Privacy Policy

Last Updated: October 1, 2015

The privacy of your personal information is important to us. This Privacy Policy describes what information is collected by WILLOW, how it is gathered, how it is used, to whom it is disclosed, and how it is secured, updated and deactivated.

What Information Does WILLOW Collect?

 WILLOW collects personal information (such as contact information and date of birth), and Protected Health Information (such as data about health status and provision of healthcare) that users voluntarily submit by:


Who Can Access Information?

Information inputted by patients may be viewed by patients and those account holder representatives approved by said patients.

Information inputted by account holder representatives may, in some instances be viewed by patients and can be viewed by account holder representatives, depending on their administrative permissions.

Protected health information collected by WILLOW is used and disclosed only as is permitted by the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. Only persons explicitly authorized by patients to have access to their behavioral healthcare information will be provided access.


Why Do We Gather Your Personal Information?

We gather personal information for the following purposes:


How Is Information Viewed, Updated, and Deactivated?

Because the information collected by WILLOW is intended to be used in conjunction with behavioral health care and interpreted by a behavioral healthcare professional, we recommend that patients work directly with behavioral healthcare providers when viewing, updating, and deactivating data. Patients may also contact WILLOW by post or email at the address listed below.

Upon written request by the account holder, an account will be deactivated and archived. We retain archived information for a period of five years (or longer if required by law) as necessary to comply with legal obligations, resolve disputes and enforce our agreements and other authorized uses under this Policy.

HIPAA grants patients certain rights to access and correct certain health information their healthcare providers retain about them. Patients should submit requests to access or correct their health information directly to their healthcare providers.

Please note that de-identified health information is stored indefinitely in our anonymized data repository.

Changes to this Policy

Revisions of our Privacy Policy will posted on this webpage. Please review this Policy each time you use this service.


Contact Us

Evidence-Based Practice Institute (EBPI)

3303 South Irving Street

Seattle, WA 98144