Privacy Policy
Your privacy is fundamental to the therapeutic relationship. This policy explains how TrustRoom collects, uses, and protects your information.
Last updated: [Date]
1. Introduction
[Content to be added — Describe the scope of this policy, who it applies to (patients and providers), and your commitment to HIPAA compliance.]
2. Information We Collect
[Content to be added — Detail the categories: account information, health information (PHI), usage data, device information, and cookies.]
3. How We Use Your Information
[Content to be added — Service delivery, treatment support, billing/RTM, communications, and product improvement.]
4. How We Share Your Information
[Content to be added — With your provider, service providers/subprocessors, legal requirements. Emphasize: we never sell personal data.]
5. HIPAA Notice of Privacy Practices
[Content to be added — Your rights under HIPAA: access, amendment, accounting of disclosures, restriction requests, confidential communications, and breach notification.]
6. Data Security
[Content to be added — Encryption at rest and in transit, access controls, audit logging, BAA with subprocessors, and incident response.]
7. Data Retention
[Content to be added — How long data is retained, clinical record requirements, and account deletion procedures.]
8. Your Rights and Choices
[Content to be added — Account access, data export, correction requests, email preferences, and account deactivation.]
9. Children's Privacy
[Content to be added — Age restrictions, parental consent requirements if applicable.]
10. Changes to This Policy
[Content to be added — How changes will be communicated, effective date procedures.]
11. Contact Us
[Content to be added — Privacy Officer contact, mailing address, email for privacy inquiries.]