Notice of Privacy Practice

OCD and Anxiety Collaborative, PLLC
Effective Date: August 25, 2026

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Notice of Privacy Practices

Effective Date: August 25, 2026

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL AND MENTAL HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices describes the privacy practices of OCD and Anxiety Collaborative, PLLC and explains your rights regarding your protected health information ("PHI").

If you have questions about this Notice or your privacy rights, please contact:

Privacy Officer: Hollie Spinn, LCSW, LCSW-C
OCD and Anxiety Collaborative, PLLC
Phone: 254-655-5794
Email: hollie@ocdcollab.com

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities.

Get an Electronic or Paper Copy of Your Health Record

You may ask to inspect or obtain an electronic or paper copy of your health record and other health information we maintain about you.

We generally will provide a copy or summary of your health information within the time required by law.

We may charge a reasonable, cost-based fee when permitted by law.

In limited circumstances, we may deny access to certain information when permitted by law. If access is denied, you may have a right to have that decision reviewed.

Ask Us to Correct Your Health Record

If you believe health information we maintain about you is incorrect or incomplete, you may ask us to amend it.

We may deny your request in certain circumstances, but we will explain the reason for the denial in writing within the time required by law.

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular location.

For example, you may request that we use a particular telephone number, email address, or mailing address.

We will accommodate reasonable requests as required by law.

Please remember that electronic communications such as ordinary email and text messaging may involve privacy risks.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to your request. If we do agree, we will comply with the restriction except when information is needed to provide emergency treatment or when another exception permitted by law applies.

Services Paid in Full Out of Pocket

If you pay for a healthcare service or item in full, out of pocket, you may ask us not to disclose information about that service to your health plan for purposes of payment or healthcare operations.

When the requirements of applicable law are met, we will honor that request unless disclosure is otherwise required by law.

Get a List of Certain Disclosures

You may request an accounting of disclosures, which is a list of certain disclosures of your health information made during the period permitted by law.

The accounting generally does not include disclosures made for treatment, payment, or healthcare operations or certain other disclosures excluded by law.

We will provide one accounting in a 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests during the same 12-month period and will tell you the cost before completing the request.

Get a Copy of This Notice

You may request a paper or electronic copy of this Notice at any time, even if you previously agreed to receive it electronically.

You may also access the current Notice through the OCD and Anxiety Collaborative, PLLC website.

Choose Someone to Act for You

If you have given someone medical power of attorney or if someone is your legal guardian or other legally authorized personal representative, that person may exercise your rights and make choices about your health information to the extent permitted by law.

We may verify that the person has appropriate authority before taking action.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with OCD and Anxiety Collaborative, PLLC by contacting the Privacy Officer listed at the beginning of this Notice.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

Information about filing a HIPAA complaint is available from the U.S. Department of Health and Human Services.

OCD and Anxiety Collaborative, PLLC will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences about what we share.

Family, Friends, and Others Involved in Your Care

You may tell us whether we may share relevant health information with a family member, friend, or other person involved in your care or payment for your care.

When you are unable to tell us your preference—for example, because of incapacity or an emergency—we may disclose limited information when permitted by law and when we determine that disclosure is in your best interest.

We may also disclose information when necessary to lessen a serious and imminent threat to health or safety when permitted by law.

Disaster Relief

We may disclose information to an organization assisting with disaster-relief efforts when permitted by law so that your family or others responsible for your care can be notified about your condition, status, or location.

You may tell us your preference when circumstances allow.

Marketing

We generally must obtain your written authorization before using or disclosing your protected health information for marketing purposes when authorization is required by HIPAA.

OCD and Anxiety Collaborative, PLLC does not sell your protected health information.

If a use or disclosure requires your written authorization, you may revoke that authorization in writing at any time, except to the extent that we have already acted in reliance on it.

Fundraising

OCD and Anxiety Collaborative, PLLC does not currently use protected health information for fundraising activities.

If this practice changes, any fundraising activity will be conducted in accordance with applicable law, including your right to opt out of receiving fundraising communications.

Our Uses and Disclosures

Treatment

We may use your health information and share it with other healthcare professionals for purposes of providing, coordinating, or managing your treatment when permitted by law.

Example: With appropriate legal authority, your therapist may communicate with another healthcare professional involved in your care regarding information relevant to your treatment.

State law may provide additional protections for mental health information. When applicable law requires your authorization before information may be disclosed, we will obtain it.

Payment

We may use and disclose your health information to obtain payment for services.

Example: If you elect to use insurance, information such as your diagnosis, dates of service, type of service, and other information necessary for billing or coverage may be provided to organizations involved in processing your insurance benefits.

OCD and Anxiety Collaborative, PLLC currently uses Headway for insurance-related services for insurance plans processed through the practice.

Healthcare Operations

We may use and disclose your health information for activities necessary to operate the practice and provide quality healthcare services.

These activities may include:

  • Practice administration;

  • Quality assessment and improvement;

  • Billing and accounting;

  • Compliance activities;

  • Legal services;

  • Credentialing;

  • Auditing;

  • Business planning;

  • Technology administration;

  • Record management;

  • Training and supervision when applicable; and

  • Other activities permitted as healthcare operations under applicable law.

Authorized administrative personnel may access limited protected health information when necessary to perform legitimate practice responsibilities.

Business Associates and Technology Vendors

OCD and Anxiety Collaborative, PLLC uses third-party individuals and organizations to perform certain services on behalf of the practice.

These individuals or organizations may be considered business associates under HIPAA when they create, receive, maintain, or transmit protected health information on behalf of the practice.

Business associates are required to appropriately safeguard protected health information and are subject to applicable contractual and legal requirements.

Services used by OCD and Anxiety Collaborative, PLLC may include:

  • Oasys, which serves as the practice's electronic health record and primary telehealth platform;

  • Google Workspace and Google Meet, which may be used for practice operations and backup telehealth services;

  • Headway, when applicable, for insurance-related and associated administrative services;

  • Payment-processing services;

  • Billing or administrative services; and

  • Other vendors necessary to operate the practice.

OCD and Anxiety Collaborative, PLLC enters into Business Associate Agreements when required by HIPAA.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose your health information without your written authorization in other circumstances permitted or required by law.

These circumstances may include the following.

When Required by Law

We may use or disclose health information when federal, state, or local law requires us to do so.

Abuse, Neglect, or Exploitation

We may disclose health information to an appropriate government authority or other authorized entity when reporting suspected abuse, neglect, or exploitation is permitted or required by applicable law.

Because OCD and Anxiety Collaborative, PLLC provides services in multiple jurisdictions, reporting obligations may vary depending on applicable law.

Preventing or Reducing a Serious Threat to Health or Safety

We may use or disclose health information when permitted or required by law to prevent or reduce a serious threat to the health or safety of you, another person, or the public.

Any disclosure will be made consistent with applicable legal and professional requirements.

Public Health and Safety Activities

When permitted or required by law, we may disclose health information for certain public health and safety activities, such as:

  • Preventing or controlling disease;

  • Reporting adverse events or problems with products;

  • Reporting suspected abuse, neglect, or exploitation;

  • Preventing or reducing serious threats to health or safety; or

  • Other legally authorized public health activities.

Health Oversight Activities

We may disclose health information to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, licensure activities, disciplinary proceedings, or other oversight of the healthcare system or government programs.

Judicial and Administrative Proceedings

We may disclose health information in response to a valid court or administrative order or under other circumstances permitted or required by law.

The existence of a subpoena or other request for information does not necessarily mean that your confidential mental health information will automatically be disclosed.

Mental health records may receive additional protection under applicable state law.

Additional information regarding OCD and Anxiety Collaborative, PLLC's policies regarding legal proceedings is contained in the Court and Legal Proceedings Agreement.

Law Enforcement

We may disclose health information to law enforcement officials in circumstances permitted or required by law.

Workers' Compensation

We may disclose health information as authorized by and to the extent necessary to comply with workers' compensation laws or similar programs.

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to coroners, medical examiners, or funeral directors when permitted or required by law.

Organ and Tissue Donation

We may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation when applicable and permitted by law.

Research

Health information may be used or disclosed for research when the requirements of applicable law are satisfied, including obtaining your authorization when required.

OCD and Anxiety Collaborative, PLLC does not routinely conduct research using client protected health information.

Government Functions

We may disclose health information for certain specialized government functions when authorized by law, including certain military, national security, protective-service, or correctional activities.

Psychotherapy Notes

HIPAA provides additional protection to psychotherapy notes, which are notes recorded by a mental health professional documenting or analyzing the contents of a counseling conversation and maintained separately from the rest of the individual's medical record.

Most uses and disclosures of psychotherapy notes require your written authorization.

There are limited exceptions permitted by law, including certain uses by the therapist who created the notes and certain disclosures required by law.

Not every mental health record or progress note qualifies as a "psychotherapy note" under HIPAA.

Substance Use Disorder Records

Federal law provides additional protections for certain substance use disorder patient records subject to 42 CFR Part 2.

If OCD and Anxiety Collaborative, PLLC creates or maintains records that are subject to Part 2, those records will be used and disclosed in accordance with applicable federal requirements.

Part 2 records generally receive additional confidentiality protections, and applicable law may require your consent for uses or disclosures that would otherwise be permitted under HIPAA.

A Part 2 record, or testimony relaying the content of a Part 2 record, generally may not be used or disclosed in a civil, criminal, administrative, or legislative proceeding against the patient unless specifically authorized by the patient's consent or an appropriate court order as required by federal law.

Where applicable, you will receive information regarding your rights with respect to Part 2 records.

Reproductive Healthcare Privacy

OCD and Anxiety Collaborative, PLLC will use and disclose protected health information related to reproductive healthcare in accordance with applicable federal and state law.

Where federal law requires additional procedures, representations, or attestations before certain reproductive-health information may be disclosed, OCD and Anxiety Collaborative, PLLC will comply with those requirements to the extent they are legally applicable at the time of the requested disclosure.

State Privacy Laws

OCD and Anxiety Collaborative, PLLC provides psychotherapy to clients located in Texas, Colorado, and Maryland.

Mental health records and communications may receive protections under state law that are more restrictive than HIPAA.

When applicable state law provides greater privacy protection than HIPAA, OCD and Anxiety Collaborative, PLLC will follow the more protective requirement.

This may mean that your written authorization is required before certain mental health information can be disclosed even when HIPAA would otherwise permit the disclosure.

Specific confidentiality, mandatory-reporting, legal-process, and disclosure requirements may vary depending on the jurisdiction governing your care.

Our Responsibilities

OCD and Anxiety Collaborative, PLLC is required by law to:

  • Maintain the privacy and security of your protected health information;

  • Provide you with this Notice describing our legal duties and privacy practices;

  • Follow the duties and privacy practices described in the Notice currently in effect;

  • Notify you following a breach of unsecured protected health information when notification is required by law; and

  • Respect your rights regarding your protected health information.

We will not use or disclose your information other than as described in this Notice unless you provide written authorization or another use or disclosure is permitted or required by law.

If you provide written authorization, you may revoke it in writing at any time, except to the extent that we have already acted in reliance on your authorization.

Breach Notification

OCD and Anxiety Collaborative, PLLC maintains safeguards designed to protect your health information.

If a breach occurs that may have compromised the privacy or security of your protected health information, OCD and Anxiety Collaborative, PLLC will provide notification as required by applicable law.

Changes to This Notice

OCD and Anxiety Collaborative, PLLC may change the terms of this Notice and its privacy practices.

Changes may apply to all protected health information maintained by the practice, including information created or received before the change.

When this Notice is materially revised, the updated Notice will be made available as required by law, including through the practice's website.

You may request the current Notice at any time.

Questions or Complaints

If you have questions about this Notice, want to exercise a privacy right, or believe your privacy rights have been violated, contact:

Privacy Officer: Hollie Spinn, LCSW, LCSW-C
OCD and Anxiety Collaborative, PLLC
Phone: 254-655-5794
Email: hollie@ocdcollab.com

You may also file a complaint with the:

U.S. Department of Health and Human Services
Office for Civil Rights

You will not be retaliated against or denied treatment for filing a privacy complaint.