Privacy Policy

Effective Date: January 1, 2025

BSP Solutions LLC ("BSP," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Applied Behavior Analysis (ABA) therapy services.

1. Information We Collect

1.1 Information You Provide

• Contact Information: Name, address, phone number, email address
• Child Information: Name, date of birth, medical history, developmental assessments
• Insurance Information: Policy numbers, coverage details (if applicable)
• Payment Information: Credit card details, billing addresses
• Communication Records: Emails, phone records, consultation notes

1.2 Information We Collect Automatically

• Session Data: Therapy session notes, progress reports, behavior data
• Usage Information: How you interact with our services and communications
• Device Information: When accessing our client portal or digital resources

2. HIPAA Compliance

BSP Solutions is fully committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA). We maintain physical, electronic, and procedural safeguards to protect your Protected Health Information (PHI):

• All staff complete annual HIPAA training
• We use encrypted, HIPAA-compliant systems for all health records
• Access to PHI is limited to authorized personnel only
• We conduct regular security audits and risk assessments

3. How We Use Your Information

We use the information we collect for the following purposes:

• Treatment: To provide ABA therapy services and develop treatment plans
• Payment: To process payments and verify insurance coverage
• Healthcare Operations: To improve our services and train our staff
• Communication: To contact you about appointments, services, and care
• Legal Compliance: To comply with legal obligations and regulations

4. Information Sharing and Disclosure

We never sell or rent your personal information. We may share your information only in the following circumstances:

4.1 With Your Consent

• When you provide written authorization
• To coordinate care with other healthcare providers you designate
• To family members or caregivers you authorize

4.2 Without Your Consent (As Permitted by HIPAA)

• When required by law or court order
• To prevent imminent harm to you or others
• For public health activities as required by law
• To report suspected abuse or neglect
• For healthcare oversight activities

5. Your Rights

Under HIPAA and applicable privacy laws, you have the right to:

• Access: Request copies of your child's health records
• Amend: Request corrections to inaccurate information
• Restrict: Request limitations on how we use or disclose PHI
• Confidential Communications: Request communications by alternative means
• Accounting: Request a list of certain disclosures of your PHI
• Complaint: File a complaint if you believe your privacy rights have been violated

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• 256-bit SSL encryption for all data transmission
• Secure, HIPAA-compliant cloud storage with regular backups
• Multi-factor authentication for system access
• Regular security training for all staff members
• Physical security measures at all facility locations
• Incident response procedures for potential breaches

7. Data Retention

We retain your information in accordance with legal requirements:

• Medical records: Minimum of 7 years after last service
• Financial records: 7 years for tax purposes
• Minors' records: Until age 18 plus applicable retention period

8. Children's Privacy

Our services are designed for children, and we take special precautions to protect their privacy:

• We only collect information necessary for treatment
• Parents/guardians have full access to their child's records
• We do not market to children or collect unnecessary data

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on our website
• Sending an email to your registered email address
• Providing notice at your next appointment

10. Contact Information

11. Acknowledgment

By using our services, you acknowledge that you have read and understood this Privacy Policy. For questions about this policy or how we handle your information, please contact our Privacy Officer.