Effective Date: October 18, 2025
Restored Self Psychiatry, LLC

1. Purpose of This Policy

This Privacy Policy explains how we collect, use, disclose, and protect information on our website and in the course of providing psychiatric and mental health services in the state of Colorado.
We comply with HIPAA, the Colorado Medical Records Act, Colorado Mental Health Practice Act, and other applicable state and federal laws.

2. Information We Collect

A. Information You Provide

  • Name, contact information

  • Date of birth / demographic information

  • Insurance or payment information

  • Health history and clinical information

  • Information submitted through forms, portal, or telehealth

B. Information Collected Automatically (Website)

  • IP address, browser, device type

  • Pages visited and time spent

  • Cookies or analytics data (no PHI)

3. Protected Health Information (PHI)

PHI includes any health, treatment, or payment information that identifies you.
PHI is only collected through HIPAA-secure platforms such as EHR, patient portal, or telehealth.
We do not request or store PHI through standard email or unsecured forms.

4. How We Use Information

We may use your information to:

  • Provide and coordinate care

  • Schedule appointments

  • Verify insurance and process payment

  • Communicate with you (securely)

  • Comply with legal obligations

  • Improve website functionality and user experience

5. How We Share Information

We do not sell your personal information.

We may share information only with:

  • Authorized healthcare providers

  • Insurance companies (for treatment/payment)

  • HIPAA-compliant business associates (EHR, billing, telehealth vendors)

  • Legal authorities if required by law or to prevent serious harm

All third-party partners must sign Business Associate Agreements (BAAs) per HIPAA.

6. Telehealth (Colorado Law C.R.S. § 10-16-123)

Telehealth services are delivered using secure, HIPAA-compliant platforms.
We do not record telehealth sessions without explicit permission.
Telehealth is treated the same as in-person care under Colorado law.
You are responsible for ensuring privacy on your end of the session.

7. Colorado-Specific Privacy Protections

Colorado offers additional protections for mental health records.
We will not release mental health treatment records without written authorization except in limited circumstances such as:

  • Court order

  • Duty to warn (Tarasoff-like situations)

  • Suspected abuse or neglect (mandatory reporting)

  • Medical emergency

8. Minor Consent and Confidentiality (Colorado Law)

In Colorado:

  • Minors 12+ may consent to mental health treatment without parental consent (C.R.S. § 12-245-203.5).

  • We must involve parents unless we determine it is not clinically appropriate.

  • Minors have a right to confidentiality unless:

    • There is risk of harm to self or others

    • Abuse or neglect is suspected

    • The minor consents to disclosure

    • A court order requires disclosure

9. Cookies & Website Analytics

We may use cookies or analytics (e.g., Google Analytics) to improve the website.
No PHI is stored in cookies or analytics tools.
You may disable cookies in your browser settings.

10. Secure Messaging & Patient Portals

We use HIPAA-compliant portals for:

  • Secure messaging

  • Intake forms

  • Telehealth

  • Treatment documents

Do not send sensitive information via standard email or website contact forms.

11. Data Security

We use administrative, physical, and technical safeguards including:

  • Encryption (HTTPS, secure portal)

  • Password-protected systems

  • Access controls

  • Staff training

  • Secure data storage and disposal protocols (per C.R.S. § 6-1-713)

12. Data Retention (Colorado Requirement)

Colorado law requires that mental health records be retained for at least 7 years from the last date of service (or 7 years after a minor turns 18).
Records are then securely destroyed.

13. Your Rights Under HIPAA & Colorado Law

You have the right to:

  • Access or request copies of your records

  • Request corrections or amendments

  • Request confidential communication methods (e.g. phone, email, portal)

  • Request restrictions on use/disclosure (we will consider but may not always comply)

  • Obtain an accounting of disclosures

  • File a privacy complaint without retaliation

14. Parents and Legal Guardians

If you are a parent/guardian of a minor:

  • You may access the child’s records unless the minor legally consented to care OR access is deemed inappropriate under Colorado law.

15. Email and SMS Communication

We may use email or text for scheduling or administrative purposes only.
You will be asked to give consent before receiving SMS or email notifications.
PHI will not be sent via unsecured email or text.

16. Third-Party Links

Our website may link to external sites.
We are not responsible for their privacy practices.
Please review their policies separately.

17. Social Media Policy

Interactions on social media are public.
Do not share personal or health information via social media.
We do not confirm or deny therapeutic relationships on public platforms.

18. Changes to This Policy

We may update this Privacy Policy from time to time.
Revisions will be posted on this page with a new effective date.

19. Contact Us

For questions, concerns, or privacy requests, please contact:

Restored Self Psychiatry, LLC
Admin@restoredselfpsychiatry.com

20. Filing a Complaint

If you believe your privacy rights have been violated, you may contact us or file a complaint with:

U.S. Department of Health and Human Services (HHS) – Office for Civil Rights
Website: https://www.hhs.gov/ocr/privacy/hipaa/complaints/
Phone: 1-800-368-1019
We will not retaliate against you for filing a complaint.