<style>.ash-legal-page{max-width:820px;margin:0 auto;padding:48px 24px 64px;font-family:'DM Sans',system-ui,sans-serif;color:#2D3E5F;line-height:1.7;font-size:17px}.ash-legal-page h1{font-family:'Fraunces',Georgia,serif;font-size:clamp(32px,5vw,44px);font-weight:600;color:#1A2B4A;line-height:1.15;margin-bottom:12px}.ash-legal-page .effective{display:block;font-size:14px;color:#6B7280;font-style:italic;margin-bottom:32px}.ash-legal-page h2{font-family:'Fraunces',Georgia,serif;font-size:24px;font-weight:600;color:#1A2B4A;margin:40px 0 12px;padding-bottom:8px;border-bottom:2px solid #F5A623}.ash-legal-page h3{font-family:'Fraunces',Georgia,serif;font-size:19px;font-weight:600;color:#1A2B4A;margin:28px 0 10px}.ash-legal-page p{margin-bottom:14px}.ash-legal-page ul,.ash-legal-page ol{margin:14px 0 14px 24px}.ash-legal-page li{margin-bottom:8px}.ash-legal-page strong{color:#1A2B4A}.ash-legal-page a{color:#F5A623;font-weight:500;text-underline-offset:2px}.ash-legal-page a:hover{color:#1A2B4A}.ash-legal-page .callout{background:#FEF7E8;border-left:4px solid #F5A623;padding:16px 20px;margin:24px 0;border-radius:6px}.ash-legal-page .callout p:last-child{margin-bottom:0}.ash-legal-page .contact-block{background:#F9FAFB;border:1px solid #E5E7EB;padding:20px 24px;margin:24px 0;border-radius:8px}.ash-legal-page .related{margin-top:48px;padding-top:24px;border-top:1px solid #E5E7EB;font-size:15px;color:#6B7280}</style><article class="ash-legal-page"><h1>HIPAA Notice of Privacy Practices</h1><span class="effective">Effective date: April 13, 2026</span><p>This notice describes how we handle your child's health information and what rights you have over that information. We take this seriously. Please read it carefully, and reach out if you have any questions.</p><div class="callout"><p><strong>Your rights matter.</strong> Federal law requires us to maintain the privacy of your child's Protected Health Information (PHI), to provide you with this notice, and to follow the terms described here. We are required to notify you if we ever discover that your information was accessed without authorization.</p></div><h2>1. Who We Are and What This Notice Covers</h2><p>Achieving Stars Therapy is a HIPAA covered entity. We provide in-home Applied Behavior Analysis (ABA) therapy for children with autism in Colorado, Kansas, New Hampshire, and South Carolina. This notice applies to all health information we create or receive about your child in connection with our services.</p><p>This notice covers information we collect when you contact us, enroll your child in services, or receive care from our BCBAs and Registered Behavior Technicians. It applies to our staff, contractors, and business associates who handle your child's information on our behalf.</p><h2>2. How We Use and Share Your Child's Health Information</h2><p>Most of the time, we use your child's information for three core purposes: providing therapy (treatment), billing your insurance (payment), and running our practice (healthcare operations). We do not sell your child's information. We do not use it for advertising. Here is what each of those three categories means in practice.</p><h3>Treatment</h3><p>We use your child's health information to provide ABA therapy services. This includes sharing relevant information among our clinical team, such as between your child's BCBA and their Registered Behavior Technician (RBT), so everyone providing care is working from the same plan. We may also share information with other healthcare providers involved in your child's care, such as their pediatrician or developmental specialist, when coordinating treatment.</p><h3>Payment</h3><p>We use your child's health information to bill Medicaid, private insurance (such as Cigna, Aetna, Anthem/BCBS, or UnitedHealthcare), or other payers for services rendered. This includes submitting claims, verifying coverage, and responding to billing inquiries. We may share information with your insurer to confirm that services were medically necessary.</p><h3>Healthcare Operations</h3><p>We use health information to run our practice effectively. This includes quality improvement activities, staff training and supervision, credentialing our clinicians, and conducting audits or risk assessments. For example, a clinical supervisor may review session notes to ensure our BCBAs are providing the highest quality care.</p><h2>3. Other Permitted Uses and Disclosures (No Authorization Required)</h2><p>Federal law permits us to use or share your child's health information in certain situations without asking for your written permission. These include:</p><ul><li><strong>Required by law:</strong> We will disclose information when required by federal, state, or local law, such as in response to a court order or subpoena.</li><li><strong>Public health activities:</strong> We may report certain information to public health agencies to prevent or control disease, injury, or disability, as required by law.</li><li><strong>Child abuse or neglect:</strong> We are required by law to report suspected abuse or neglect of a child to the appropriate state authority.</li><li><strong>Health oversight activities:</strong> We may disclose information to state or federal health agencies conducting audits, inspections, or investigations related to the healthcare system.</li><li><strong>Law enforcement:</strong> Under specific circumstances defined by law, we may share information with law enforcement agencies.</li><li><strong>Serious threats to health or safety:</strong> If we believe in good faith that sharing information is necessary to prevent a serious and imminent threat to a person or the public, we may disclose that information to appropriate parties such as law enforcement or public health officials.</li><li><strong>Workers' compensation:</strong> We may disclose information as authorized or required by workers' compensation laws, to the extent your child's care relates to a workers' compensation claim.</li><li><strong>Military and national security:</strong> We may share information with authorized federal officials for lawful intelligence or national security activities, as required by law.</li><li><strong>Business associates:</strong> We share information with vendors and service providers (our "business associates") who help us operate, such as billing companies and electronic health record platforms. All business associates are required by contract to protect your information.</li></ul><h2>4. Uses and Disclosures That Require Your Written Authorization</h2><p>For most uses not described above, we will ask for your written permission before sharing your child's information. You may revoke that permission at any time by contacting our Privacy Officer in writing. Revocation will not affect uses or disclosures that already occurred. The following always require your written authorization:</p><ul><li><strong>Marketing communications:</strong> We will not use your child's health information to send marketing messages without your written consent.</li><li><strong>Sale of health information:</strong> We will never sell your child's protected health information.</li><li><strong>Most uses of psychotherapy notes:</strong> If separate psychotherapy notes are maintained, we require your authorization before using or sharing them for most purposes.</li><li><strong>Any other use not described in this notice.</strong></li></ul>
<h2>5. Your Rights Regarding Your Child's Health Information</h2><p>As the parent or legal guardian, you have the following rights. To exercise any of these rights, please contact our Privacy Officer using the information at the bottom of this notice.</p><h3>Right to Access Records</h3><p>You have the right to inspect and receive a copy of your child's health records, including treatment records and billing records. We will provide access within 30 days of your request (or 60 days if the records are stored off-site). We may charge a reasonable, cost-based fee for copies. In most cases, we can provide records electronically if you prefer.</p><h3>Right to Amend Records</h3><p>If you believe your child's health information is inaccurate or incomplete, you may request that we correct it. We will respond within 60 days. We may deny the request in limited circumstances (for example, if we did not create the record). If we deny your request, we will explain why in writing, and you may submit a written statement of disagreement.</p><h3>Right to an Accounting of Disclosures</h3><p>You have the right to receive a list of certain disclosures we have made of your child's health information during the past six years. This list does not include disclosures made for treatment, payment, or healthcare operations, or disclosures you authorized. We will provide the first accounting in any 12-month period at no charge; we may charge a reasonable fee for additional requests.</p><h3>Right to Request Restrictions</h3><p>You may ask us to limit how we use or share your child's information for treatment, payment, or healthcare operations. We are not required to agree to your request unless you ask us not to share information with your health plan about services you paid for entirely out of pocket. If we agree to a restriction, we will honor it unless the information is needed to provide emergency care.</p><h3>Right to Confidential Communications</h3><p>You may ask us to contact you in a specific way, such as by email only rather than phone, or at a different address. We will accommodate reasonable requests. We will not ask you to explain why you are making the request.</p><h3>Right to a Paper Copy of This Notice</h3><p>Even if you received this notice electronically, you may request a paper copy at any time. Contact us using the information below and we will mail one to you.</p><h3>Right to Be Notified of a Breach</h3><p>If we discover that your child's unsecured protected health information has been accessed or disclosed without authorization, we are required by federal law to notify you promptly, generally within 60 days of discovering the breach.</p><h2>6. Our Duties</h2><p>Achieving Stars Therapy is required by law to:</p><ul><li>Maintain the privacy of your child's protected health information</li><li>Provide you with this notice describing our legal duties and privacy practices</li><li>Follow the terms of the notice currently in effect</li><li>Notify you if we believe a breach of your child's unsecured information has occurred</li></ul><p>We reserve the right to change our privacy practices and the terms of this notice. If we make a significant change, we will revise this notice and make the new version available on our website and in our office. The new notice will apply to information we already hold, as well as information we receive going forward.</p><h2>7. How to File a Complaint</h2><p>If you believe your rights under HIPAA have been violated, you have two options. You can file a complaint directly with us, or you can file a complaint with the U.S. Department of Health and Human Services. You may do both. We will not retaliate against you or your child for filing a complaint.</p><div class="callout"><p><strong>File with Achieving Stars Therapy:</strong> Contact our Privacy Officer by phone, email, or fax. We will acknowledge your complaint within 5 business days and work to resolve it within 30 days.</p><p><strong>File with HHS Office for Civil Rights:</strong><br> U.S. Department of Health and Human Services<br> Office for Civil Rights<br> 200 Independence Avenue, S.W.<br> Washington, D.C. 20201<br> Phone: 1-800-368-1019 | TDD: 1-800-537-7697<br> Online: <a href="https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf" target="_blank" rel="noopener">ocrportal.hhs.gov</a></p></div><h2>8. Questions About This Notice?</h2><p>If you have questions about this notice or want to exercise any of your rights, please contact our Privacy Officer.</p><div class="contact-block"><p><strong>Achieving Stars Therapy — Privacy Officer</strong></p><p>Phone: <a href="tel:+18336663115">(833) 666-3115</a></p><p>Email: <a href="mailto:privacy@achievingstarstherapy.com">privacy@achievingstarstherapy.com</a></p><p>Fax: (833) 666-1401</p></div><p style="font-size:14px; color:#6B7280;">This notice is required under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 45 CFR § 164.520. References to "you" and "your" in this notice refer to the parent or legal guardian of the child receiving services, as well as the child once they reach the age of majority and hold their own rights under applicable law.</p><div class="related"><strong>Related:</strong><a href="/privacy-policy">Privacy Policy</a> · <a href="/hipaa-notice-of-privacy-practices">HIPAA Notice</a> · <a href="/non-discrimination-notice">Non-Discrimination Notice</a> · <a href="/accessibility-statement">Accessibility Statement</a> · <a href="/medical-disclaimer">Medical Disclaimer</a> · <a href="/complaints-and-grievance-policy">Complaints Policy</a> · <a href="/terms-and-conditions">Terms</a></div></article>