PRIVACY POLICY
Effective Date: March 2026
INTRODUCTION
I am committed to protecting your privacy and maintaining the confidentiality of your personal health information. This Privacy Policy explains how I collect, use, disclose, and otherwise handle information about you in connection with my therapeutic services, consulting services, and website.
SCOPE OF THIS POLICY
This Privacy Policy applies to:
Information I collect through in-person therapy sessions
Information collected through telehealth services
Information collected through my website (www.beckjoslyn.com)
Information collected in connection with consulting and training services
Information provided through email, phone, or written communication
LEGAL FRAMEWORK
My privacy practices are governed by multiple laws and regulations, including:
Health Insurance Portability and Accountability Act (HIPAA) and its Privacy Rule
New York State Mental Hygiene Law § 27.09 (Confidentiality of Patient Records)
New York State Education Law § 8505 (Psychologist-Patient Privilege)
Federal regulations at 45 CFR Parts 160 and 164 (HIPAA Privacy and Security Rules)
INFORMATION I COLLECT
Information You Provide Directly
When you contact me or engage in therapy or consulting services, I collect:
Personal identification information (name, address, phone number, email)
Date of birth and demographics
Payment details
Emergency contact information
Medical and mental health history
Psychological assessment results and clinical observations
Treatment progress notes and clinical documentation
Information about any previous or concurrent mental health treatment
Information Collected Automatically (Website)
When you visit my website, I may collect:
IP address and browser type
Pages visited and time spent on the site
Referring website URLs
Information from cookies (see Cookie Policy below)
NOTE: My website does NOT automatically collect Protected Health Information (PHI). I encourage you not to provide sensitive health information through contact forms or emails unless you have established a therapeutic relationship with me.
HOW I USE YOUR INFORMATION
I use information I collect for the following purposes:
Providing mental health treatment and therapy services
Conducting psychological assessments and evaluations
Developing and implementing treatment plans
Communicating with you about your care and services
Responding to inquiries and providing customer service
Billing and processing insurance claims
Maintaining medical records required by New York State law
Legal and compliance purposes (including mandatory reporting requirements)
Improving my services and website functionality
DISCLOSURE OF YOUR INFORMATION
I am committed to protecting your privacy and limiting disclosures of your Protected Health Information (PHI). However, I may disclose information in the following circumstances:
With Your Written Consent
I will not disclose PHI without your written authorization, except as required or permitted by law.
To Insurance Companies
If you use insurance to pay for services, I will submit necessary information to your insurance company. Your insurance company will receive information related to your treatment and benefits eligibility.
To Other Healthcare Providers
With your consent, I may share information with other healthcare providers involved in your care.
Legal Obligations and Exceptions
I may disclose information without your consent when required or permitted by law, including:
Suspected child abuse or maltreatment (mandated reporting)
Suspected elder or dependent adult abuse (mandated reporting)
Imminent danger to self or others (duty to warn/protect)
Court orders or legal process
Communicable disease reporting required by public health authorities
Health oversight activities by government agencies
New York State Mental Hygiene Law § 27.09 provides specific protections for psychologist-patient communications. However, certain mandatory reporting requirements override confidentiality protections.
I Will NOT Disclose Without Consent
I will not disclose your information for marketing purposes without your explicit consent.
I do not sell your personal information.
I do not share your information with unaffiliated third parties except as described above.
SECURITY OF YOUR INFORMATION
I implement appropriate administrative, physical, and technical safeguards to protect your information in accordance with HIPAA Security Rule requirements. These include:
Secure electronic health record systems with encryption
Locked filing cabinets for paper records
Limited access to records based on need-to-know
Regular risk assessments and security audits
Secure communication methods (secure email, encrypted messaging)
Business Associate Agreements with vendors who handle your information
However, no security system is completely secure. While I take all reasonable steps to protect your information, I cannot guarantee absolute security. You acknowledge the inherent risks of electronic transmission and data storage.
YOUR PRIVACY RIGHTS
Under HIPAA and New York State law, you have the right to:
Access your medical records and request copies (within 30 days)
Request amendments to inaccurate information
Request accounting of disclosures made about your health information
Receive privacy notices in alternative formats
Request restrictions on uses and disclosures (though I may not be able to agree)
Request confidential communications through alternative means
Obtain and provide information in your chosen format
To exercise these rights, please submit a written request to the contact information below. I will respond within the timeframes required by law.
PSYCHOLOGIST-PATIENT PRIVILEGE (NEW YORK STATE)
New York State Education Law § 8505 protects communications between a licensed psychologist and patient. This privilege means:
Your communications with me are generally confidential and privileged
I cannot testify in court about your treatment without your written authorization, except in limited circumstances
Privilege can be waived by you at any time
This privilege does not apply when:
You raise your mental condition as a defense in legal proceedings
You are a danger to yourself or others
Child abuse or maltreatment is suspected
Court orders require disclosure
COOKIES AND WEBSITE TECHNOLOGY
My website may use cookies and similar tracking technologies to:
Remember your preferences
Improve website functionality
Analyze website usage
You can control cookie settings through your browser preferences. Disabling cookies may affect website functionality.
THIRD-PARTY LINKS
My website may contain links to third-party websites. This Privacy Policy does not apply to external websites. I am not responsible for the privacy practices of other websites. Please review the privacy policies of third-party sites before providing information.
DATA RETENTION
I maintain your mental health records in accordance with New York State requirements:
Therapy records are retained for a minimum of 7 years after the termination of treatment
Records for minors are retained until age of majority plus 3 years (or 7 years from termination, whichever is longer)
Billing records are retained in accordance with tax and accounting requirements (minimum 7 years)
I do not retain website cookies longer than necessary for operational purposes
When records are destroyed, I ensure confidentiality and security (shredding, secure deletion, etc.).
CHANGES TO THIS PRIVACY POLICY
I may update this Privacy Policy to reflect changes in my practices or legal requirements. I will notify you of material changes via email or by posting the updated policy on my website with an updated "Effective Date." Your continued use of my services indicates acceptance of any modifications.
HOW TO CONTACT ME
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact me:
Meredith Beck-Joslyn, Ph.D., Licensed Psychologist
1207 Delaware Avenue, Suite 103
Buffalo, New York 14209
Phone: 716-281-0775
Email: meredith@beckjoslyn.com
You also have the right to file a complaint with the U.S. Department of Health & Human Services Office for Civil Rights (OCR) if you believe your privacy rights have been violated. Contact information for OCR is available at https://www.hhs.gov/ocr/.
ACKNOWLEDGMENT OF RECEIPT
You may be asked to sign an acknowledgment that you have received and reviewed this Privacy Policy. This acknowledgment is part of your clinical records.