Notice of Privacy Practices.

This Notice of Privacy Practices describes how your health information may be used and disclosed, and how you can access this information. We are committed to protecting the privacy and security of your personal health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws. This notice explains our legal duties, your rights regarding your health information, and how we safeguard your privacy when providing care and operating our practice.

A lighthouse with waves coming up the sand on the beach and clouds in a blue sky.

Notice of Privacy Practices

Tidepool Mental Health PLLC

Your Rights, Our Responsibilities

This Notice of Privacy Practices describes how medical and mental health information about you may be used and disclosed, and how you can access this information. Please review it carefully.

Our Commitment to Your Privacy

Tidepool Mental Health PLLC is committed to protecting the privacy and confidentiality of your health information. These are requirements by federal law (HIPAA) and Washington State law to:

Maintain the privacy of your protected health information (PHI)
Provide you with this Notice of our legal duties and privacy practices
Follow the terms of this Notice currently in effect

For more information, visit the U.S. Department of Health & Human Services – HIPAA and the Washington Uniform Health Care Information Act, RCW 70.02.

Uses and Disclosures of Health Information Without Authorization

We may use and disclose your health information without your written authorization for the following purposes:

Treatment

We may use or share your information to provide, coordinate, or manage your healthcare. This may include communication with other healthcare providers involved in your treatment.

Payment

We may use and disclose your information to bill and receive payment from insurance companies, Medicaid (Apple Health), or other payers and entities.

Healthcare Operations

We may use your information for practice operations, including quality improvement, training, auditing, licensing, compliance activities, and to contact you when necessary.

Other Permitted or Required Disclosures

We may disclose your health information without your authorization in the following circumstances:

When required by law or court order
For workers’ compensation claims
To report suspected abuse or neglect of a child, elderly person, or vulnerable adult
To prevent or reduce a serious threat to your health or safety or the safety of others
For public health reporting as required by law
For health oversight activities such as audits or investigations

Except when required by law, we will not share the following type of information without your written permission:

· Mental health services records

· Sexually transmitted diseases records

· Treatment records for drug and alcohol abuse

· HIV/AIDS records

· Psychotherapy notes

Telehealth, Audio-Only Services, and Electronic Communications

Telehealth, audio-only, and electronic communication, such as SMS messages, involve the use of electronic communication technologies. While Tidepool Mental Health uses HIPAA-compliant platforms and reasonable safeguards, electronic communications carry inherent risks, including potential unauthorized access or disclosure beyond the provider’s control. By utilizing these methods of communication, patients are accepting this inherent risk. Confidentiality protections apply to these services in the same manner as in-person care.

AI-Assisted Documentation and Privacy

Providers at Tidepool Mental Health may utilize AI-assisted documentation tools. Washington State law RCW 9.73.030requires consent of both parties for use of recording devices. When AI-assisted documentation tools are used:

The tools may temporarily process audio from clinical sessions for documentation purposes only.
Audio recordings or transcripts are not retained after the session in accordance with privacy and security practices.
All vendors of AI-assisted documentation tools have Business Associate Agreements in place with Tidepool Mental Health, which legally obligates them to protect patient data and prohibit the use of your data for training their models.
All information remains subject to HIPAA and Washington State confidentiality protections.

You have the right to opt out of having AI tools used during your care. You may withdraw your consent at any time, and the provider will utilize traditional documentation methods.

Your Rights Regarding Your Health Information

You have the right to:

Access and obtain electronic or paper copies of your medical records. There may be a cost-based fee associated if applicable.
Submit a written request for corrections to your health information and have a statement of disagreement filed in your record.
Request restrictions on certain uses or disclosures (we may not be able to agree to all requests)
Request confidential communications, such as receiving information by alternative means or locations
Receive an accounting of disclosures as permitted by law
Obtain a paper or electronic copy of this Notice at any time

Your Choices

You may choose to tell us:

Whether we may share information with family members or others involved in your care
How we communicate with you (within reasonable limits)
If you want to opt out or withdraw consent by contacting us in writing at any time

Our Responsibilities

We will:

Protect the privacy and security of your health information
Notify you if a breach occurs that may have compromised your information
Follow the duties and privacy practices described in this Notice

We do not discriminate or treat patients differently on the basis of age, race, color, national origin, sex, sexual orientation, gender identity or expression, religion, or disability. We will provide reasonable accommodations when necessary to communicate with and treat patients effectively. We comply with all state and federal laws and Tidepool Mental Health nondiscrimination policies.

Changes to the Terms of This Notice

We can change the terms of this notice, and the new changes will apply to all information we have about you. The new notice will be available upon your request and on our website at https://www.tidepoolmentalhealth.com.

Effective Date: January 2026

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Tidepool Mental Health PLLC (contact info below)

Washington Department of Health

hsqacomplaintintake@doh.wa.gov

U.S. Department of Health and Human Services, Office for Civil Rights

200 Independence Avenue, SW

Room 509F, HHH Building

Washington, D.C. 20201

OCRMail@hhs.gov

Filing a complaint will not affect your care or result in retaliation.