Effective Date: 12/11/2024

Courage in Mind LLC (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and share your personal information when you visit our website www.courageinmind.com (“Site”) and interact with our services. This Privacy Policy complies with applicable privacy standards, including HIPAA (Health Insurance Portability and Accountability Act) for the protection of your health-related information, as well as A2P (Application-to-Person) messaging regulations.

1. Information We Collect

We may collect the following types of personal information when you use our Site or services:

1. Personal Information You Provide Directly:

• Account Information: When you create an account, we may collect your name, email address, phone number, and other information needed to provide our services.
• Health Information: If you are a patient or user who receives healthcare services through us, we may collect health-related information (e.g., medical history, diagnoses, treatment plans, etc.). This information is protected under HIPAA and is handled with the utmost care.
• Contact Information: When you contact us or request customer support, we may collect details about your inquiry and communications with us.
• Transactional Information: If you make a purchase or subscribe to our services, we collect payment details, billing address, and shipping address.

1. Information We Collect Automatically:

• Usage Data: We collect information about how you access and use our Site, such as your IP address, browser type, pages viewed, and the time and date of your visit.
• Cookies and Tracking Technologies: We use cookies and similar technologies to collect data about your browsing behavior to improve user experience and provide personalized content. You can manage your cookie preferences through your browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: To process transactions, deliver products or services, and respond to your inquiries or support requests.
• Communication: To send you transactional messages (e.g., order confirmations, account-related notifications) and marketing communications (e.g., newsletters, promotions) based on your preferences.
• Health Care Services: If you are a patient or health care user, we use your health information to provide and coordinate your care. We may also use your health information to bill for services and to comply with legal and regulatory requirements.
• Improve Our Site and Services: To analyze usage trends, enhance user experience, and optimize our offerings.
• Compliance and Legal Obligations: To comply with applicable laws, regulations, and legal processes, including HIPAA and A2P messaging compliance.

3. HIPAA Compliance

As a healthcare-related service provider, we are committed to protecting your health information and ensuring that your data is handled in compliance with HIPAA. HIPAA regulates the use, disclosure, and safeguarding of Protected Health Information (PHI).

1. Protected Health Information (PHI):

PHI includes any information about your health, medical conditions, treatments, or payment for health services that we maintain in any format (electronic, paper, or oral). We will only use or disclose PHI as follows:

• To provide you with medical care or services.
• To bill for and receive payment for services.
• For other activities permitted by HIPAA, such as audits, quality assurance, and healthcare operations.

1. Our Obligations Under HIPAA:

• Privacy: We ensure that your PHI is only accessed by those who need it to provide services, and we protect your health information from unauthorized use or disclosure.
• Security: We implement technical and organizational measures to safeguard your PHI, including encryption and secure storage solutions.
• Disclosure: We will not disclose your PHI except as necessary for healthcare services or as required by law. For example, PHI may be disclosed to regulatory authorities, insurance companies, or other healthcare providers when required by law or for your treatment.

1. Your Rights Under HIPAA:

You have the right to:

• Access: Request a copy of your health information held by us.
• Amend: Request corrections to your health information if you believe it is inaccurate.
• Request Restrictions: Ask us to limit how we use or share your health information.
• Confidential Communication: Request that we contact you at a different location or by different means.

For more details on your HIPAA rights, please refer to the U.S. Department of Health & Human Services (HHS) website: www.hhs.gov/hipaa.

4. A2P Messaging Compliance

In accordance with A2P (Application-to-Person) messaging standards in the United States, we may send you transactional or marketing SMS (text) messages. By providing us with your phone number, you consent to receiving SMS messages from us.

• Opt-In and Opt-Out: You can opt-in to receive SMS messages by providing your phone number and consent. You may opt out of receiving SMS messages at any time by replying “STOP” to any message or by contacting us at 651-300-0107.
• Message Frequency: We may send a limited number of SMS messages for service-related updates, such as appointment reminders, order confirmations, or promotional offers, depending on your preferences.
• Message Costs: Standard carrier message and data rates may apply to SMS messages you receive from us.
• Data Retention: We will retain your phone number and SMS opt-in status for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations.

5. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your personal data in the following circumstances:

• Service Providers: We may share your information with third-party service providers who assist with business operations (e.g., payment processors, email marketing services, healthcare providers, hosting providers). These providers are obligated to protect your information and only use it for the purposes for which it was shared.
• Legal Requirements: We may disclose your information if required by law or in response to valid legal requests, such as subpoenas or court orders.
• Business Transfers: In the event of a merger, acquisition, or sale of our assets, your personal information may be transferred to the new owner.

For health-related information, we will only share PHI with third parties in accordance with HIPAA regulations or with your explicit consent.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure data storage, and regular audits of our data handling practices. However, no data transmission over the internet is completely secure, and we cannot guarantee the security of your information.

7. Your Rights and Choices

As a user, you have certain rights regarding your personal data, including:

• Access and Correction: You can request access to the personal information we hold about you and request corrections to any inaccuracies.
• Deletion: You can request that we delete your personal information, subject to legal and contractual obligations, and in compliance with HIPAA requirements.
• Opting Out of Communications: You can opt out of receiving marketing communications from us by following the unsubscribe instructions in our emails or contacting us directly.
• Opting Out of SMS Messages: As mentioned above, you can opt out of receiving SMS messages by replying “STOP” or contacting us directly.

8. Children’s Privacy

Our Site is not intended for children under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will post the updated Privacy Policy on this page and update the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or your HIPAA rights, please contact us at:

Courage in Mind LLC
14041 Burnhaven Drive, Suite 145, Burnsville MN 55337
Email: contact@courageinmind.com
Phone: 651-300-0107

By using our Site and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information, including health-related information, as described herein.