Notice of Privacy Practices

Your Information. Your Rights. Our Responsibilities.

Effective Date: August 1, 2026

This Notice describes how medical information about you may be used and disclosed, how you can access this information, and your rights regarding your protected health information.

Please review it carefully.

Privacy Contact

Good Enough Counseling Co.
Diana Huynh, LICSW, PMH-C
2145 Diamond Hill Road
Cumberland, Rhode Island 02864

Phone: (401) 206-0742
Email: hello@goodenoughcounselingco.com

You may contact Diana Huynh with questions about this Notice, your privacy rights, or the Practice’s privacy practices.

Your Rights

You have the right to:

  • Receive an electronic or paper copy of your medical record

  • Ask to correct your medical record

  • Request confidential communication

  • Ask the Practice to limit how your information is used or shared

  • Receive a list of certain disclosures of your information

  • Receive a copy of this Notice

  • Choose someone to act on your behalf

  • File a complaint if you believe your privacy rights have been violated

These rights are explained in greater detail below.

Receive an Electronic or Paper Copy of Your Medical Record

You may ask to see or receive an electronic or paper copy of your medical record and other health information maintained by the Practice.

Requests should be submitted in writing through the client portal, by email, or by another method arranged with the Practice.

The Practice will generally provide a copy or summary of your health information within 30 days of receiving your request. A reasonable, cost-based fee may apply when permitted by law.

Psychotherapy notes are maintained separately from the medical record and receive additional legal protection. A request for your medical record does not automatically include psychotherapy notes.

Ask to Correct Your Medical Record

You may ask the Practice to correct health information that you believe is inaccurate or incomplete.

Requests should be submitted in writing and should identify:

  • The information you believe is inaccurate or incomplete

  • The correction you are requesting

  • The reason for the requested correction

The Practice may deny your request in certain circumstances. If the request is denied, you will generally be informed of the reason in writing within 60 days.


Request Confidential Communication

You may ask the Practice to contact you in a specific way or at a particular location.

For example, you may request that the Practice:

  • Contact only your mobile telephone

  • Avoid leaving detailed voicemail messages

  • Use the client portal instead of email

  • Send mail to a different address

  • Avoid using a particular communication method

The Practice will agree to reasonable requests.

Please inform the Practice if communicating with you through a particular method or at a particular location could place your privacy or safety at risk.


Ask the Practice to Limit What Is Used or Shared

You may ask the Practice not to use or share certain health information for treatment, payment, or healthcare operations.

The Practice is not always required to agree to your request. For example, a request may be denied if limiting the information could interfere with your care or with legally required practice operations.

If the Practice agrees to a restriction, the information may still be disclosed when necessary to provide emergency treatment or when otherwise required by law.

If you pay for a service entirely out of pocket, you may ask the Practice not to disclose information about that service to your health insurer for payment or healthcare operations.

The Practice will agree to that request unless disclosure is required by law.


Receive a List of Certain Disclosures

You may ask for an accounting of certain times the Practice disclosed your health information during the six years before the date of your request.

The accounting will generally identify:

  • Who received the information

  • What information was disclosed

  • When it was disclosed

  • The reason for the disclosure

The accounting will not include every disclosure. For example, it generally will not include disclosures made:

  • For treatment, payment, or healthcare operations

  • Directly to you

  • With your written authorization

  • For certain legally permitted purposes

The Practice will provide one accounting during any 12-month period without charge. A reasonable, cost-based fee may apply if you request another accounting within the same 12-month period.

Receive a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

The current Notice will also be available through the client portal, at the Practice’s office, and on the Practice’s website.

Choose Someone to Act on Your Behalf

If you have given someone medical power of attorney, or if someone is your legal guardian or otherwise legally authorized to act for you, that person may exercise your privacy rights and make choices regarding your health information.

Before taking action, the Practice may request documentation confirming that the person has authority to act on your behalf.

File a Complaint

You may contact the Practice if you believe your privacy rights have been violated:

Good Enough Counseling Co.
Diana Huynh, LICSW, PMH-C
2145 Diamond Hill Road
Cumberland, Rhode Island 02864

Phone: (401) 206-0742
Email: hello@goodenoughcounselingco.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by:

  • Sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201

  • Calling 1-877-696-6775

  • Using the Office for Civil Rights online complaint process

The Practice will not retaliate against you for filing a complaint or exercising your privacy rights.

Your Choices

For certain health information, you may tell the Practice how you would like your information to be shared.

Family, Friends, and Others Involved in Your Care

You may tell the Practice whether information may be shared with:

  • A spouse or partner

  • A family member

  • A close friend

  • An emergency contact

  • Another person involved in your care

  • Someone helping pay for your care

You may identify what information may be shared and with whom.

If you are unable to communicate your preferences, such as during an emergency, the Practice may share relevant information when it is believed to be in your best interest and permitted by law.

The Practice may also share information when necessary to reduce a serious and imminent threat to your health or safety or the health or safety of another person.

Disaster Relief

You may tell the Practice whether information may be shared with an organization assisting with disaster-relief efforts.

Hospital Directories

Good Enough Counseling Co. is an outpatient psychotherapy practice and does not maintain a hospital directory.


Marketing, Sale of Information, and Psychotherapy Notes

The Practice will not use or disclose your health information for marketing purposes or sell your health information without your written authorization.

The Practice does not sell client information.

Most uses or disclosures of psychotherapy notes require your specific written authorization unless an exception under applicable law permits or requires disclosure.

Fundraising

Good Enough Counseling Co. does not use client information to conduct fundraising and will not contact you for fundraising purposes.

If the Practice maintains substance-use-disorder patient records protected by 42 CFR Part 2, those records will not be used for fundraising communications without providing any notice and choice required by applicable law.

Our Uses and Disclosures

How Does the Practice Typically Use or Share Your Information?

The Practice typically uses or shares health information in the following ways.

To Treat You

The Practice may use your health information and share it with other professionals who are involved in your care.

For example, with your authorization or as otherwise permitted by law, your therapist may communicate with a physician, psychiatric provider, or another treating professional to coordinate care.

When reasonable and appropriate, the Practice will limit the information shared to what is necessary for the purpose.

To Operate the Practice

The Practice may use and share your health information to:

  • Manage your treatment and services

  • Maintain clinical and billing records

  • Contact you about appointments

  • Review and improve the quality of care

  • Conduct administrative and compliance activities

  • Obtain professional consultation

  • Manage the client portal and electronic health record

  • Meet legal, ethical, insurance, and licensing obligations

For example, the Practice may use your information to coordinate scheduling, review treatment documentation, or maintain secure records.

Business associates that perform services for the Practice may receive protected health information when necessary to perform those services.

Business associates are required to protect your information in accordance with applicable privacy and security requirements.

To Bill for Services

The Practice may use and disclose your health information to bill and receive payment from:

  • Health insurance plans

  • Third-party billing or claims-processing services

  • Payment processors

  • Other entities responsible for payment

For example, the Practice may provide your diagnosis, dates of service, procedure codes, and other information required for your insurance company to process a claim.

Insurance companies may request additional information regarding:

  • Symptoms

  • Diagnosis

  • Functional impairment

  • Treatment goals

  • Attendance

  • Progress

  • Medical necessity

Only information reasonably necessary for billing, authorization, utilization review, or payment will be disclosed.

Other Uses and Disclosures

The Practice may be permitted or required to use or disclose health information in other circumstances.

Applicable laws may impose conditions that must be met before information is shared.

Substance-Use-Disorder Patient Records

To the extent that the Practice creates, receives, or maintains substance-use-disorder patient records protected by 42 CFR Part 2, those records receive additional federal protection.

The Practice will not use or disclose Part 2 records in a civil, criminal, administrative, or legislative investigation or proceeding against you unless:

  1. You provide written consent; or

  2. The disclosure is authorized by a qualifying court order and subpoena as required by law.

Part 2 protections may apply differently depending on whether the Practice is acting as a federally assisted substance-use-disorder treatment program or receives records from such a program.

The Practice will follow the protections that apply to the records in its possession.

Public Health and Safety

The Practice may share health information for legally authorized public-health and safety purposes, including:

  • Preventing or controlling disease

  • Reporting adverse reactions to medications or products

  • Assisting with product recalls

  • Reporting suspected abuse, neglect, or exploitation

  • Preventing or reducing a serious threat to health or safety

Abuse, Neglect, and Exploitation

The Practice may be required to report suspected abuse, neglect, or exploitation involving:

  • A child

  • An older adult

  • A dependent adult

  • Another individual protected by applicable reporting laws

Only information required or reasonably necessary for the report will be disclosed.

Serious Threats to Health or Safety

The Practice may disclose information or take protective action when necessary and permitted by law to prevent or reduce a serious and imminent threat to your health or safety or the health or safety of another person.

Protective action may include contacting:

  • Emergency services

  • Crisis services

  • Law enforcement

  • Your emergency contact

  • A person reasonably able to assist with safety

When reasonably possible, your Provider will discuss the need for protective action with you.

Research

The Practice may use or disclose health information for research only when the applicable legal requirements have been satisfied.

Good Enough Counseling Co. does not ordinarily conduct or participate in research involving identifiable client information.

Compliance With the Law

The Practice will disclose information when state or federal law requires it.

This may include disclosure to the U.S. Department of Health and Human Services if it requests information to determine whether the Practice is complying with federal privacy law.

Organ and Tissue Donation

The Practice may share health information with organ-procurement organizations when legally permitted and applicable.

Medical Examiners and Funeral Directors

The Practice may disclose health information to a:

  • Coroner

  • Medical examiner

  • Funeral director

Such disclosures will occur only when legally permitted and reasonably necessary for the professional’s duties.

Workers’ Compensation, Law Enforcement, and Government Requests

The Practice may use or disclose health information:

  • For workers’ compensation claims

  • For certain legally authorized law-enforcement purposes

  • To health-oversight agencies conducting activities authorized by law

  • For certain military, national-security, intelligence, or protective-service functions

  • To correctional institutions or law-enforcement officials when applicable and legally authorized

Mental-health information will receive any additional protection required by applicable state or federal law.

Lawsuits and Legal Proceedings

The Practice may disclose health information in response to:

  • A valid court or administrative order

  • A subpoena that meets applicable legal requirements

  • Another formal legal process requiring disclosure

Receiving a subpoena does not necessarily mean that records will be released immediately.

Before disclosing information, the Practice may:

  • Seek your written authorization

  • Consult with legal counsel

  • Assert confidentiality or privilege protections

  • Object to or seek to limit an overly broad request

  • Request a protective order

  • Ask a court to clarify the scope of the request

  • Release only the information legally required

The Practice will comply with valid legal obligations while making reasonable efforts to protect your confidentiality.

Additional Protection for Mental-Health Information

Mental-health information may receive additional protection under Rhode Island, Massachusetts, Connecticut, or other applicable state law.

When state law provides greater privacy protection than federal law, the Practice will follow the more protective requirement.

Mental-health treatment information will not be disclosed without your written authorization unless the disclosure is otherwise permitted or required by applicable state or federal law.

The privacy law that applies may depend on:

  • Where you are physically located

  • Where services are provided

  • The type of information involved

  • The purpose of the requested disclosure

  • The person or organization requesting the information

Psychotherapy Notes

Psychotherapy notes are notes recorded by a mental-health professional documenting or analyzing the contents of counseling conversations and maintained separately from the medical record.

Psychotherapy notes generally do not include:

  • Medication information

  • Session start and stop times

  • Treatment frequency

  • Clinical test results

  • Diagnosis

  • Functional status

  • Symptoms

  • Prognosis

  • Treatment plans

  • Progress summaries

Most uses or disclosures of psychotherapy notes require your specific written authorization.

Psychotherapy notes may be used or disclosed without authorization in limited circumstances permitted or required by law.

Electronic Health Records and Client Portal

The Practice maintains records through Sessions Health, an electronic health-record and client-portal system.

The Practice and its business associates use administrative, technical, and physical safeguards intended to protect the privacy and security of your information.

You may use the client portal to:

  • Complete forms

  • Review appointments

  • Access documents made available to you

  • Update demographic or insurance information

  • View statements and balances

  • Send secure messages

No electronic system can guarantee absolute security.

Additional expectations regarding electronic communication are described in the Practice’s Communication and Emergency Policy.

Our Responsibilities

Good Enough Counseling Co. is required to:

  • Maintain the privacy and security of your protected health information

  • Follow the duties and privacy practices described in this Notice

  • Provide you with a copy of this Notice

  • Notify you promptly if a breach occurs that may have compromised the privacy or security of your information

  • Use or disclose only the information reasonably necessary for the intended purpose when the minimum-necessary standard applies

  • Follow applicable federal and state confidentiality laws

  • Honor your privacy rights as described in this Notice

The Practice will not use or disclose your information in a way not described in this Notice unless:

  • You provide written authorization; or

  • The use or disclosure is otherwise permitted or required by law.

If you provide written authorization, you may revoke it at any time by notifying the Practice in writing.

Revocation will not affect information that was already used or disclosed in reliance on your authorization.

Changes to This Notice

The Practice may change the terms of this Notice.

Changes may apply to all information maintained by the Practice, including information created or received before the change.

When the Notice is materially revised, the updated Notice will be:

  • Available upon request

  • Available at the Practice’s office

  • Posted on the Practice’s website

  • Made available through the client portal or another appropriate method

The effective date of the current Notice will appear at the beginning of the document.

Questions or Concerns

For questions about this Notice, your health information, or the Practice’s privacy practices, contact:

Diana Huynh, LICSW, PMH-C
Privacy Contact
Good Enough Counseling Co.
2145 Diamond Hill Road
Cumberland, Rhode Island 02864

Phone: (401) 206-0742
Email: diana@goodenoughcounselingco.com