Notice of Privacy Practices

When you complete our intake forms, we collect personal and health information necessary for your Equiscope therapy sessions. This includes your name, contact information, date of birth, medical history, current medications, allergies, and information about your health concerns. We collect only the minimum information necessary to provide safe and effective therapy.

Your health information is transmitted using industry-standard encryption (SSL/TLS). Our intake forms are designed to be completed and downloaded or printed by you — we do not store your Protected Health Information (PHI) on our web servers. All physical records are maintained in a secure, locked location accessible only to authorized personnel.

Your health information is used solely for the purpose of providing Equiscope therapy services. This includes evaluating your suitability for treatment, customizing your therapy sessions, tracking your progress, and ensuring your safety. We will never sell, share, or disclose your personal health information to third parties without your explicit written consent, except as required by law.

You have the right to: (1) Request a copy of your health records; (2) Request corrections to your health information; (3) Request restrictions on certain uses and disclosures of your information; (4) Receive a notice of how your health information may be used and shared; (5) File a complaint if you believe your privacy rights have been violated. To exercise any of these rights, contact Jen at 830.252.1131 or [email protected].

In the unlikely event of a breach of your unsecured Protected Health Information, we will notify you in writing within 60 days of discovering the breach, as required by the HIPAA Breach Notification Rule. The notification will describe the breach, the types of information involved, steps you should take to protect yourself, and what we are doing to investigate and mitigate the breach.

We retain your health records for the period required by applicable state and federal laws. When records are no longer required, they are securely destroyed using methods that prevent unauthorized access or reconstruction. Electronic records are permanently deleted, and paper records are shredded.