Notice of Privacy Practices

Who this covers

• Integrative Touch Therapies, LLC protects the privacy of your health information as required by the Texas Medical Records Privacy Act (Texas Health & Safety Code ch. 181, known as HB 300), and in alignment with the federal HIPAA Privacy and Security Rules.
• Texas defines "covered entity" more broadly than federal law — it includes anyone who assembles, collects, analyzes, uses, evaluates, stores, or transmits protected health information. We treat ourselves as covered by that definition.
• Protected health information ("PHI") means information that identifies you and relates to your health, care, or payment for care. For us that includes your name, date of birth, contact details, address, emergency contact, responsible-party details, intake and health-history answers, session notes, and your signature on intake paperwork.

How we use and share your information

• Treatment — providing and coordinating your care, including sharing relevant information with another practitioner involved in your treatment.
• Payment — taking payment for services, including processing card payments through our payment processor and issuing receipts or superbills you request.
• Operations — scheduling, appointment reminders, quality review, training, and running the practice.
• When the law requires it — including public-health reporting, court orders, and reports of suspected abuse or neglect.
• We apply the minimum necessary standard: we use and share the least information needed for the purpose, except for disclosures to you or for your treatment.

What we will never do without your written permission

• Sell your information. Texas Health & Safety Code §181.153 prohibits selling PHI without your authorization. We do not sell your PHI.
• Use it for marketing beyond communications about your own care.
• Use your image, name, or testimonial in promotion. Testimonial and photo consent is separate, optional, and you may withdraw it.
• You may revoke an authorization in writing at any time. Revoking it does not undo disclosures already made in reliance on it.

Electronic disclosure

• Texas Health & Safety Code §181.154 requires we notify you before your PHI is disclosed electronically, other than for treatment, payment, operations, or as otherwise authorized or required by law. This notice serves as that notification.
• Where an electronic disclosure falls outside those categories, we will obtain your authorization first.

Your rights

• Get a copy of your record. When we hold your record electronically and you request an electronic copy in writing, Texas Health & Safety Code §181.102 requires us to provide it within 15 business days, in the format you ask for if it is readily producible.
• Ask us to correct it if you believe something is inaccurate or incomplete. If we deny the request we will explain why in writing, and you may file a statement of disagreement to be kept with your record.
• Ask us to limit how we use or share your information. We are not required to agree to every request, but we will tell you if we cannot.
• Get a list of disclosures we have made of your PHI.
• Choose how we contact you — a specific phone number, email address, or method.
• Request a paper copy of this notice at any time, even if you agreed to receive it electronically.

How we protect your information

• We encrypt protected health information at rest in our systems and in transit, and keep encryption keys separate from the encrypted data.
• Access is limited to workforce members whose duties require it.
• Every workforce member who handles PHI receives training on state and federal privacy law tailored to their role, as required by Texas Health & Safety Code §181.101.

If there is a breach

• If unencrypted PHI is, or is reasonably believed to have been, acquired by an unauthorized person, we will notify you without unreasonable delay and no later than 60 days after we determine a breach occurred (Texas Business & Commerce Code §521.053).
• If 250 or more Texas residents are affected, we will also notify the Texas Attorney General no later than 30 days after that determination.
• Our notice will tell you what happened, what information was involved, what steps you can take, what we are doing about it, and how to reach us.

How to request your records, contact our licensing authority, or file a complaint

Texas Health & Safety Code §181.105 requires us to post these instructions. Here is exactly how to do each one.

• Request your health care records. Email info@ittheal.com or call 940.268.5999 and ask our Privacy Officer for a copy of your record. Tell us what you want (your full record, a specific date range, or a summary) and how you want it delivered. If you request an electronic copy in writing, we will provide it within 15 business days as required by §181.102.
• Contact our licensing authority. Massage therapy in Texas is licensed and regulated by the Texas Department of Licensing and Regulation (TDLR). To ask a licensing question, verify a license, or file a complaint against a massage therapist or massage establishment: file online at ga.tdlr.texas.gov:1443/form/Complaint, call (800) 803-9202 (in Texas) or (512) 463-6599, or write to TDLR, P.O. Box 12157, Austin, TX 78711.
• File a consumer complaint under §181.103. You may file a health-information-privacy complaint with the Texas Attorney General's Consumer Protection Division online at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint or by calling (800) 621-0508.
• You may also complain directly to us using the details below, or — where federal HIPAA applies — to the U.S. Department of Health and Human Services, Office for Civil Rights.
• We will not retaliate against you, and filing a complaint will never affect your care.

Our duties, and changes to this notice

• We are required by law to protect your PHI, to give you notice of our legal duties and privacy practices, and to follow the notice currently in effect.
• We may change this notice. A change applies to all PHI we hold, including information created before the change. The current version is always posted here with its effective date.

Contact us

• Questions about this notice, requests to exercise your rights, or privacy complaints:
• Integrative Touch Therapies, LLC — Attn: Privacy Officer
• Email: info@ittheal.com
• Phone: 940.268.5999