Skip to main content

PRIVACY POLICY

Last Updated: October 28, 2025

INTRODUCTION AND COMMITMENT

Dr. Arlene Brewster (“I,” “My,” “Me,” “the Practice”) is deeply committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy governs your use of the website brewsterphd.com (“Website”) and outlines how your information, including Protected Health Information (PHI), is collected, used, disclosed, and protected when you engage with my professional psychological services (“Services”).

This policy functions as both a general privacy policy for the Website and a Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act (HIPAA). Please read this document carefully to understand your rights and my responsibilities.

INFORMATION I COLLECT

I collect information in several ways to provide and improve my services and to communicate with you effectively.

2.1. Information You Voluntarily Provide:

  • Contact Forms and Email Communication: When you contact me via the Website’s forms, email, or by phone, you may provide Personal Information such as your name, email address, and phone number, along with the content of your message. You are strongly advised not to submit sensitive Protected Health Information (PHI) through these non-secure channels.
  • New Patient Information Packet: To become a client, you will complete a comprehensive intake packet. This is where I collect necessary PHI, which may include:
    • Demographic Information: Name, address, date of birth, emergency contact information.
    • Health Information: Personal and family medical history, mental health history, current symptoms, and previous treatment records.
    • Financial Information: Credit card details for payment, and insurance information if you plan to seek out-of-network reimbursement.

2.2. Information Collected Automatically (Website Data):

  • Log Files: Like most websites, brewsterphd.com uses log files. This information includes your Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), referring/exit pages, and date/time stamps. This data is used for website administration, analyzing trends, and ensuring security; it is not linked to personally identifiable information.
  • Cookies: This Website may use “cookies” to enhance user experience. A cookie is a small text file stored on your device. Cookies are used to remember your preferences and to gather anonymous analytics data. You can control the use of cookies at the individual browser level. If you reject cookies, you may still use the Website, but your ability to use some features may be limited.

HOW YOUR INFORMATION IS USED

Your information is used for the following specific and legitimate purposes:

  • To Provide Clinical Services: Your PHI is the foundation of your clinical care. It is used to assess your needs, formulate a diagnosis, develop a treatment plan, and provide psychotherapy.
  • To Communicate With You: I use your contact information to respond to your inquiries, schedule and confirm appointments, and provide important information related to your care.
  • For Payment and Billing: Your financial information is used to process payments for services rendered and to provide you with statements or “superbills” for insurance reimbursement purposes.
  • For Healthcare Operations: I may use your information for necessary administrative and operational tasks, such as quality assessment, professional consultation, and business planning.
  • To Maintain Website Functionality: Automatically collected data is used to operate, maintain, and secure the Website.

PROTECTION AND SECURITY OF YOUR INFORMATION

I take the security of your information very seriously and have implemented appropriate administrative, physical, and technical safeguards to protect it.

  • Administrative Safeguards: Policies and procedures are in place to limit access to your PHI to only those who need it to perform their duties.
  • Technical Safeguards: The Website uses Secure Sockets Layer (SSL) technology to encrypt data transmitted through it. All electronic PHI is stored on secure, HIPAA-compliant platforms. Telehealth sessions are conducted via a secure, end-to-end encrypted, HIPAA-compliant video service.
  • Disclaimer: While I employ robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, I cannot guarantee its absolute security.

DISCLOSURE AND SHARING OF YOUR INFORMATION

I will not disclose your personal information or PHI without your express written authorization, except in the specific circumstances permitted or required by law.

5.1. With Your Consent: You may provide written authorization for me to disclose your information to anyone you choose (e.g., a family member, another healthcare provider).

5.2. For Treatment, Payment, and Healthcare Operations: I may disclose your PHI to another healthcare provider for the purpose of your treatment, to your insurance company to facilitate payment, and for other necessary healthcare operations.

5.3. Business Associates: I may share information with third-party “business associates” who perform functions on my behalf (e.g., payment processing, a HIPAA-compliant electronic health record provider). These associates are legally bound by a Business Associate Agreement to protect your PHI to the same high standard that I do.

5.4. As Required by Law: I am legally and ethically obligated to disclose PHI in the following situations, without your consent:

  • In cases of suspected child, elder, or dependent adult abuse or neglect.
  • If you pose a serious threat of harm to yourself or an identifiable other person.
  • In response to a legally binding court order.
  • In response to a public health risk, as required by the CDC or state health department.

YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION (PHI)

As a client, you have the following rights under HIPAA regarding your PHI:

  • Right to Access: You have the right to inspect and obtain a copy of your clinical records.
  • Right to Amend: If you believe information in your record is incorrect or incomplete, you have the right to request an amendment.
  • Right to an Accounting of Disclosures: You have the right to request a list of the disclosures I have made of your PHI for purposes other than treatment, payment, or healthcare operations.
  • Right to Request Restrictions: You have the right to request a restriction on how your PHI is used or disclosed. I am not required to agree to all requests but will consider them carefully.
  • Right to Request Confidential Communications: You have the right to request that I communicate with you about your health in a specific way or at a specific location (e.g., only by cell phone).
  • Right to a Paper Copy: You have the right to a paper copy of this Notice of Privacy Practices at any time.

To exercise any of these rights, please submit your request in writing.

THIRD-PARTY WEBSITES AND CHILDREN’S PRIVACY

7.1. Third-Party Links: This Website may contain links to other websites. This Privacy Policy only applies to this Website. I am not responsible for the privacy practices of other sites.

7.2. Children’s Privacy: This Website and my Services are not directed to individuals under the age of 13. I do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided me with information, please contact me immediately.

CHANGES TO THIS PRIVACY POLICY

I reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Website or my Services after any change constitutes your acceptance of the new policy.

CONTACT INFORMATION AND PRIVACY OFFICER

If you have any questions, concerns, or complaints about this Privacy Policy or your privacy rights, please contact me. I serve as my own Privacy Officer.

You also have the right to file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. I will not retaliate against you for filing a complaint.