PRIVACY POLICY

Last Updated: 2/6/26

1. Introduction

Water Lily Health & Wellness, LLC (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We only collect information that you voluntarily provide to us. This may include:

Contact Information:

  • Name
  • Email address
  • Phone number
  • Mailing address

Appointment Information:

  • Preferred dates and times for appointments
  • Reason for seeking services (if provided)

Clinical Information (for clients receiving services):

  • Health history and background information
  • Treatment notes and progress
  • Insurance information (if applicable)
  • Emergency contact information

We do not collect information through cookies, tracking technologies, or automated means on our website.

3. How We Use Your Information

We use the information you provide solely for the following purposes:

  • Scheduling Appointments: To contact you and confirm appointment times
  • Providing Services: To deliver counseling, coaching, or therapeutic services
  • Communication: To respond to your inquiries and provide information you request
  • Legal Compliance: To comply with applicable laws and professional regulations
  • Billing: To process payments and insurance claims (if applicable)

4. How We Protect Your Information

We take your privacy seriously and implement appropriate security measures:

  • All client information is kept strictly confidential per HIPAA regulations and Arizona state law
  • Information is stored securely in password-protected systems
  • Access to client information is limited to authorized staff only
  • We use secure, encrypted communication methods for sensitive information
  • Physical records (if any) are stored in locked, secure locations
  • Electronic health records comply with HIPAA security requirements

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following limited circumstances:

With Your Consent:

  • When you provide written authorization to share information with specific individuals or entities

As Required by Law:

  • When mandated by court order or subpoena
  • To report suspected child, elder, or dependent adult abuse or neglect
  • When there is imminent risk of harm to you or others
  • To comply with professional licensing requirements

With Service Providers:

  • Insurance companies for billing purposes (with your consent)
  • HIPAA-compliant technology platforms used for telehealth services
  • Professional consultants (without identifying information, for clinical guidance)

6. Your Rights

Under Arizona law and HIPAA regulations, you have the right to:

  • Access: Request to review your clinical records
  • Amendment: Request corrections to inaccurate information in your records
  • Accounting: Request an accounting of disclosures of your information
  • Restriction: Request limitations on how we use or disclose your information
  • Confidential Communication: Request communications through specific methods or locations
  • Revoke Consent: Withdraw consent for information sharing (except where already disclosed)

To exercise these rights, please contact us in writing at yolanda@waterlilyhealth.com.

7. Data Retention

We retain client records in accordance with Arizona law and professional standards:

  • Active client records are maintained for the duration of the therapeutic relationship
  • After services end, records are retained for a minimum of 7 years (or longer if required by law)
  • Records for minors are retained until the individual reaches age 25 or 7 years after services end, whichever is longer
  • After the retention period, records are securely destroyed

8. Children’s Privacy

We provide services to minors with parental or guardian consent. For clients under 18:

  • Parents/guardians provide consent for services and information collection
  • We respect developmentally appropriate confidentiality for adolescent clients
  • Information shared with parents balances the minor’s privacy rights with parental rights to information

9. Website and Online Communications

Email Communication:

  • Email is not a fully secure method of communication
  • We use email only for scheduling and general information, not for clinical discussions
  • For confidential matters, we use secure, HIPAA-compliant communication platforms

Telehealth Platforms:

  • Online sessions are conducted through HIPAA-compliant video platforms
  • We do not record sessions without explicit client consent
  • You are responsible for ensuring privacy on your end during online sessions

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Notice of Privacy Practices (HIPAA)

As a healthcare provider, Water Lily Health & Wellness complies with the Health Insurance Portability and Accountability Act (HIPAA). You have the right to receive our complete Notice of Privacy Practices, which provides detailed information about:

  • How we use and disclose protected health information
  • Your rights under HIPAA
  • Our legal duties regarding your information
  • How to file a complaint if you believe your privacy rights have been violated

To request a copy of our full Notice of Privacy Practices, please contact us at yolanda@waterlilyhealth.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be effective immediately upon posting to our website. We will notify active clients of significant changes via email.

The “Last Updated” date at the top of this policy indicates when it was most recently revised.

13. State-Specific Rights

Arizona Residents: Under Arizona law, you have additional rights regarding your personal information and healthcare records. For specific questions about your rights under Arizona state law, please contact us.

14. Breach Notification

In the unlikely event of a data breach involving your personal or protected health information, we will notify you as required by law and take appropriate steps to mitigate any harm.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

Water Lily Health & Wellness, LLC
Email: yolanda@waterlilyhealth.com
Phone: (480) 214-5570
You may also file a complaint with:

  • Arizona Board of Behavioral Health Examiners (for licensing complaints)
  • U.S. Department of Health and Human Services Office for Civil Rights (for HIPAA violations)

16. Consent

By using our services or providing your information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

IMPORTANT LEGAL DISCLAIMER:

These Terms and Conditions and Privacy Policy are provided as templates and should be reviewed by a qualified attorney licensed in Arizona before use. Water Lily Health & Wellness should also:

  1. Consult with a healthcare attorney to ensure HIPAA compliance
  2. Obtain appropriate professional liability insurance
  3. Develop a complete Notice of Privacy Practices (required by HIPAA)
  4. Create informed consent documents for clients
  5. Establish clear policies around telehealth services
  6. Ensure compliance with Arizona Board of Behavioral Health Examiners regulations