Last Updated: October 1, 2015
What Information Does WILLOW Collect?
WILLOW collects personal information (such as contact information and date of birth), and Protected Health Information (such as data about health status and provision of healthcare) that users voluntarily submit by:
Who Can Access Information?
Information inputted by patients may be viewed by patients and those account holder representatives approved by said patients.
Information inputted by account holder representatives may, in some instances be viewed by patients and can be viewed by account holder representatives, depending on their administrative permissions.
Protected health information collected by WILLOW is used and disclosed only as is permitted by the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. Only persons explicitly authorized by patients to have access to their behavioral healthcare information will be provided access.
Why Do We Gather Your Personal Information?
We gather personal information for the following purposes:
How Is Information Viewed, Updated, and Deactivated?
Because the information collected by WILLOW is intended to be used in conjunction with behavioral health care and interpreted by a behavioral healthcare professional, we recommend that patients work directly with behavioral healthcare providers when viewing, updating, and deactivating data. Patients may also contact WILLOW by post or email at the address listed below.
Upon written request by the account holder, an account will be deactivated and archived. We retain archived information for a period of five years (or longer if required by law) as necessary to comply with legal obligations, resolve disputes and enforce our agreements and other authorized uses under this Policy.
HIPAA grants patients certain rights to access and correct certain health information their healthcare providers retain about them. Patients should submit requests to access or correct their health information directly to their healthcare providers.
Please note that de-identified health information is stored indefinitely in our anonymized data repository.
Changes to this Policy
Evidence-Based Practice Institute (EBPI)
3303 South Irving Street
Seattle, WA 98144