1. INTRODUCTION

Welcome to yudycid.com. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal and protected health information when you use our website and services. We are committed to protecting your privacy and maintaining the confidentiality of your personal and health information in accordance with all applicable federal and state laws.

This policy applies to all services offered by our practice, including: individual and group counseling, psychological evaluations for immigration purposes, legal and forensic evaluations for court proceedings, clinical supervision for graduate-level practicum students, and all telehealth/virtual services delivered nationwide.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. WHO WE ARE

Yudycid.com is operated by a licensed mental health professional (Licensed Professional Counselor / Licensed Clinical Social Worker) providing services at the national level in the United States. Our practice is based primarily in virtual/telehealth format and serves clients with a particular focus on the Latino community, providing services in both English and Spanish.

Services include, but are not limited to:

• Individual and group counseling/psychotherapy
• Mental health evaluations for U.S. immigration purposes (Hardship Evaluations, Psychological Impact Evaluations, Trauma Evaluations)
• Forensic and legal psychological evaluations for court proceedings
• Clinical supervision for graduate students in practicum/internship programs
• Telehealth/virtual services provided across the United States

 

3. INFORMATION WE COLLECT

3.1 Personal Identification Information

We may collect the following types of personal information:

• Full legal name, date of birth, gender identity
• Contact information: address, phone number, email address
• Government-issued identification numbers (where required by law or for immigration evaluations)
• Immigration status and documentation (solely for immigration evaluation purposes)
• Emergency contact information
• Insurance information and billing details
• Payment information (processed through secure third-party providers)

3.2 Protected Health Information (PHI)

In providing mental health services, we collect and maintain Protected Health Information (PHI) as defined under HIPAA (Health Insurance Portability and Accountability Act), including:

• Mental health history, diagnoses, and treatment records
• Session notes, progress notes, and treatment plans
• Medication history (if relevant to mental health treatment)
• Psychological and forensic evaluation reports
• Legal and court-related documentation provided by clients
• Clinical supervision records and documentation for practicum students

3.3 Technical and Website Data

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring URLs and navigation patterns
• Cookies and similar tracking technologies (see Section 10)

 

4. HOW WE USE YOUR INFORMATION

We use the information collected for the following purposes:

4.1 Clinical and Treatment Purposes

• Providing, coordinating, and managing mental health treatment and services
• Preparing psychological evaluations and forensic reports for legal or immigration purposes
• Facilitating clinical supervision for practicum students
• Communicating with other treating providers with your written authorization
• Scheduling appointments and managing your care

4.2 Administrative Purposes

• Billing, payment processing, and insurance claims
• Compliance with legal and regulatory requirements
• Quality assurance and improvement of our services
• Responding to your inquiries and requests

4.3 Legal and Regulatory Obligations

• Compliance with HIPAA and applicable state mental health laws
• Responding to valid legal orders, subpoenas, or court orders
• Reporting as required by mandatory reporting laws (e.g., child abuse, elder abuse, imminent danger)
• Compliance with licensing board requirements

 

5. HIPAA COMPLIANCE AND YOUR RIGHTS

As a covered entity under HIPAA, we are required to maintain the privacy and security of your Protected Health Information. You have the following rights under HIPAA:

5.1 Right to Access

You have the right to request and receive a copy of your health records and other information we maintain about you. Requests must be made in writing. We will respond within 30 days.

5.2 Right to Request Corrections

You may request that we amend inaccurate or incomplete information in your health records. We will respond to your request within 60 days.

5.3 Right to an Accounting of Disclosures

You have the right to request a list of disclosures of your PHI we have made in the past six years, other than for treatment, payment, or health care operations.

5.4 Right to Restrict Disclosures

You may request restrictions on certain uses and disclosures of your information. We will consider such requests but are not always required to agree.

5.5 Right to Confidential Communications

You may request that we communicate with you in a specific way or at a specific location (e.g., only by email, only at a specific phone number).

5.6 Right to a Notice of Privacy Practices

You have the right to receive a written Notice of Privacy Practices, which describes how we may use and disclose your PHI.

5.7 Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights without retaliation.

 

6. CONFIDENTIALITY AND EXCEPTIONS

Mental health information is held to a high standard of confidentiality. We will not disclose your information without your written consent, except in the following legally mandated circumstances:

• Imminent danger: If you express a serious and credible threat to harm yourself or another person, we are required to take protective action, which may include contacting emergency services or warning the intended victim.
• Child abuse or neglect: We are mandated reporters and must report known or reasonably suspected abuse, neglect, or exploitation of a minor to the appropriate authorities.
• Elder and dependent adult abuse: We are required to report known or suspected abuse of elderly or dependent adults.
• Court orders: We may be required to release records pursuant to a valid court order or subpoena. We will notify you in advance when possible.
• Medical emergencies: In the event of a medical emergency, we may disclose necessary information to emergency responders.
• Immigration evaluations: Reports are shared only with designated immigration attorneys or courts as specifically authorized in writing by you.

 

7. IMMIGRATION EVALUATIONS – SPECIAL PROVISIONS

Given the sensitive nature of immigration psychological evaluations, we apply heightened confidentiality protections. Please be aware of the following:

• All evaluation reports are the property of you, the client/evaluee, unless otherwise agreed in writing.
• Reports will only be released to designated legal representatives or immigration courts upon your explicit written authorization.
• Immigration status information disclosed during the evaluation process is held strictly confidential and will NOT be disclosed to immigration enforcement authorities.
• Forensic evaluations for court or legal proceedings are subject to the jurisdiction of the requesting court; however, we will always communicate directly with you and your attorney throughout the process.
• Communications with immigration attorneys are protected under your right to confidentiality and will not be disclosed without your explicit written consent.

 

8. TELEHEALTH AND VIRTUAL SERVICES

Approximately 90% of our services are delivered via telehealth/virtual platforms. The following privacy and security measures apply:

• We use HIPAA-compliant telehealth and video conferencing platforms. Clients are responsible for ensuring their own privacy during virtual sessions (private location, headphones, etc.).
• All electronic communications, including emails and text messages, should be considered potentially non-confidential unless sent through our secure client portal.
• We strongly discourage the sharing of sensitive clinical information via standard email or text message.
• Session recordings are not made without your explicit written consent. If recordings are made with consent (e.g., for supervision purposes), this will be clearly disclosed in your informed consent documentation.
• We maintain appropriate cybersecurity measures to protect electronic records, including encryption, secure access controls, and regular security audits.

 

9. CLINICAL SUPERVISION – STUDENT PRACTICUM

For clients whose sessions may be observed, recorded, or discussed for clinical supervision purposes:

• You will be informed in writing and will provide explicit consent before any supervision activities involving your case.
• Student supervisees are bound by the same confidentiality obligations as licensed professionals.
• All supervision discussions are held in a professional context and limited to the minimum necessary information.
• Supervision records are maintained separately from clinical records and are protected accordingly.

 

10. COOKIES AND WEBSITE TRACKING

Our website may use cookies and similar technologies to improve your browsing experience. Types of cookies used:

• Essential cookies: Necessary for the website to function properly.
• Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics). Data is anonymized and aggregated.
• Preference cookies: Remember your settings and preferences.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

 

11. THIRD-PARTY SERVICE PROVIDERS

We may share limited information with trusted third-party service providers who assist us in operating our practice, including:

• Electronic Health Record (EHR) systems and practice management software
• Secure telehealth platforms (HIPAA-compliant)
• Payment processors and billing services
• Email and scheduling services (HIPAA-compliant where applicable)

All third-party providers with access to PHI are required to enter into a Business Associate Agreement (BAA) as required by HIPAA. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

 

12. DATA SECURITY

We implement industry-standard security measures to protect your information, including:

• Encryption of electronic PHI (ePHI) at rest and in transit
• Secure, password-protected systems with multi-factor authentication
• Regular security risk assessments as required by HIPAA
• Staff training on privacy and security practices
• Physical security measures for any paper records

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your PHI, we will notify you as required by HIPAA and applicable state law.

 

13. RETENTION OF RECORDS

We retain mental health records in accordance with applicable federal and state laws. Generally:

• Adult client records are retained for a minimum of 7 years from the last date of service.
• Minor client records are retained until the client turns 25 or for 7 years from the last date of service, whichever is longer.
• Immigration evaluation records are retained for a minimum of 7 years.
• Clinical supervision records are retained per applicable licensing board requirements.

 

14. CHILDREN’S PRIVACY

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. For minor clients receiving mental health services, parents or legal guardians will be required to provide consent, and special confidentiality provisions apply as defined in our informed consent documentation and applicable state law.

 

15. CHANGES TO THIS POLICY

We reserve the right to update this Privacy Policy at any time. Changes will be posted on our website with an updated effective date. For existing clients, material changes will be communicated directly. Continued use of our services after any changes constitutes acceptance of the updated policy.

 

16. CONTACT INFORMATION

For questions, concerns, or to exercise your privacy rights, please contact us:

Website: www.yudycid.com

Email: info@yudycid.com

To file a HIPAA complaint: U.S. Department of Health and Human Services, Office for Civil Rights — www.hhs.gov/ocr