Notice of Privacy Practices
Effective Date: October 12, 2026
Your Information. Your Rights. Our Responsibilities.
This notice describes how your health information may be used and disclosed and how you can access it. Please review it carefully. ThriveWell Innovations provides individual mental health services to clients located in Texas and New Mexico. We are committed to protecting the privacy of your health information and complying with applicable federal and state privacy laws.
1. Your Privacy Rights
Explore our books, workbooks, and other resources for parents navigating estrangement.
You have the right to:
-
Access your records. Request to inspect or obtain a copy of your health records, subject to applicable law.
-
Request a correction. Ask us to amend information you believe is incorrect or incomplete. We may deny a request when permitted by law and will provide a written explanation.
-
Request confidential communications. Ask us to contact you in a particular way or at a different address.
-
Request restrictions. Ask us to limit how we use or disclose your information. We are not required to agree to every request, except where applicable law requires it.
-
Restrict disclosures to your health insurer. If you pay for a service completely out of pocket, you may ask us not to disclose information about that service to your health plan for payment or health care operations, unless disclosure is required by law.
-
Request an accounting of disclosures. Ask for a list of certain disclosures of your health information, subject to legal exceptions.
-
Receive a copy of this notice. You may request a paper copy even if you received this notice electronically.
-
Choose a personal representative. Someone legally authorized to act for you may exercise your rights, subject to applicable law.
-
File a complaint. You may contact us or the appropriate state or federal agency if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.
To exercise these rights, contact our Privacy Contact using the information at the end of this notice.
2. How We May Use and Disclose Your Health Information
We may use or disclose your protected health information for the following purposes, as permitted or required by law.
Treatment. We may use your information to provide, coordinate, or manage your mental health care.
Payment. Because we accept insurance and private-pay clients, we may use and disclose necessary information to verify benefits, submit claims, obtain payment, and resolve billing matters with health plans or other responsible parties.
Health care operations. We may use information to manage our practice, review the quality of care, conduct administrative activities, and improve services.
Other legally permitted or required disclosures. These may include disclosures required by law, certain public health and safety activities, legally required reporting of abuse or neglect, qualifying oversight activities, and responses to valid legal proceedings. Any disclosure must comply with applicable privacy and confidentiality requirements.
Individuals involved in your care. When permitted by law, we may share limited information with people involved in your care or payment for your care, subject to your preferences and the circumstances.
We will use or disclose your information for other purposes only when permitted by law or when you provide the required authorization.
3. Confidentiality of Mental Health Records in Texas and New Mexico
Mental health records and communications may receive additional protection under state law.
For clients receiving services in Texas or New Mexico, we will follow applicable federal and state confidentiality requirements. These laws may limit disclosures beyond what is generally permitted under HIPAA.
We will not assume that a disclosure permitted under HIPAA is automatically permitted under state mental health confidentiality law. When more protective law applies, we will follow the applicable requirements.
Requests to access, copy, or disclose mental health records will be handled according to the laws that apply to the record and the request.
4. Psychotherapy Notes
Psychotherapy notes are a specific category of notes maintained separately from the rest of the clinical record. They are not the same as ordinary progress notes, treatment plans, or other clinical documentation.
When information qualifies as psychotherapy notes under HIPAA, special rules apply. We generally must obtain your authorization before using or disclosing those notes, except where a specific legal exception applies.
These protections do not automatically apply to every item in your clinical record.
5. Substance Use Disorder Records
ThriveWell Innovations is not a federally assisted substance use disorder treatment program subject to 42 CFR Part 2 based on its current practice status.
However, if we receive or maintain records that are protected by Part 2, we will handle those records according to the applicable federal requirements. We will not represent that such records are exempt from Part 2 protections merely because our practice is not itself a Part 2 program.
Explore our books, workbooks, and other resources for parents navigating estrangement.
6. Uses and Disclosures Requiring Authorization
Certain uses and disclosures require your written authorization, including most uses and disclosures of psychotherapy notes, uses or disclosures for marketing when authorization is required, and disclosures that constitute a sale of protected health information.
If you authorize a use or disclosure, you may revoke that authorization in writing, except to the extent action has already been taken in reliance on it or another legal exception applies.
We do not sell protected health information or use it for marketing purposes requiring authorization without obtaining the required authorization.
7. Electronic Communications and Telehealth
We may use electronic systems and communications to provide telehealth services, coordinate care, schedule appointments, and manage billing.
Electronic communications may carry privacy or security risks. We use reasonable safeguards appropriate to our practice, but no electronic communication method can be guaranteed to be completely secure.
We will handle health information obtained through telehealth in accordance with applicable privacy and confidentiality laws. Our separate Telehealth Consent and Agreement explains additional terms and risks associated with telehealth services.
8. Access to Records and Response Times
You may submit a written request to access or copy your records through our Privacy Contact.
We will respond within the time required by the law applicable to your request. Federal HIPAA generally requires a response to an access request within 30 calendar days, subject to a permitted extension. Texas law also contains specific requirements for access to mental health records and certain electronic health records. Other applicable state requirements may affect how a request is handled.
Where access may lawfully be denied or limited, we will follow the applicable requirements for notice and review.
We may charge a fee only when permitted by applicable law.
9. Data Breach Notifications
We maintain appropriate safeguards designed to protect the privacy and security of your health information.
If a breach involving unsecured protected health information occurs, we will investigate and provide notifications required by applicable law. The recipients, content, and timing of notifications depend on the circumstances and the laws that apply.
10. Our Responsibilities
We are required by law to maintain the privacy and security of your protected health information, provide this notice, and follow the privacy practices described in it while it is in effect.
We will notify you as required by law if a breach compromises the privacy or security of your information.
We may change the terms of this notice, and revised practices may apply to information we already maintain as permitted by law. The current notice will be made available upon request and posted on our website.
11. Filing a Privacy Complaint
If you believe your privacy rights have been violated, you may contact us directly. You may also file a complaint with the appropriate agency.
-
Federal: U.S. Department of Health and Human Services, Office for Civil Rights — https://www.hhs.gov/hipaa/filing-a-complaint/index.html
-
Texas: Texas Behavioral Health Executive Council — https://bhec.texas.gov/
-
New Mexico: New Mexico Regulation and Licensing Department — https://www.rld.nm.gov/
Filing a complaint will not result in retaliation by ThriveWell Innovations.
12. Contact Information
Privacy Contact: Amber Martin, Owner and CEO
Practice: ThriveWell Innovations Mailing
Address: 6010 W Spring Creek Pkwy, Plano, TX 75024
Phone: 469-224-7343
Email: amber@thrivewell-innovations.com
Contact us with questions about this notice, to exercise your privacy rights, or to request access to your records.