Privacy Policy

Effective Date: [12/12/2025]

1. Introduction

Flourish & Grace Therapy PLLC is a psychotherapy practice operated by a Licensed Clinical Social Worker (LCSW) licensed in the State of North Carolina. I are committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website or engage in psychotherapy services, including telehealth.

2. Information CollectED

a. Personal Information

I may collect personal information that you voluntarily provide, including:

• Name
• Email address
• Phone number
• Date of birth
• Insurance and billing information
• Information submitted through contact forms, intake forms, or secure client portals

b. Health Information

If you become a client, I collect protected health information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). This information is used only for purposes permitted under HIPAA, including treatment, payment, and healthcare operations, and in accordance with social work ethical standards.

c. Website Usage Information

When you visit my website, I may collect limited technical data (such as IP address, browser type, pages visited, and timestamps). This information is used for website functionality and analytics and does not personally identify you.

3. How Your Information Is USed

Your information may be used to:

• Provide psychotherapy services
• Assess appropriateness for services
• Schedule appointments and respond to inquiries
• Communicate regarding services, billing, or administrative matters
• Submit claims and process payments through Headway
• Maintain clinical and administrative records in compliance with North Carolina law and professional standards
• Improve website and service functionality
• Comply with legal, ethical, and regulatory obligations

4. Confidentiality, Ethics, and HIPAA Compliance

As a Licensed Clinical Social Worker, I am legally and ethically required to protect your confidentiality in accordance with:

• HIPAA
• North Carolina law
• The NASW Code of Ethics

Your PHI will not be disclosed without your written authorization except as permitted or required by law, including:

• When there is risk of serious, foreseeable harm to yourself or others
• Suspected abuse, neglect, or exploitation of a minor, disabled adult, or elder as required under North Carolina law
• Court orders, subpoenas, or other lawful legal processes

Clients will receive a separate Notice of Privacy Practices that describes HIPAA rights in detail.

5. Telehealth Privacy and Security (North Carolina)

Use of Telehealth

Telehealth services are provided in accordance with North Carolina law, HIPAA, and social work professional standards. Sessions are conducted through Headway’s HIPAA-compliant telehealth platform or other secure, encrypted technologies approved for healthcare use.

Risks of Telehealth

Despite reasonable safeguards, telehealth services carry potential risks, including:

• Technology failures or service interruptions
• Unauthorized access if sessions are conducted in non-private or unsecured environments
• Limitations compared to in-person services

By participating in telehealth, you acknowledge and accept these risks.

Client Responsibilities

To protect confidentiality during telehealth services, clients agree to:

• Participate from a private and secure location
• Use a secure internet connection and personal device when possible
• Notify me if privacy or security is compromised

Location and Emergency Requirements

For telehealth services, North Carolina law requires that we obtain your physical location at the time of each session. This information is necessary for emergency response purposes. If an emergency occurs, I may contact emergency services in your geographic area.

Confidentiality and Legal Exceptions

Confidentiality protections and legal exceptions are the same for telehealth as for in-person services.

Electronic Communications

Email, text messaging, and secure portal messaging may be used for scheduling and administrative purposes only. These methods are not appropriate for clinical emergencies and may not be fully secure.

Telehealth Consent

Clients are required to sign a separate Telehealth Informed Consent prior to receiving telehealth services. Consent may be withdrawn at any time.

6. Use of Headway and Third-Party Services

I use Headway for appointment scheduling, insurance billing, documentation, payment processing, and telehealth services. Headway is required to maintain HIPAA compliance and appropriate administrative, technical, and physical safeguards.

Additional third-party services (such as website hosting or analytics tools) may be used and are required to protect information consistent with applicable privacy laws.

7. Cookies and Tracking Technologies

My website may use cookies or similar technologies to improve functionality. You may disable cookies through your browser settings; however, some website features may not function properly.

8. Your Privacy Rights

You have rights under HIPAA and applicable law, including the right to:

• Access your health records
• Request corrections
• Request restrictions on certain uses or disclosures
• Request confidential communications

Requests must be submitted in writing using the contact information below.

9. Children’s Privacy

This website is not intended for children under 13. I do not knowingly collect personal information from children without appropriate consent.

10. Changes to This Privacy Policy

I may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date.

11. Contact Information

For questions regarding this Privacy Policy or your privacy rights, contact:

Flourish & Grace Therapy PLLC
Nicole Thompson, LCSW
Email: n.thompson@flourishandgracetherapy.com
Phone: 910-492-3077
Address: PO Box 82, 107 S Lee Street, Whiteville, NC 28472