HIPAA Compliance

Our Commitment to Your Privacy

Salt Lake Occupational Therapy ("SLOT", "we", "us", or "our") is committed to protecting the privacy and security of your protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.

As a covered healthcare entity, we maintain policies and procedures designed to safeguard PHI from unauthorized access, use, or disclosure, and to ensure that your health information is handled with the highest degree of care.

What Is Protected Health Information?

PHI includes any individually identifiable health information that we create, receive, maintain, or transmit in connection with the provision of healthcare services. This includes, but is not limited to:

• Your child's name, address, date of birth, and contact details
• Medical history, diagnoses, and treatment records
• Evaluation reports and therapy progress notes
• Insurance information and billing records
• Any information that could be used to identify your child in connection with healthcare services

How We Use and Disclose Your Information

We use and disclose PHI only as permitted or required under HIPAA. Permitted uses include:

• Treatment: Sharing information with other healthcare providers involved in your child's care.
• Payment: Processing insurance claims and billing.
• Healthcare operations: Quality improvement, training, and administrative functions necessary to run our practice.
• As required by law: Disclosures mandated by federal or state law, including mandatory reporting obligations.

We will obtain your written authorization before using or disclosing PHI for any purpose not described in this notice or otherwise permitted by HIPAA.

Information Collected on This Website

This website collects limited information for the purposes of scheduling free consultations and responding to inquiries:

• Booking form: Name, email address, and preferred appointment time. This information is used solely to schedule your free 20-minute consultation and send a confirmation email.
• Contact form: Name, email address, and your message. This information is used solely to respond to your inquiry.

No clinical or diagnostic PHI is collected through this website. Full clinical intake and consent processes occur separately and in a HIPAA-compliant manner prior to your child's first session.

Security Safeguards

We implement administrative, physical, and technical safeguards to protect PHI, including:

• Encrypted data transmission (TLS/HTTPS) for all information sent via this website
• Access controls limiting PHI to authorized staff only
• Secure electronic health record (EHR) systems compliant with HIPAA security standards
• Regular staff training on HIPAA policies and procedures
• Business Associate Agreements (BAAs) with all third-party vendors who handle PHI on our behalf

Your Rights Under HIPAA

You have the following rights regarding your child's health information:

• Right to access: Request a copy of your child's medical records.
• Right to amend: Request corrections to inaccurate or incomplete information.
• Right to an accounting of disclosures: Receive a list of instances where we disclosed PHI.
• Right to restrict: Request restrictions on certain uses and disclosures of PHI.
• Right to confidential communications: Request that we communicate with you in a specific way or at a specific location.
• Right to a Notice of Privacy Practices: Receive a copy of our full Notice of Privacy Practices at any time.

To exercise any of these rights, please contact us in writing at the address below. We will respond within 30 days of your request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us directly or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

• HHS Office for Civil Rights: hhs.gov/hipaa/filing-a-complaint

Contact Our Privacy Officer

For questions about this notice or your privacy rights, please contact: