Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW YOUR HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. IF YOU BECOME A CLIENT, YOUR HEALTH INFORMATION IS GOVERNED BY OUR NOTICE OF PRIVACY PRACTICES. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Counseling Center of Grayslake (CCG) is committed to protecting the privacy and confidentiality of your health information.

We follow the requirements of:

· The Health Insurance Portability and Accountability Act (HIPAA)

· Applicable Illinois privacy laws

· Professional ethical standards

Your health record contains personal information about your mental and physical health. This information is called Protected Health Information (PHI).

We are required by law to:

· Maintain the privacy of your PHI

· Provide you with this Notice

· Follow the terms currently in effect

We may update this Notice at any time. The most current version will be available on our website and upon request.

How We May Use and Disclose Your Information

We use the minimum necessary information to provide services.

1. Treatment

We may use or share your information to provide, coordinate, or manage your care. This may include:

· Consultation within our clinical team

· Clinical supervision

· Care coordination with other providers (with your authorization when required)

2. Payment

We may use or disclose your information to:

· Verify insurance eligibility

· Submit claims

· Obtain payment

· Conduct utilization review

3. Health Care Operations

We may use your information for business functions such as:

· Quality improvement

· Staff training

· Compliance and auditing

· Licensing and accreditation

Use of Technology and Third-Party Service Providers

CCG uses secure technology to support operations and client care, including:

· Electronic health record systems

· Telehealth platforms

· Appointment scheduling and reminders

· Billing and insurance processing

· Secure administrative and documentation support tools

When third-party vendors have access to PHI, they are required to:

· Follow HIPAA privacy and security standards

· Sign Business Associate Agreements (BAAs) when applicable

· Protect your information from unauthorized use or disclosure

Electronic Communication (Email & Text Messaging)

CCG may communicate with you electronically for administrative purposes only, including:

· Appointment reminders and confirmations

· Scheduling changes

· Insurance or billing matters

· Office updates

Please understand:

· Standard email and text messaging are not fully secure or encrypted

· Messages may be viewed by others who have access to your device

· We do not include clinical or therapy content in text messages

· You may opt out of text communication at any time

· Electronic messaging should not be used for emergencies or urgent concerns

For urgent or emergency situations, call 911, go to the nearest emergency room, or call/text 988.

Telehealth Services

Some services may be provided through secure video technology.

Potential risks include:

· Technical interruptions

· Privacy limitations if you are not in a private location

You are responsible for participating from a private environment when possible.

Artificial Intelligence (AI) and Technology-Assisted Documentation

CCG may use secure artificial intelligence (AI) tools to support administrative and documentation functions, such as:

· Scheduling or workflow assistance

· Session transcription or note preparation

· Record organization or summarization

Important information:

· AI is not used to provide therapy or communicate directly with you

· AI does not make clinical decisions or treatment recommendations

· Only the minimum necessary information is used when AI tools support documentation or administrative functions.

· All AI-assisted content is reviewed and approved by your licensed clinician

· Your clinician remains fully responsible for your care

If AI tools are used to support your care (such as documentation assistance), your separate written consent will be obtained before use, as required by Illinois law.

Situations Where We May Disclose Information Without Authorization

We may disclose PHI when required or permitted by law, including:

· Suspected child abuse or neglect

· Threat of serious harm to yourself or others

· Court orders or subpoenas

· Medical emergencies

· Public health reporting

· Health oversight or audits

· Law enforcement requests as permitted by law

We follow professional ethical standards and disclose the minimum necessary information.

Uses and Disclosures Requiring Your Authorization

We will obtain your written permission for:

· Most disclosures outside treatment, payment, or operations

· Release of information to other providers when required

· Use of psychotherapy notes (when applicable)

· Marketing or other non-routine uses

You may revoke your authorization at any time in writing.

Your Rights Regarding Your Information

You have the right to:

Access Your Records

Request a copy of your PHI (reasonable fees may apply).

Request an Amendment

Ask us to correct information you believe is incorrect or incomplete.

Request Restrictions

Ask us to limit how your information is used or shared (we may not always be able to agree).

Request Confidential Communication

Ask us to contact you in a specific way or at a specific location.

Request an Accounting of Disclosures

Receive a list of certain disclosures made outside routine operations.

Receive Breach Notification

You will be notified if a breach of unsecured PHI occurs.

Receive a Copy of This Notice

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Privacy Officer

Counseling Center of Grayslake

1190 E. Washington St.

Grayslake, IL 60030

Phone: 847-549-2235

You may also file a complaint with the U.S. Department of Health and Human Services.

You will not be penalized for filing a complaint.

Effective Date

This Notice is effective January 2026.