Privacy & Confidentiality Clause

---

At CC Brain & Body Wellness Center, we value your privacy and are committed to maintaining the confidentiality and security of your personal and health-related information in accordance with the Health Insurance Portability and Accountability Act (HIPAA), California privacy laws, and professional ethical standards.

1. Protected Health Information (PHI)

All information you share—including intake forms, session notes, and health history—is considered confidential Protected Health Information. It is securely stored in encrypted, password-protected systems accessible only to authorized staff for care and administrative purposes.

2. Permitted Use and Disclosure

Your information may be used or disclosed only to:

• Provide and coordinate your wellness and neurofeedback services.
   
• Process payments or insurance claims.
   
• Conduct internal quality assurance or compliance activities.
   

No information will be released to third parties without your written authorization unless required by law.

3. Confidentiality of Sessions

All conversations, assessments, and service notes are private. Staff and contractors are bound by confidentiality agreements and professional ethics. We do not share or discuss your sessions with others without your consent.

4. Electronic Communication

We use HIPAA-compliant systems when possible for scheduling, billing, and communication. If you choose to communicate by text, email, or social media, please note that absolute confidentiality cannot be guaranteed through those methods.

5. Client Rights

You have the right to:

• Access and request copies of your records.
   
• Request corrections to inaccurate information.
   
• Receive a full Notice of Privacy Practices detailing how your information may be used.
   

Requests must be made in writing and will be addressed within a reasonable time frame.

6. Exceptions to Confidentiality

Confidentiality may be broken only when required by law, including:

• Suspected abuse or neglect of a child, elder, or dependent adult.
   
• Serious threat of harm to self or others.
   
• Court order, subpoena, or lawful government request.
   

7. Data Security

CC Brain & Body Wellness Center maintains physical, electronic, and administrative safeguards to protect your data. All staff receive privacy and security training consistent with HIPAA regulations.