Privacy Policy

Your privacy matters to us

Bloom Psych, LLC (“Bloom Psych,” “we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at bloompsych.com, contact our practice, or engage with our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our website.

Information we collect

We collect information you provide to us directly, as well as information gathered automatically when you use our website.

Information you provide directly:

• Contact details such as your name, email address, phone number, and mailing address when you reach out via our contact form, email, or phone
• Intake form responses, appointment scheduling details, and insurance information when becoming a patient
• Messages and correspondence you send us, including feedback and support inquiries
• Payment and billing information processed through our secure third-party payment processor

Information collected automatically:

• Browser type, operating system, referring URLs, and pages visited on our website (via cookies and analytics tools)
• IP address and approximate geographic location derived from your IP address
• Device identifiers and usage data to understand how visitors interact with our site

How we use your information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide the psychiatric services you have requested
• To schedule, manage, and communicate about appointments and follow-up care
• To process billing, payments, and provide receipts or superbills for insurance reimbursement
• To send appointment reminders, administrative notices, and practice updates (you may opt out of non-essential communications at any time)
• To improve the functionality, content, and user experience of our website through analytics
• To comply with applicable legal obligations, including state and federal healthcare regulations
• To protect the safety and security of our patients, staff, and practice

We will not use your information for purposes incompatible with those described above without obtaining your prior consent.

HIPAA & protected health information

As a healthcare provider, Bloom Psych is subject to the Health Insurance Portability and Accountability Act (HIPAA). Any protected health information (PHI) — including diagnoses, treatment notes, prescription records, and clinical communications — is handled in strict accordance with HIPAA regulations.

Your PHI is used and disclosed only as permitted or required by law, including for treatment, payment, and healthcare operations. We will obtain your written authorization before using your PHI for any purpose not covered by our HIPAA Notice of Privacy Practices.

• All electronic PHI is encrypted in transit and at rest using industry-standard protocols
• Access to PHI is restricted to authorized clinical and administrative staff only
• Telehealth sessions are conducted exclusively via HIPAA-compliant video platforms
• You have the right to request access to, amendment of, and an accounting of disclosures of your PHI

Please review our full HIPAA Notice of Privacy Practices for comprehensive information about how we handle your health information.

Sharing your information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: Trusted vendors who assist with practice operations — such as our EHR platform, scheduling software, and payment processor — under strict data processing agreements
• Legal Requirements: When required by law, court order, or governmental authority, or to protect the rights and safety of patients and staff
• Business Transfers: In the event of a merger, acquisition, or sale of practice assets, your information may be transferred to a successor entity under equivalent privacy protections
• With Your Consent: To other healthcare providers, family members, or third parties when you have given us explicit written authorization
• Emergency Situations: As necessary to prevent serious and imminent harm, consistent with applicable law and ethical obligations

Cookies & tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. Cookies are small text files stored on your device that help us recognize returning visitors and understand how our site is used.

• Essential Cookies: Necessary for the website to function properly; these cannot be disabled
• Analytics Cookies: We use privacy-focused analytics (e.g., Google Analytics with IP anonymization) to understand aggregate visitor behavior — no personally identifiable information is retained
• Preference Cookies: Remember your settings and improve your experience across visits

You may configure your browser to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect some functionality of our website. We do not use cookies to deliver targeted advertising.

Data security

Protecting your information is a top priority. We implement administrative, technical, and physical safeguards designed to protect against unauthorized access, alteration, disclosure, or destruction of your personal and health information.

• All data transmitted between your browser and our servers is encrypted via TLS/SSL
• Clinical and administrative systems are protected by multi-factor authentication and role-based access controls
• We conduct regular security reviews and staff training on privacy best practices
• Our electronic health record and patient portal vendors maintain SOC 2 compliance and HIPAA Business Associate Agreements

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. If you believe your information has been compromised, please contact us immediately at privacy@bloompsych.com.

Your rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-Out: Unsubscribe from non-essential communications at any time by contacting us or using the unsubscribe link in any marketing email
• Data Portability: Request a portable copy of your information in a structured, machine-readable format where technically feasible
• Restriction: Request that we restrict processing of your information in certain circumstances

To exercise any of these rights, please contact us at privacy@bloompsych.com. We will respond to verified requests within 30 days.

Children’s privacy

Bloom Psych provides psychiatric services exclusively to adults (18 years of age and older). Our website is not directed to individuals under 18, and we do not knowingly collect personal information from minors.

If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@bloompsych.com and we will promptly delete such information.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify patients by email or through our patient portal.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes constitutes acceptance of the updated policy.

Contact us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please reach out to us through any of the following channels: