Privacy Policy & Notice of Privacy Practices

A. Website Privacy

This website does not use first-party analytics, tracking pixels, or advertising cookies. Visiting vanessanash.com does not create a clinical relationship.

The site uses two embedded tools for scheduling and client messaging:

• Cal.com handles the free 15-minute consultation booking widget on /book. When you schedule, your name, email, and any notes you share are sent to Cal.com under its privacy policy.
• SimplePractice hosts the secure client portal and contact form. Information you submit through those flows is stored in SimplePractice under a Business Associate Agreement.

Server logs (request IP, user agent, timestamp) are retained by our hosting provider (Google Cloud) for operational purposes. The practice does not sell, rent, or share website data with third parties.

B. HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

1. Uses and Disclosures Without Your Authorization

I may use and disclose your Protected Health Information (PHI) without your written authorization for:

• Treatment — coordinating your care, consulting with other providers you authorize, and arranging referrals.
• Payment — billing your insurance, verifying coverage, and collecting fees.
• Health Care Operations — quality review, licensing board audits, and administrative functions.
• Required by law — court orders, subpoenas, mandated reporting of suspected child, elder, or dependent adult abuse, and reporting to public health authorities.
• Serious threat to health or safety — to prevent imminent harm to you or others, including notifying authorities or intended victims.

2. Uses and Disclosures Requiring Your Authorization

Most other uses and disclosures require your written authorization, including marketing, the sale of PHI, and disclosure of psychotherapy notes. You may revoke any authorization in writing at any time.

3. Your Rights Regarding Your Health Information

• Access — request to inspect and receive a copy of your records.
• Amendment — request corrections to information you believe is inaccurate or incomplete.
• Accounting of disclosures — request a list of disclosures made outside treatment, payment, or operations.
• Restrictions — request limits on how your PHI is used or disclosed. I will honor a request to restrict disclosure to a health plan for services you pay for in full out of pocket.
• Confidential communications — request that I contact you at a specific phone, email, or address.
• Paper copy — request a paper copy of this notice at any time.
• Breach notification — be notified in writing if your PHI is ever involved in a breach.

4. My Duties

I am required by law to maintain the privacy of your PHI, provide you with this notice, abide by the terms currently in effect, and notify you of any breach of unsecured PHI. I may change this notice; the revised version will apply to all PHI I maintain and will be posted on this page.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with me using the contact details below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

C. Contact

Vanessa Nash, LCSW — Nash LCSW PLLC

NC License #C016963

Phone: (984) 234-5500

Chapel Hill, NC — Teletherapy only, serving all of North Carolina