NOTICE OF PRIVACY PRACTICES – HIPAA

Colorado Women’s Center

Effective Date: January 28, 2026

THIS NOTICE DESCRIBES HOW MEDICAL AND MENTAL HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Legal Duties

Therapy and Counseling for Women, LLC, doing business as Colorado Women’s Center (“CWC,” “we,” “us,” or “our”), is required by law to:

Maintain the privacy and security of your Protected Health Information (“PHI”)

Provide you with this Notice of Privacy Practices describing our legal duties and privacy practices

Follow the terms of this Notice currently in effect

Notify you if a breach occurs that may have compromised the privacy or security of your PHI

PHI is information about you that may identify you and that relates to your past, present, or future physical or mental health or condition and related health care services.

This Notice applies to all workforce members of CWC, including employees, contractors, trainees, and volunteers, as well as business associates who perform services on our behalf.

How We May Use and Disclose Your Health Information

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your mental health care and related services.

Examples include:

Sharing information among clinicians within CWC involved in your care

Consulting with clinical supervisors or other licensed professionals

Coordinating care with other providers when authorized or permitted by law

Payment

We may use and disclose your PHI to obtain payment for services provided to you.

Examples include:

Submitting claims to insurance companies

Determining eligibility or coverage

Billing, collections, or utilization review activities

Health Care Operations

We may use and disclose your PHI for health care operations necessary to run our practice.

Examples include:

Quality improvement and assurance activities

Training, supervision, and credentialing

Business planning, audits, and legal services

Practice management and administrative support

Electronic Systems, Telehealth, and Communications

We maintain PHI using electronic health records and secure technology systems. We may communicate with you through secure portals, email, telephone calls, or text messages for operational purposes such as scheduling, appointment reminders, care coordination, billing matters, or patient satisfaction surveys.

While we take reasonable steps to safeguard electronic communications, no system can be guaranteed to be completely secure.

Business Associates

We may share PHI with third-party service providers (“business associates”) who perform services on our behalf, such as billing, electronic health record platforms, scheduling tools, IT support, legal counsel, and administrative vendors.

All business associates are required by law and contract to protect the privacy and security of your PHI.

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not otherwise permitted by law, including:

Most uses and disclosures of psychotherapy notes

Uses or disclosures for marketing purposes

Sale of PHI

Any other use not described in this Notice

You may revoke an authorization in writing at any time, except to the extent that action has already been taken in reliance on your authorization or as otherwise permitted by law.

Uses and Disclosures Without Your Authorization

We may use or disclose PHI without your authorization when required or permitted by law, including:

Abuse or Neglect: Reporting suspected child abuse, elder abuse, or abuse of at-risk adults

Serious Threat to Health or Safety: To prevent or reduce a serious and imminent threat to you or others

Judicial and Administrative Proceedings: In response to a court order or lawful subpoena

Health Oversight Activities: Audits, investigations, or licensure reviews

Workers’ Compensation: As required to comply with workers’ compensation laws

Public Health Activities: When required by public health authorities

Only the minimum necessary information will be disclosed when required.

Your Rights Regarding Your Health Information

You have the right to:

Access and Copies: Inspect or obtain a copy of your PHI, including electronic copies, subject to certain legal exceptions. We may charge a reasonable, cost-based fee.

Amendments: Request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request but will provide a written explanation.

Accounting of Disclosures: Request an accounting of certain disclosures of your PHI.

Confidential Communications: Request that we communicate with you in a specific way or at a specific location.

Restrictions: Request restrictions on certain uses or disclosures of PHI. We are not required to agree, except when you have paid for services out-of-pocket in full and request that information not be disclosed to a health plan.

Breach Notification: Be notified if there is a breach of unsecured PHI involving your information.

Paper Copy: Receive a paper copy of this Notice upon request.

Changes to This Notice

We reserve the right to change the terms of this Notice at any time. Any changes will apply to all PHI we maintain. The revised Notice will be posted at our locations and on our website and will be available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation. CWC will not retaliate against you for filing a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

Contact CWC:

Colorado Women’s Center Attention: Privacy Officer 1500 28th Street Boulder, CO 80303 Phone: (720) 810-2355

You may also file a complaint with:

U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, SW Washington, D.C. 20201 Email: OCRComplaint@hhs.gov Phone: 1-800-368-1019