Skip to main content
Whatif Therapy ERP · PE · Telehealth CA
HIPAA Notice · Privacy Practices

Your Privacy Rights Under HIPAA

This Notice describes how protected health information may be used and disclosed by Whatif Therapy, and how you can access your information.

Notice of Privacy Practices

Effective Date: December 7, 2025

Practice Name: Whatif Therapy

Provider: Matthew Baker, LCSW

Email: matt@whatiftherapy.com

Please review this Notice carefully. You have the right to ask questions about your privacy rights at any time.

1. Your Rights

You have the right to access, review, and make certain requests about your protected health information.

1.1 Get an electronic or paper copy of your records

You may request a copy of your protected health information. We will provide it within 30 days, or let you know if more time is needed. Reasonable copying and mailing fees may apply.

1.2 Request a correction

If you believe something in your record is incorrect or incomplete, you may request an amendment. We may decline the request if the information is accurate as-is. But we will explain why in writing.

1.3 Request confidential communications

You may ask that we contact you through a specific method, such as email or phone, or at a specific location.

1.4 Request restrictions on disclosures

You may ask us not to share your information for certain purposes. We will consider your request but are not required to agree unless it involves a service you paid for fully out-of-pocket.

1.5 Receive an accounting of disclosures

You may request a list of when your information was shared for purposes other than treatment, payment, or healthcare operations.

1.6 Restrict disclosures to health plans

If you pay out-of-pocket in full for a service, you may request that we not disclose that service to your insurance plan.

1.7 Receive a paper copy of this Notice

You may request a paper copy of this Notice even if you agreed to receive it electronically.

1.8 File a complaint without retaliation

If you believe your privacy rights were violated, you may file a complaint with Whatif Therapy, the U.S. Department of Health and Human Services Office for Civil Rights, or the California Board of Behavioral Sciences. No retaliation will occur.

2. How We Use and Disclose Your Information

We are permitted or required to use protected health information in the following ways.

2.1 Treatment

We may use your information to provide, coordinate, or manage your care. This may include creating treatment plans, coordinating with other providers with your written permission, or consulting when clinically necessary.

2.2 Payment

We may use and disclose protected health information to obtain payment for services. This may include verifying benefits, billing insurance, or providing required documentation for reimbursement.

2.3 Healthcare Operations

We may use information for quality improvement and administrative purposes, including internal record management, supervisory review, or licensing audits.

3. Other Uses and Disclosures

We may also share information as permitted or required by law.

  • When required by law: such as court orders or mandated reporting requirements.
  • To prevent harm: if there is a credible threat of serious harm to yourself or others.
  • Mandated reporting in California: suspected child abuse, elder or dependent adult abuse, and certain threats of violence.
  • Worker’s compensation, law enforcement, or government requests: when legally obligated.
  • Public health and safety: such as preventing disease or reporting adverse reactions when required.
  • Organ and tissue donation requests: if applicable, though this is rare in therapy.

4. Uses and Disclosures Requiring Written Authorization

We will not use or disclose your protected health information without your written permission for:

  • Marketing
  • Sale of your information
  • Most uses of psychotherapy notes
  • Release of information to third parties not involved in your care
  • Sharing information with family members unless permitted under HIPAA and you consent verbally

You may revoke authorization at any time.

5. Our Responsibilities

Whatif Therapy is required to:

  • Maintain the privacy and security of your protected health information
  • Notify you of any breach of unsecured health information
  • Provide a Notice of Privacy Practices
  • Follow the terms of this Notice

Whatif Therapy uses HIPAA-compliant platforms, including SimplePractice for records and telehealth.

6. Telehealth-Specific Privacy

Whatif Therapy provides therapy exclusively through telehealth.

  • Sessions are conducted through secure, encrypted, HIPAA-compliant video.
  • Sessions are not recorded without your explicit written consent.
  • You must be physically located in California during each session.
  • Technology disruptions may occur; alternative arrangements may be made if needed.

7. Changes to This Notice

We may update this Notice at any time. The revised Notice will be available on the website, provided upon request, and applied to all existing and future protected health information.

8. Contact Information

If you have questions, want to make a privacy request, or wish to file a complaint, contact:

Whatif Therapy
Attn: Privacy Officer
Email: matt@whatiftherapy.com
Website: www.whatiftherapy.com

Schedule a free 15-minute consultation