Privacy Policy
Resilience Counseling & Social Skills Center, LLC
Effective Date: October 23, 2026
1. Introduction
Resilience Counseling & Social Skills Center, LLC ("Resilience," "we," "our," or "us") is an outpatient behavioral healthcare organization providing psychotherapy, psychiatric evaluations, medication management, psychological testing, and related behavioral health services.
We are committed to protecting the privacy, confidentiality, and security of personal information and protected health information (PHI).
This Privacy Policy explains how we collect, use, maintain, protect, and disclose information obtained through our website, online communications, patient registration processes, and healthcare services.
Our practice provides services in Virginia and Florida, including in-person services in Virginia and authorized telehealth services.
We maintain privacy practices intended to comply with applicable federal and state laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HIPAA Privacy, Security, and Breach Notification Rules, and other applicable healthcare confidentiality requirements.
This website Privacy Policy supplements, but does not replace, our HIPAA Notice of Privacy Practices, which provides additional information regarding the use and disclosure of PHI and patients' legal rights.
2. Information We Collect
Depending on how individuals interact with our practice, we may collect:
Personal and Contact Information
Name, address, telephone number, and email address
Date of birth and other identifying information
Appointment requests and scheduling preferences
Information voluntarily submitted through website forms or communications
Healthcare Information
When individuals register for or receive healthcare services, we may collect and maintain information including:
Medical and mental health history
Diagnoses and treatment plans
Clinical assessments and treatment documentation
Medication and prescription information
Insurance and billing information
Other information necessary for healthcare delivery
Healthcare information that qualifies as PHI is protected in accordance with HIPAA and other applicable confidentiality laws.
Website and Technical Information
Our website and authorized service providers may collect technical information such as IP addresses, browser types, device information, referring websites, and website usage information.
3. How We Use Information
We use personal information and PHI for legitimate healthcare and business purposes, including:
Scheduling and coordinating appointments
Providing psychotherapy, psychiatric services, and other healthcare treatment
Processing registration and insurance information
Conducting billing and payment activities
Communicating with patients regarding their care
Supporting healthcare operations and quality improvement
Maintaining accurate clinical and administrative records
Responding to inquiries and requests
Maintaining website functionality and security
Meeting applicable legal and regulatory obligations
PHI is used and disclosed only as permitted or required by applicable law or pursuant to a valid authorization.
4. HIPAA Compliance and Protected Health Information
Resilience recognizes its responsibilities as a healthcare provider subject to applicable HIPAA requirements.
We maintain administrative, technical, and physical safeguards designed to protect PHI against unauthorized access, use, disclosure, alteration, or destruction.
Our privacy and security practices include, as applicable:
Limiting access to patient information based on authorized job responsibilities
Maintaining appropriate access controls for electronic health information
Using secure systems for storing and transmitting PHI
Providing workforce privacy and security training
Maintaining policies governing confidential patient information
Implementing procedures for responding to potential privacy or security incidents
Entering into Business Associate Agreements with service providers when required by HIPAA
Maintaining procedures for evaluating and reporting breaches as required by applicable law
These safeguards are reviewed and updated as appropriate to address regulatory requirements and operational risks.
5. Electronic Health Records and Patient Information
Resilience uses electronic health record and practice management technology to maintain patient records, support clinical documentation, coordinate treatment, and manage administrative operations.
Access to electronic patient records is restricted to authorized individuals with legitimate professional or operational responsibilities.
Electronic PHI is maintained and transmitted using security measures appropriate to the nature and sensitivity of the information.
Our practice does not make patient medical records publicly available or provide unrestricted access to patient information.
6. Telehealth Privacy and Security
Resilience provides telehealth services through synchronous, real-time audiovisual communications.
We utilize technology intended to support confidential communications between patients and authorized healthcare providers.
Our telehealth privacy practices include:
Using designated telehealth technology for clinical appointments
Restricting clinical encounters to authorized participants
Maintaining clinical documentation within authorized systems
Protecting patient information in accordance with applicable privacy and security requirements
Following applicable federal and state telehealth confidentiality laws
Patients are encouraged to participate in telehealth appointments from a private location and use a secure internet connection.
7. Information Sharing and Disclosure
Resilience does not sell patient PHI.
We may disclose information as permitted or required by applicable law, including:
Treatment: Sharing information with authorized healthcare professionals involved in patient care.
Payment: Sharing necessary information with health insurers, billing services, and other authorized parties involved in payment activities.
Healthcare Operations: Using or sharing information for authorized administrative, compliance, and operational purposes.
Business Associates: Sharing information with service providers performing functions on our behalf under appropriate confidentiality and contractual safeguards.
Legal Requirements: Disclosing information when required or otherwise permitted by applicable law.
Patient Authorization: Sharing information for other purposes when the patient or authorized representative provides a valid authorization, where required.
Certain categories of sensitive healthcare information, including psychotherapy notes and records subject to additional federal or state confidentiality protections, may require heightened safeguards or specific authorization.
8. Patient Privacy Rights
Patients have rights regarding their PHI under HIPAA and applicable state law.
Depending on the circumstances and applicable legal requirements, these rights include:
Requesting access to or copies of their medical records
Requesting corrections to information in their designated record set
Requesting restrictions on certain uses or disclosures
Requesting confidential communications through alternative methods or locations
Requesting an accounting of certain disclosures
Receiving a copy of the practice's HIPAA Notice of Privacy Practices
Filing a privacy complaint without retaliation
Requests are reviewed and processed in accordance with applicable legal requirements.
Additional details, including the process for exercising these rights, are provided in our HIPAA Notice of Privacy Practices.
9. Website Security and Encryption
Our website uses HTTPS encryption to help protect information transmitted between visitors' browsers and the website.
Resilience maintains safeguards designed to protect personal information and PHI against unauthorized access or disclosure.
No internet-based system can guarantee absolute security. We continually evaluate appropriate measures to protect information based on applicable requirements and identified risks.
Patients should avoid submitting highly sensitive medical information through general website contact forms or unsecured email unless specifically instructed to use an approved communication method.
10. Cookies, Analytics, and Website Tracking
Our website may use cookies and similar technologies to support website functionality, understand visitor engagement, and improve the user experience.
Certain third-party service providers may process limited website usage information on our behalf.
We do not authorize the use or disclosure of PHI for advertising or marketing activities except as permitted by applicable law and, where required, with appropriate patient authorization.
We evaluate website technologies and information-sharing practices in light of applicable privacy and security requirements.
Visitors may manage certain cookies through their browser settings or available website privacy controls.
11. Third-Party Service Providers
Resilience may utilize third-party technology and administrative service providers for functions such as website hosting, scheduling, electronic health records, telehealth, billing, and secure communications.
When a service provider creates, receives, maintains, or transmits PHI on our behalf, we require appropriate contractual protections, including Business Associate Agreements when required by HIPAA.
Third-party providers are expected to handle information consistently with their contractual obligations and applicable law.
12. Data Retention
Resilience maintains healthcare records and other personal information for periods required by applicable federal and state laws, professional regulations, and legitimate operational requirements.
Medical records are not automatically deleted upon patient request when retention is required or otherwise permitted by law.
When information is no longer required to be retained, we follow applicable procedures for secure disposal or deletion.
13. Children and Minors
Resilience provides certain healthcare services to children and adolescents.
Information concerning minors is handled in accordance with applicable federal and state laws governing parental access, minor consent, confidentiality, and healthcare decision-making.
Where applicable, parents or legal guardians may exercise privacy rights on behalf of minors, subject to legal limitations and exceptions.
14. Privacy Incidents and Breach Notification
Resilience maintains procedures for identifying, investigating, documenting, and responding to potential privacy or security incidents.
When a breach of unsecured PHI occurs, we evaluate and provide notifications as required by the HIPAA Breach Notification Rule and other applicable laws.
Notifications are provided to affected individuals and regulatory authorities when legally required.
15. Virginia and Florida Privacy Requirements
Resilience provides healthcare services to individuals located in Virginia and Florida.
Our practice is committed to complying with applicable state healthcare confidentiality, medical records, telehealth privacy, and patient information protection requirements in each jurisdiction where services are provided.
Where state law provides additional protections beyond federal requirements, those protections are observed to the extent applicable.
16. Marketing Communications
Resilience may provide general information about available healthcare services, practice announcements, or educational resources.
We do not sell PHI or disclose patient treatment information for third-party marketing purposes without authorization when required by law.
Individuals may opt out of nonessential promotional email communications using available unsubscribe instructions or by contacting our practice.
Healthcare communications relating to treatment, appointments, billing, and other authorized operations may continue as permitted by applicable law.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our operations, technology, applicable laws, or privacy practices.
Updates will be posted on this page with a revised effective date.
Material changes will be communicated when required by applicable law.
18. Privacy Questions, Requests, and Complaints
Individuals who have questions regarding this Privacy Policy, wish to exercise applicable privacy rights, or believe their information has been handled improperly may contact:
Resilience Counseling & Social Skills Center, LLC
Attn: Privacy Officer
6524 Woodlake Village Circle
Midlothian, Virginia 23112
Phone: 540-699-0226
Email: info@resiliencecounseling.care
Website: https://www.resiliencecounseling.care
Patients may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, if they believe their HIPAA privacy rights have been violated.
Resilience prohibits retaliation against individuals for exercising their privacy rights or filing a complaint.
19. HIPAA Notice of Privacy Practices
For additional information about how Resilience uses and discloses PHI, patients' legal rights, and our responsibilities under HIPAA, please review our separate HIPAA Notice of Privacy Practices, available through our website or upon request from our administrative staff.