Privacy Policy

Introduction

Callie Health, PC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Callie Health is a Professional Corporation providing telehealth speech therapy services in California and Texas. We are a "covered entity" under HIPAA and comply with all applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) for California residents.

Information We Collect

Personal Information

• Name and contact information (email, phone number, address)
• Date of birth and age
• Insurance information (carrier, member ID, group number)
• Payment information (credit card, HSA/FSA)
• Appointment scheduling preferences
• Driver's license or photo ID (for insurance verification)

Protected Health Information (PHI)

We collect health information necessary to provide speech therapy services, including:

• Speech and language evaluations and assessments
• Treatment plans, session notes, and progress documentation
• Relevant medical history and diagnoses
• Communication from other healthcare providers
• Insurance claims and billing records

How We Use Your Information

We use the information we collect to:

• Provide and manage speech therapy services
• Schedule and confirm appointments
• Verify insurance eligibility and process claims
• Process payments and billing
• Communicate with you about your care
• Comply with legal and regulatory requirements
• Improve our services and patient care
• Coordinate care with other providers (with your authorization)

HIPAA Compliance

We are committed to protecting your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act.

Our Safeguards Include

• Administrative safeguards: Staff training, access controls, security policies, and designated privacy officer
• Physical safeguards: Secure facilities and workstation security
• Technical safeguards: Encryption, audit controls, automatic logoff, and user authentication

Video Conferencing Security

• All telehealth sessions are conducted via Whereby, a HIPAA-compliant platform
• We maintain a signed Business Associate Agreement (BAA) with Whereby
• Video sessions are encrypted in transit
• Sessions are not recorded without your explicit written consent

Your PHI Rights Under HIPAA

You have the right to:

• Access and obtain copies of your medical records
• Request amendments or corrections to your records
• Receive an accounting of disclosures of your PHI
• Request restrictions on uses and disclosures of your PHI
• Request confidential communications (e.g., contact at a specific number)
• Receive a copy of this Notice of Privacy Practices
• File a complaint with us or the HHS Office for Civil Rights if you believe your privacy rights have been violated

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (including HIPAA-protected health records)
• Right to Opt-Out: We do not sell personal information to third parties
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at hello@trycallie.com. We will respond within 45 days.

Note: Health information protected under HIPAA is exempt from certain CCPA requirements. Your health records are maintained according to HIPAA retention requirements.

Texas Privacy Rights

Texas residents have additional rights under the Texas Medical Records Privacy Act and other state laws:

• You may access and obtain copies of your medical records
• You may request amendments to your records
• We will not disclose your health information without authorization except as permitted by law
• You have the right to receive notice of a breach affecting your information

Information Sharing

We may share your information with:

• Healthcare providers involved in your care (with your authorization)
• Insurance companies for eligibility verification and billing purposes
• Legal authorities when required by law
• Service providers who assist us in operating our business (under strict confidentiality agreements and BAAs where required)

We will never sell your personal information to third parties.

SMS/Text Messaging

Callie Health uses your phone number to send appointment reminders and service-related notifications via SMS text messages. By providing your phone number and booking an appointment, you consent to receive these messages.

Message Details

• Message frequency varies; you may receive up to 4 messages per scheduled appointment
• Message and data rates may apply depending on your mobile carrier plan
• Reply STOP to any message to opt out of SMS notifications at any time
• Reply HELP to any message for assistance, or contact us at hello@trycallie.com

Mobile Information Privacy

We will never sell, rent, or share your mobile phone number or SMS opt-in data with third parties or affiliates for marketing or promotional purposes.

SMS messaging services are provided through Twilio, a third-party communications platform. Twilio processes your phone number solely for the purpose of delivering messages on our behalf, under strict data processing agreements.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure access controls and multi-factor authentication
• Regular security assessments and updates
• Employee training on data protection and HIPAA compliance
• All telehealth sessions conducted via HIPAA-compliant, BAA-covered video platform
• Data stored on HIPAA-compliant cloud infrastructure

Data Retention

We retain your health records in accordance with applicable state and federal laws:

• Adult patient records: Minimum 7 years from the last date of service (California) or 7 years (Texas)
• Minor patient records: Until the patient reaches age 18, plus applicable retention period
• Insurance and billing records: As required by law and payer contracts

Children's Privacy

We provide services to children with parental or guardian consent. We collect information about minor patients only as necessary to provide speech therapy services and always with appropriate parental or guardian authorization. Parents and guardians may access their child's records and exercise privacy rights on their behalf.

Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about our privacy practices, please contact us:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.