Privacy Policy

Last updated: January 2024

Information We Collect

We collect personal and health information you provide through our intake form, including your name, date of birth, contact information, state of residence, and behavioral health history. We also collect technical information such as IP address and browser type for security and operational purposes.

How We Use Your Information

Your information is used solely to conduct your clinical evaluation, assign a licensed provider, and deliver evaluation documentation if clinically appropriate. We do not sell, rent, or share your personal or health information with third parties except as required to provide the evaluation service or as required by law.

HIPAA Compliance

We handle all health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Your protected health information (PHI) is stored securely, transmitted over encrypted connections, and accessed only by authorized personnel involved in your evaluation.

Protected health information

The clinical evaluation form collects protected health information including validated screeners (GAD-7, PHQ-9) and your clinical history. This information is encrypted in transit. We retain this data only for the minimum time required to conduct the clinical evaluation, issue documentation (if appropriate), and comply with applicable medical-records retention laws. You may request a copy or deletion by emailing esa@vbgesa.com.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), encrypted storage, and access controls. Only licensed providers and authorized administrative staff involved in your evaluation may access your health information.

Data Retention

We retain your records in accordance with applicable state and federal requirements for healthcare records. You may request a copy of your records or request deletion of non-clinical data by contacting us.

Third-Party Services

We use third-party services for secure payment processing, encrypted data storage, and telehealth infrastructure. These services are bound by confidentiality agreements and may only use your information as needed to support our services.

Your Rights

You have the right to access your personal information, request corrections, and request deletion of non-clinical data. To exercise these rights, contact us at the information provided on our Contact page. HIPAA provides additional rights regarding your protected health information.

Cookies

We use essential cookies for site functionality and session management. We do not use advertising or tracking cookies. You may disable cookies in your browser settings; some site features may not function correctly without them.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated on this page. Continued use of our services after a change constitutes acceptance of the updated policy.

Contact

For questions about this privacy policy or our data practices, contact us at the information provided on our Contact page.