Notice of Privacy Practices
Yarrow Behavioral Health PLLC
Effective Date: October 11, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Your Privacy
Yarrow Behavioral Health PLLC provides psychiatric evaluations and medication management through telehealth for Arizona adolescents ages 13 and older and adults.
We recognize that psychiatric and medical information is personal and sensitive. We are committed to protecting your health information and respecting your privacy.
This notice explains how we may use or disclose your protected health information (PHI), your rights under federal and Arizona law, and our legal responsibilities.
This notice applies to health information maintained by Yarrow Behavioral Health PLLC. Our public website Privacy Policy separately describes website-related information practices.
1. Your Privacy Rights
Access Your Medical Records
You may request to inspect or receive an electronic or paper copy of your medical records and other health information we maintain about you.
We will respond within applicable federal and Arizona legal deadlines. Depending on the purpose of your request and the records involved, different response periods may apply.
We may charge a reasonable fee when permitted by law. If access is denied, we will explain the reason in writing and describe any applicable review rights.
Request Corrections
If you believe information in your medical record is incorrect or incomplete, you may request an amendment.
We will review your request and respond as required by law. If we deny the request, we will explain why and inform you of your options.
Request Confidential Communications
You may ask us to communicate with you in a particular way, such as by telephone, email, or through an appropriate secure patient portal.
We will accommodate reasonable requests as required by law.
Request Limits on Information Sharing
You may ask us to restrict certain uses or disclosures of your health information for treatment, payment, or health care operations.
We are not generally required to agree to every requested restriction.
However, if you pay for a service entirely out of pocket, you may request that information about that service not be disclosed to your health plan for payment or health care operations. We will honor that request unless disclosure is required by law.
Request an Accounting of Disclosures
You may request an accounting of certain disclosures of your health information made during the preceding six years, subject to applicable exceptions.
We generally provide one accounting within 12 months without charge. Additional requests may be subject to a reasonable, legally permitted fee.
Receive a Copy of This Notice
You may request a paper or electronic copy of this Notice of Privacy Practices at any time.
Designate a Personal Representative
A person legally authorized to act on your behalf may exercise applicable privacy rights. We will verify that person's legal authority before providing access or making disclosures.
File a Privacy Complaint
You may contact Yarrow's Privacy Officer if you believe your privacy rights have been violated.
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
We will not retaliate against you for filing a complaint.
2. How We Use and Disclose Health Information
Federal and Arizona laws permit certain uses and disclosures of health information without separate written authorization, subject to applicable requirements and restrictions.
Treatment
We may use and disclose information to evaluate, diagnose, prescribe medications, monitor treatment, and coordinate care.
For example, we may communicate with a treating medical provider or pharmacist about your medications. We may also coordinate with your established therapist when appropriately authorized.
Payment
We may use and disclose information for billing, insurance claims, eligibility verification, and payment processing.
For example, information necessary for a claim may be provided to Headway or a participating health insurer.
Health Care Operations
We may use and disclose information for activities necessary to operate the practice, including quality improvement, documentation review, regulatory compliance, and secure administrative services.
When required, service providers handling protected health information on our behalf must meet applicable HIPAA business associate requirements.
3. Other Uses and Disclosures Permitted or Required by Law
Under applicable legal safeguards, we may disclose health information for:
Public health reporting and certain safety-related activities.
Reporting suspected abuse, neglect, or other matters when legally required or permitted.
Preventing or reducing a serious threat to health or safety.
Health oversight, professional licensing, and regulatory investigations.
Workers' compensation matters.
Court proceedings, subpoenas, and other lawful legal processes when disclosure requirements are satisfied.
Certain law enforcement and government functions.
Research activities conducted with required legal protections or approvals.
Medical examiner, coroner, funeral director, and organ donation purposes when legally applicable.
Other disclosures expressly required or permitted by law.
We apply any additional protections imposed by Arizona law and special federal confidentiality requirements.
4. Your Choices About Sharing Information
You may tell us whether you want certain information shared with family members, close friends, or other people involved in your care or payment for care.
When you can make decisions, we will follow your preferences as required by law.
If you cannot communicate your preferences, we may make a limited disclosure when legally permitted and clinically appropriate, including situations involving emergencies or serious threats to safety.
We do not automatically disclose psychiatric treatment information to relatives simply because they request it.
5. Uses Requiring Written Authorization
Other uses and disclosures not described in this notice will be made only with your written authorization.
Written authorization is generally required for:
Most uses or disclosures of separately maintained psychotherapy notes when HIPAA requires specific authorization.
Marketing uses or disclosures of protected health information that require authorization under HIPAA.
Sale of protected health information.
Other uses or disclosures requiring consent or authorization under applicable federal or Arizona law.
Yarrow does not sell patient health information.
Yarrow does not currently use patient health information for fundraising. If such practices change, applicable notice, authorization, and opt-out requirements will be followed.
You may revoke a written authorization as permitted by law. Revocation does not reverse disclosures already made in reliance on a valid authorization.
6. Additional Protections for Psychiatric Information
Arizona law recognizes medical records as confidential and imposes requirements governing disclosure of medical and mental health information.
We protect psychiatric evaluations, diagnoses, medication histories, and treatment records according to applicable federal and Arizona confidentiality laws.
We share information only when legally permitted or required, or when a valid authorization supports the disclosure.
7. Special Protections for Substance Use Disorder Records
Certain substance use disorder treatment records receive additional protection under 42 CFR Part 2.
When Yarrow receives or maintains records protected by Part 2, we comply with the special federal rules governing those records.
In certain circumstances, a valid patient consent permits disclosure for treatment, payment, and health care operations and subsequent redisclosure as permitted by HIPAA.
Records protected by 42 CFR Part 2, and testimony describing their contents, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you give legally sufficient written consent or a court issues a qualifying order after you or the holder of the records has received notice and an opportunity to be heard. A court order must be accompanied by a subpoena or other legal requirement compelling disclosure before the records are used or disclosed.
Additional authorization requirements may apply to specially protected substance use disorder counseling notes.
When Part 2 imposes greater protections than HIPAA, those protections apply.
8. Privacy Rights of Adolescents and Parents
Yarrow provides psychiatric care to adolescents ages 13 and older.
Parents and legal guardians generally have certain rights and responsibilities concerning a minor's treatment and health information. However, these rights are subject to exceptions under Arizona and federal law.
Certain information may require additional confidentiality protections, and parental access may be limited in circumstances recognized by law.
We evaluate requests involving adolescents, parents, guardians, and other legal representatives according to the applicable consent, confidentiality, access, and safety requirements.
We do not promise absolute confidentiality from a minor's parent or guardian when disclosure is required or permitted by law.
9. Our Legal Responsibilities
Yarrow Behavioral Health PLLC is required to:
Protect the privacy and security of protected health information.
Follow applicable federal and Arizona privacy laws.
Provide individuals with information about our legal duties and privacy practices.
Follow the terms of the Notice of Privacy Practices currently in effect.
Notify affected individuals when a reportable breach of unsecured protected health information occurs.
We may revise this notice as laws or practice operations change. Revised terms may apply to health information we already maintain, as permitted by law.
We will make the current version available on our website and upon request.
10. Contact Our Privacy Officer
For privacy questions, requests to access or amend records, requests for confidential communication, or privacy complaints, contact:
Kathryn Montierth, MSN, APRN, PMHNP-BC
HIPAA Privacy Officer
Yarrow Behavioral Health PLLC
Email: kathryn@yarrowbehavioralhealthaz.com
Telephone: 602-663-5580
Website: https://yarrowbehavioralhealthaz.com
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:
https://www.hhs.gov/hipaa/filing-a-complaint/
There will be no retaliation for exercising your privacy rights.
End of Notice of Privacy Practices