BlueHaven Wellness (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how information is collected, used, disclosed, and safeguarded when you visit our website or engage in telehealth services.

1. Information We Collect

We may collect:

• • Personal Information
  • Name
  • Contact information (email, phone number, mailing address)
  • Date of birth
  • Emergency contact information
  • Protected Health Information (PHI)
  • Clinical assessments
  • Medical and mental health history
  • Treatment documentation
  • Billing and payment information
  • Website Usage Data
  • IP address
  • Browser and device information
  • Cookies and analytics data

2. Use of Information

Information is used for lawful healthcare purposes, including:

• • Providing treatment and telehealth services
  • Scheduling and administrative operations
  • Billing and payment processing
  • Compliance with legal and regulatory requirements

BlueHaven Wellness does not sell, rent, or trade personal or health information.

3. HIPAA Compliance

BlueHaven Wellness complies with the Health Insurance Portability and Accountability Act (HIPAA). Protected Health Information is used and disclosed only as permitted for:

• • Treatment
  • Payment
  • Healthcare operations
  • As otherwise required by law

Clients receive a separate Notice of Privacy Practices outlining their rights under HIPAA.

4. Telehealth & Electronic Communication

Telehealth services are provided through secure, HIPAA-compliant platforms. While reasonable safeguards are implemented, no electronic transmission system can be guaranteed to be completely secure.

5. Third-Party Service Providers

We may utilize third-party vendors for electronic health records, scheduling, payment processing, and website hosting. Where required, Business Associate Agreements (BAAs) are executed to ensure compliance with privacy laws.

6. Data Security

Administrative, technical, and physical safeguards are implemented to protect personal and health information, including encrypted systems and restricted access controls.

7. Your Rights

You have the right to:

• • Access and request amendments to your health records
  • Request restrictions on certain disclosures
  • Receive confidential communications
  • File a complaint regarding privacy practices

Complaints may also be filed with the U.S. Department of Health and Human Services.

8. Policy Updates

This Privacy Policy may be updated periodically. The revised version will be posted with an updated effective date.