Privacy & Notice of Practices

Website privacy

This website does not collect protected health information (PHI). Scheduling, insurance verification, intake forms, and payment are handled directly by Headway (headway.co), which maintains its own privacy and security practices. Review Headway’s privacy policy before submitting any personal or insurance information through their platform.

The contact form on this site collects your name, email, phone number, and message for the sole purpose of responding to your inquiry. Do not submit sensitive medical information through this form.

Notice of Privacy Practices (HIPAA)

Before publishing: the notice below is a draft based on the HHS model Notice of Privacy Practices (February 2026 revision, including 42 CFR Part 2 substance use disorder protections), customized for this practice. It still needs your practice's real effective date, address, and privacy official contact filled in, and review by a healthcare attorney before it goes live. A downloadable Word version was provided alongside this site.

Effective Date: [INSERT EFFECTIVE DATE]

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

Get a copy of your health and claims records. You can ask to see or get a copy of your health and claims records and other health information we have about you. We will provide a copy or summary, usually within 30 days, and may charge a reasonable, cost-based fee.

Ask us to correct your records. You can ask us to correct your health and claims records if you think they are incorrect or incomplete. We may say no, but will tell you why in writing within 60 days.

Request confidential communications. You can ask us to contact you in a specific way or send mail to a different address. We will consider all reasonable requests.

Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree, but if you pay out-of-pocket in full for a service, we will honor a request not to share that information with your insurer.

Get a list of those with whom we've shared information. You can ask for an accounting of disclosures for the six years prior to your request. We provide one accounting per year for free.

Get a copy of this notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically.

Choose someone to act for you. If someone has medical power of attorney or is your legal guardian, they can exercise your rights on your behalf, once we verify their authority.

File a complaint. You can complain to our Privacy Official (contact information below) or to the U.S. Department of Health and Human Services Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, 1-877-696-6775, www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you can tell us your choices about what we share — for example, sharing with family or close friends involved in your care, unless you object, or sharing in a disaster relief situation. If you are unable to tell us your preference, we may share information if we believe it is in your best interest, or to lessen a serious and imminent threat to health or safety. We never share your information for marketing purposes and will not sell your information without your written permission.

Our Uses and Disclosures

Treat you. We use and share your health information with other professionals treating you, such as your therapist or primary care provider, with your consent.

Run our practice. We use your information to manage and improve the care we provide.

Bill for services. We use and share your health information to bill and receive payment, including through third-party platforms we use for scheduling and billing.

Third-party platforms. This practice uses Headway (headway.co) to manage scheduling, insurance verification, digital intake, and payment. Information you provide through Headway is processed under Headway's own privacy policy and any applicable business associate agreement with this practice.

Other permitted or required disclosures include public health and safety reporting, compliance with law, organ and tissue donation requests, coordination with a medical examiner or funeral director, workers' compensation and law enforcement requests, and responses to lawsuits or legal actions.

Special Protections for Substance Use Disorder (SUD) Records

If you receive care for a substance use disorder, your records that are subject to 42 CFR Part 2 receive additional federal privacy protections beyond HIPAA:

• We will not disclose your substance use disorder patient records for civil, criminal, administrative, or legislative proceedings against you without your written consent, or a court order accompanied by a subpoena.
• Information disclosed with your consent may generally be redisclosed only in accordance with 42 CFR Part 2, and recipients are notified of this restriction.
• Violations of 42 CFR Part 2 may be reported to the appropriate federal authorities.

You may request a copy of this section describing our substance use disorder record protections at any time.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will notify you promptly if a breach occurs that may have compromised your information.
• We must follow the duties and privacy practices described in this notice.
• We will not use or share your information other than as described here unless you tell us in writing that we can — and you may withdraw that permission in writing at any time.

Changes to This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The current notice will always be available on this website and in our office.

Contact Us

Privacy Official: Lawrencia Oppong Peprah, PMHNP-BC
Practice: Healthy Mind Behavioral and Mental Health, LLC
Address: 110 N Wayne St, Waynesboro, VA 22980
Phone: (573) 289-2716
Email: info@healthmindbehavioral.com

This notice is based on the HHS model Notice of Privacy Practices (February 2026 revision). Have it reviewed by legal counsel before relying on it.

No provider-patient relationship

Browsing this website, or submitting the contact form, does not create a provider-patient relationship. A provider-patient relationship begins only after a scheduled evaluation.