g., different phone or address).
Paper copy: Request a paper copy of the full Notice at any time.
Complaints: You may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). We will not retaliate for filing a complaint.

To file a HIPAA complaint with OCR: https://www.hhs.gov/ocr/privacy/hipaa/complaints/ (or call 1-800-368-1019)

Our responsibilities

Maintain PHI privacy and security
Notify you following a breach of unsecured PHI as required by law
Follow the terms of the current Notice
We may change our Notice and apply the new terms to PHI we already maintain. When we do, we will post the updated Notice and update the effective date.

Emergencies & crisis

Our websites and email are not monitored for emergencies. If you are in crisis or immediate danger, call 911 or go to the nearest emergency room. You can also contact the 988 Suicide & Crisis Lifeline by dialing 988.

Contact us about privacy

Access Mental Health Counseling, PLLC
380 N. Broadway, Penthouse East, Jericho, NY 11753
Tel: 516-325-1965
Email: info@accessmhc.com (replace with your preferred privacy contact email)

Changes to this policy

We may update this page to reflect changes in our practices or legal requirements. We will update the “Effective date” above when changes are made.

Disclaimer: This template is provided for general information and does not constitute legal advice. For legal compliance questions (including HIPAA and state privacy laws), consult your attorney.