Effective Date: 11/25/2025
Washington Interventional Psychiatry (“we,” “our,” or “the Clinic”) is committed to protecting the privacy and security of your personal information and protected health information (“PHI”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or receive services from our clinicians.
By using our website or receiving services, you acknowledge and agree to the terms of this Privacy Policy.
1. Information We Collect
We collect information in the following ways:
A. Information You Provide
- Contact information (name, email, phone number)
- Appointment requests
- Information submitted through forms
- Any information voluntarily shared when contacting us
B. Protected Health Information (PHI)
When you receive services from us, we collect PHI as defined under HIPAA, including:
- Medical history
- Treatment information
- Medications
- Clinical notes
- Insurance or billing information (if applicable)
- Emergency contact information
C. Automatically Collected Information
Our website may automatically collect non-identifiable information such as:
- IP address
- Browser type
- Device information
- Pages visited
- Basic analytics data (Google Analytics or similar)
We do not use cookies or analytics in a way that accesses or stores PHI.
2. How We Use Information
We use your information to:
- Provide mental health and interventional psychiatric services
- Schedule and manage appointments
- Conduct telemedicine visits
- Communicate with you regarding care
- Maintain accurate medical records
- Improve website functionality
- Comply with legal and regulatory requirements
We do not use PHI for marketing purposes without explicit authorization.
3. How We Protect Information
We follow all HIPAA, federal, and District of Columbia privacy and security requirements. Safeguards include:
- A HIPAA-compliant electronic health record (EHR)
- Encryption of data in transit and at rest
- Access controls and password protection
- Staff training on HIPAA and privacy standards
- Audit logs and monitoring
- Secure storage and destruction of records
4. How We Share Information
We may share information only as permitted under HIPAA and applicable law, including:
- With your treating clinicians
- With pharmacies to fulfill prescriptions
- With labs or medical providers involved in your care
- With your consent, when required
- With your insurance carrier (if applicable)
- With third-party vendors providing HIPAA-compliant services to us (Business Associates)
- When required by law (e.g., court order, mandatory reporting)
We never sell PHI or share it for advertising.
5. District of Columbia Mental Health Information Act
As a mental health services provider in the District of Columbia, we comply with the DC Mental Health Information Act (D.C. Official Code § 7-1201.01 et seq.), which provides additional protections for mental health information beyond HIPAA requirements.
Under this Act:
- Mental health information may only be disclosed pursuant to your written authorization or as specifically permitted by law
- All disclosures of mental health information (except in emergencies) must be accompanied by a statement that unauthorized disclosure violates DC law and may result in civil damages and criminal penalties
- You have enhanced privacy protections specific to mental health treatment records
6. Telemedicine Privacy
During telemedicine visits, we:
- Verify your identity and physical location
- Use secure, HIPAA-compliant video platforms
- Do not record sessions without your explicit consent
- Protect all transmitted PHI using encryption
7. Data Retention & Destruction
Retention Period
In accordance with District of Columbia law (D.C. Official Code § 3-1210.11), we retain medical records for:
- Adults: A minimum of 5 years from the date of last contact
- Minors: A minimum of 5 years after the patient reaches the age of majority (age 18)
We may retain records longer when required by law or when records involve ongoing litigation or investigation.
Destruction Methods
After the required retention period, PHI is securely destroyed using:
- Secure data deletion (cryptographic overwriting)
- Cryptographic erasure for electronic records
- Secure shredding for paper records
- Secure physical destruction of hardware containing PHI, if applicable
We maintain a permanent patient index with basic information about destroyed records, including patient name, date of birth, and certification of destruction.
8. Your Rights
Under HIPAA and District of Columbia law, you have the right to:
- Access your medical records
- Request corrections to your records
- Request restrictions on use or disclosure
- Request confidential communications by alternative means
- Obtain an accounting of disclosures made of your PHI
- Receive a copy of this Privacy Policy
- Revoke consent for disclosures at any time (subject to actions already taken)
Exercising Your Rights
To exercise any of these rights, contact us at:
- Email: info@washingtoninterventionalpsychiatry.com
- Phone: (202) 525-5123
- Address: 4325 49th Street NW, Washington, D.C.
We will respond to your request within 30 days as required by DC law.
9. Third-Party Services and Business Associates
We may use third-party HIPAA-compliant vendors for:
- EHR services
- Telemedicine platforms
- Billing or scheduling
- Secure messaging
All vendors are required by contract (Business Associate Agreements) to safeguard PHI according to HIPAA standards. These agreements ensure that our Business Associates:
- Use and disclose PHI only as permitted
- Implement appropriate safeguards
- Report any security incidents or breaches
- Return or destroy PHI when services end
10. Security Breach Notification
In the event of a security breach involving your personal information or PHI, we will:
- Notify you without unreasonable delay, consistent with HIPAA requirements
- Provide written notice to the District of Columbia Office of the Attorney General as required by DC’s Security Breach Protection Amendment Act of 2020
- Take immediate corrective action to mitigate harm
- Conduct a thorough investigation and implement additional safeguards as needed
11. Children’s Privacy
We provide services to minors but only with parental or guardian consent as required by law. We do not knowingly collect personal information from children online without appropriate authorization.
For minors, records are retained for at least 5 years after the minor reaches the age of 18, in accordance with DC law.
12. Your Consent and Authorization
By receiving services from us, you acknowledge that:
- You have received a copy of our Notice of Privacy Practices
- You understand how we use and disclose PHI
- You have the right to request restrictions on certain uses and disclosures
For uses and disclosures not covered under treatment, payment, or healthcare operations, we will obtain your specific written authorization.
13. Changes to This Policy
We may update this Privacy Policy at any time. The effective date will be updated accordingly. We will notify you of material changes by:
- Posting the updated policy on our website
- Providing a revised policy at your next appointment
- Emailing you if you have provided consent for email communications
Continued use of our website or services signifies acceptance of the revised policy.
14. Complaints and Questions
If you believe your privacy rights have been violated or if you have questions about this Privacy Policy:
File a complaint with us:
- Email: info@washingtoninterventionalpsychiatry.com
- Phone: (202) 525-5123
File a complaint with federal authorities:
- U.S. Department of Health & Human Services
- Office for Civil Rights
- Phone: 1-866-627-7748
- Website: www.hhs.gov/ocr/hipaa
File a complaint with DC authorities:
- DC Department of Health
- Health Care Facilities Division
You will not be retaliated against for filing a complaint.
15. Contact Us
Washington Interventional Psychiatry
4325 49th Street NW
Washington, D.C. 20016
Phone: (202) 525-5123
Email: info@washingtoninterventionalpsychiatry.com
Website: www.washingtoninterventionalpsychiatry.com
This Privacy Policy is provided to ensure transparency in how we handle your personal and health information. We are committed to maintaining the highest standards of privacy and security in accordance with all applicable federal and District of Columbia laws.