HIPAA & Privacy Policy

You have the right to specify how we share certain health information. If you have clear preferences regarding your information, please let us know, and we will do our best to follow your instructions.

In the following situations, you can choose whether to allow us to share your information:

• With your family, close friends, or others involved in your child’s care

• In a disaster relief situation

• To include your information in a hospital directory

• Use of Artificial Intelligence (AI) Technologies: We may use AI to assist in clinical documentation or treatment planning. You will be notified at the point of interaction if AI is involved in diagnostic or treatment-related services. All AI-assisted diagnostic or treatment recommendations are reviewed and approved by a human clinician. You have the right to request more information about the use of AI-assisted clinical documentation tools and/or request human reconsideration of any automated decision within 30 days. Any AI tools we utilize are strictly governed by a Business Associate Agreement (BAA). We do not allow any AI vendor to retain, store, or use your child’s data to train their algorithms or products. You can opt out of the use of AI in writing at any time.

If you are unable to communicate your preferences (for example, if you are unconscious), we may share your information if we believe it is in your best interest. We may also disclose your information when necessary to prevent a serious and imminent threat to health or safety.

However, we will never share your information for the following purposes without your written permission:

● Marketing purposes

● Sale of your information

● Most sharing of psychotherapy notes

Regarding fundraising efforts, we may reach out to you, but you can request that we do not contact you again.

We typically use or share your health information in the following ways:

To Treat you

• We can use your health information and share it with other healthcare professionals involved in your care. For example, if a doctor is treating you for an injury, they may ask another doctor about your overall health condition

To Run our organization

• We utilize your health information to manage our practice and enhance your care. This includes contacting you when necessary. For example, we may use your information to coordinate your treatment and services effectively.

To Bill for your services

• We can use and share your health information to process billing and obtain payment from health insurance plans or other entities. For example, we may provide your information to your health insurance provider to ensure that your services are covered.

How else can we use or share your health information?

We are allowed or required to share your information in other ways that typically benefit the public, such as in public health initiatives and research. However, we must comply with specific legal conditions before sharing your information for these purposes. For more information visit: www.hhs.gov/ocr/privacy/

Help with public health and safety issues

We can share health information about you for certain situations such as:

• Preventing disease
• Assisting with product recalls
• Reporting adverse reactions to medications
• Reporting suspected abuse, neglect, or domestic violence
• Preventing or reducing a serious threat to health or safety

Do research

• We are permitted to use or share your information for health research.

Comply with the law

• We will disclose your information when required by state or federal laws, including sharing it with the Department of Health and Human Services to demonstrate our compliance with federal privacy laws.

• To report suspected child abuse, neglect, or domestic violence to appropriate state protective services or law enforcement agencies. Our clinical and administrative staff are mandatory reporters across all states in which we operate.

Special Rule for Substance Use Disorder (SUD) Records

• If we receive medical records regarding substance use disorder treatment from a federally assisted “Part 2” program, those records receive enhanced federal privacy protection under 42 CFR Part 2. With your single, broad consent, we may use and share these records for your child’s treatment, payment, and our healthcare operations. Once shared for these purposes, the recipient may further share the information as permitted by HIPAA. However, federal law strictly prohibits us—or anyone who receives these records from us—from using or disclosing these records (or any clinical testimony about them) in any civil, criminal, administrative, or legislative proceedings against you or the client, unless you provide specific standalone written permission or we are served with a specialized judge-signed Part 2 court order and subpoena. If applicable state laws provide stricter protection for these records, we will follow those stricter standards.

Highly Protected and Sensitive Data

• Certain types of health information may receive enhanced protections under applicable state or federal laws. This may include sensitive information such as reproductive healthcare, family planning, gender-affirming care, genetic testing, or specific mental health records. Where state laws in your region are stricter than federal HIPAA standards regarding the disclosure and use of this sensitive information, we will strictly adhere to the higher state-law protections to safeguard your privacy.

Respond to organ and tissue donation requests

• We are permitted to share your health information with organ procurement organizations.

Work with a medical examiner or funeral director

• We are permitted to share health information with a coroner, medical examiner, or funeral director in the event of an individual’s death.

Address workers’ compensation, law enforcement, and other government requests

We may use or share your health information for the following purposes:

• For workers’ compensation claims
• For law enforcement purposes or when communicating with law enforcement officials
• With health oversight agencies for activities that are legally authorized
• For special government functions such as military, national security, and presidential protective services

Respond to lawsuits and legal actions

• We can share your health information in response to a valid court order, judge-signed subpoena, warrant, or other lawful administrative directive.

Photos & Video Content Used On This Website

• Any photos or video on this website showing any current or previous clients were obtained with the written consent of the parents and or legal guardian or by the individual themselves if of legal age. This content should not be captured and/or reused without expression permission from InBloom Autism Services.

• We are required by law to maintain the privacy and security of your protected health information.

• We will promptly notify you if a breach occurs (within 60 days unless notated differently below) that may have compromised the privacy or security of your information. In Colorado and Florida, we will notify you no later than 30 days after determination. In Wisconsin and Arizona, we would notify you within 45 days.

• We must follow the duties and privacy practices described in this notice and give you a copy of it.

• Redisclosure Warning: Information disclosed pursuant to this notice may be subject to redisclosure by the recipient and may no longer be protected by federal privacy laws (HIPAA).

• Texas Notice of Electronic Disclosure: Your PHI is subject to electronic disclosure. Texas law prohibits electronic disclosure of PHI without a separate authorization for each disclosure unless for treatment, payment, or healthcare operations.

• We will not use or share your information other than as described here unless you tell us we can in writing. If you grant permission, you can change your mind at any time. Please inform us in writing if you decide to revoke your consent.

For more information see: www.hhs.gov

We may revise the terms of this notice, and any changes will apply to all information we have about you. The updated notice will be available upon request, in our office, and on our website.

• This Notice of Privacy Practice is updated as of May 19, 2026. InBloom may change the terms of this Notice at any time. InBloom may, at its discretion, make the new terms effective for all PHI in our possession, including any PHI created or received before the new Notice is issued.

• Treatment documents are available to clients online at Central Reach. Visit login.centralreach.com. You can review how to access the client portal for the first time in your onboarding welcome packets.

If you have any questions about this notice or any complaints about InBloom’s privacy practices or would like to know how to file a complaint with the Secretary of the Department of Health and Human Services, please contact us at: InBloom Autism Services, 6416 NW 5th Way, Fort Lauderdale, FL 33309. Phone: 888.754.0398 x1032, compliance@inbloomautism.com.