Privacy Policy

Last Updated: February 17, 2026

Introduction

RuthThomas LLC ("we," "us," or "our") is committed to protecting your privacy and maintaining the confidentiality of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

As a healthcare provider, we are bound by the Health Insurance Portability and Accountability Act (HIPAA) and comply with all applicable federal and state privacy laws.

HIPAA Compliance

We are required by law to maintain the privacy and security of your protected health information (PHI). PHI includes information that identifies you and relates to your:

  • Past, present, or future physical or mental health condition
  • Healthcare services provided to you
  • Payment for healthcare services

We provide you with a Notice of Privacy Practices (NPP) that describes in detail how we may use and disclose your PHI. You will receive this notice at your first appointment.

Information We Collect

Personal Information

When you use our services, we may collect:

  • Name, address, phone number, email address
  • Date of birth and age
  • Insurance information
  • Emergency contact information

Health Information

  • Medical history and current health conditions
  • Psychiatric diagnoses
  • Treatment plans and progress notes
  • Medication records
  • Laboratory test results

Website Usage Information

  • Browser type and version
  • IP address
  • Pages visited and time spent on pages
  • Referring website

How We Use Your Information

We use your information for:

Treatment

Providing, coordinating, or managing your healthcare and related services. This includes consultations between healthcare providers concerning a patient and referrals to other providers.

Payment

Billing and collecting payment for services, determining insurance eligibility and coverage, and processing claims.

Healthcare Operations

Quality assessment and improvement, training programs, accreditation, and business planning.

Information Sharing and Disclosure

We will not share your information without your written authorization except in the following circumstances:

  • Emergency Situations: To prevent serious harm to you or others
  • Legal Requirements: When required by law, court order, or subpoena
  • Public Health Activities: Reporting communicable diseases or child/elder abuse
  • Business Associates: Third-party service providers who assist us (e.g., billing companies, IT support) under strict confidentiality agreements

Your Rights

You have the right to:

  • Access: Request and receive a copy of your medical records
  • Amendment: Request changes to your medical records if you believe they are incomplete or inaccurate
  • Accounting of Disclosures: Receive a list of certain disclosures of your PHI
  • Restrictions: Request restrictions on how we use or disclose your information
  • Confidential Communications: Request we communicate with you in a specific way or at a specific location
  • Revoke Authorization: Revoke any previously granted authorization (except to the extent action has already been taken)

Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information, including:

  • Encrypted data transmission (SSL/TLS)
  • Secure, password-protected electronic health records systems
  • Regular security audits and risk assessments
  • Employee training on privacy and security protocols
  • Limited access to PHI on a need-to-know basis
  • Secure telehealth platforms that are HIPAA-compliant

Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to improve your browsing experience. These technologies:

  • Help us understand how you use our website
  • Remember your preferences
  • Analyze website traffic and performance

You can disable cookies in your browser settings, though some features of our website may not function properly.

Third-Party Services

We use HIPAA-compliant third-party services to support our operations:

  • SimplePractice: Practice management and telehealth platform
  • Email Services: For appointment reminders and administrative communication

All third-party vendors sign Business Associate Agreements (BAAs) ensuring they comply with HIPAA requirements.

Children's Privacy

We provide services to adolescents (ages 13-17) with parental/guardian consent. For patients under 18, parents/guardians have the right to access their child's health information unless prohibited by law. In certain circumstances, minors may have the right to consent to treatment and control access to their health information.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be effective when posted on this page with an updated "Last Updated" date. We will notify you of material changes by email or through a notice on our website.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

RuthThomas LLC

Privacy Officer

13421 Tamarack Road

Silver Spring, MD 20904

Phone: (301) 674-4122

Email: info@ruththomaswellness.com

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights:

U.S. Department of Health and Human Services

Office for Civil Rights

200 Independence Avenue, S.W.

Washington, D.C. 20201

Phone: 1-877-696-6775

Website: www.hhs.gov/ocr/privacy

You will not be retaliated against for filing a complaint.