Privacy Policy
Effective Date: November 7, 2025
Last Updated: November 7, 2025
Our Commitment to Your Privacy
At Celestial Shift Therapy, we are deeply committed to protecting your privacy and maintaining the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
1. Information We Collect
Personal Information
We collect information that you provide directly to us, including:
Name, contact information (email, phone number, address)
Date of birth and demographic information
Insurance information and payment details
Emergency contact information
Health Information
As part of providing therapy services, we collect:
Medical and mental health history
Treatment notes and clinical assessments
Progress notes and treatment plans
Information about medications and other healthcare providers
Any information you share during therapy sessions
Technical Information
When you use our website or telehealth platform, we may collect:
Device information and IP address
Browser type and operating system
Usage data and session information
Cookies and similar tracking technologies
2. How We Use Your Information
We use your information to:
Provide, maintain, and improve our therapy services
Schedule and conduct virtual therapy sessions
Process billing and insurance claims through Headway and Rula
Communicate with you about appointments, treatment, and administrative matters
Comply with legal and regulatory requirements
Maintain accurate clinical records
Coordinate care with other healthcare providers (with your consent)
3. HIPAA Compliance
Celestial Shift Therapy complies with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable Texas state laws regarding the privacy and security of protected health information (PHI).
Your Rights Under HIPAA
You have the right to:
Access and obtain a copy of your health records
Request amendments to your health information
Receive an accounting of disclosures
Request restrictions on certain uses and disclosures
Request confidential communications
Receive a paper copy of our Notice of Privacy Practices
For a complete Notice of Privacy Practices, please request one during your initial consultation or at any time during treatment.
4. Information Sharing and Disclosure
We only share your information in the following circumstances:
With Your Consent
We may share information when you provide explicit written authorization.
For Treatment, Payment, and Healthcare Operations
With billing services to process insurance claims
With other healthcare providers involved in your care (with authorization)
For quality assurance and professional consultation (information is de-identified when possible)
As Required by Law
We may disclose information when required to:
Comply with court orders or legal proceedings
Report suspected child abuse or elder abuse
Report threats of serious harm to yourself or others
Comply with mandatory reporting requirements
Business Associates
We work with HIPAA-compliant service providers (telehealth platforms, billing services, etc.) who are bound by strict confidentiality agreements.
5. Telehealth Services
All therapy sessions are conducted virtually through secure, HIPAA-compliant platforms. We use encrypted video conferencing technology to protect the confidentiality of your sessions.
Your Responsibilities
Ensure you are in a private location during sessions
Use a secure internet connection
Protect your login credentials
Understand that no technology is 100% secure
6. Data Security
We implement appropriate technical, physical, and administrative safeguards to protect your information, including:
Encrypted data transmission and storage
Secure, password-protected systems
Limited access to PHI on a need-to-know basis
Regular security assessments and updates
HIPAA-compliant cloud storage and electronic health record systems
7. Data Retention
We retain your health records in accordance with Texas state law and professional ethical guidelines. Clinical records are typically maintained for a minimum of seven (7) years after the last date of service, or longer if required by law.
8. Minors' Privacy
If you are under 18 years of age, your parent or legal guardian must provide consent for treatment. Parents/guardians generally have the right to access their child's health information, except in certain circumstances defined by Texas law.
9. Your Privacy Choices
Communication Preferences
You may opt out of non-essential communications at any time by contacting us.
Access and Correction
You may request to review or correct your health information by submitting a written request.
Restrictions
You may request restrictions on how we use or disclose your information, though we are not required to agree to all requests.
10. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve user experience. You can control cookie preferences through your browser settings.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. Your continued use of our services after changes indicates acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
Celestial Shift Therapy, LLC
Nicole Obih, LCSW
Phone: (832) 261-1474
Email: nicole@celestialshifttherapy.com
Website: www.celestialshifttherapy.com
14. Filing a Complaint
If you believe your privacy rights have been violated, you may file a complaint with:
Celestial Shift Therapy
Phone: (832) 261-1474
U.S. Department of Health and Human Services
Office for Civil Rights
Phone: 1-800-368-1019
Website: www.hhs.gov/ocr/privacy
You will not be retaliated against for filing a complaint.
By using our services, you acknowledge that you have read and understood this Privacy Policy.