Privacy Policy

Privacy Policy

Effective Date: August 1, 2025

This Privacy Policy explains how I, Kyra Strasberg, operating as Yoga With Kyra, collect, use, and protect your personal health information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

1. Information I Collect

When you participate in yoga therapy with Yoga With Kyra, I may collect:

- Personal Information: name, address, phone number, email address, date of birth.

- Health Information (Protected Health Information or PHI): medical history, injuries, health conditions, medications, therapy goals, and session notes.

- Payment Information: billing address and payment details processed securely via Stripe, Venmo, or Zelle.

2. How I Use Your Information

Your information is used to:

- Provide safe, individualized yoga therapy services.

- Develop and maintain treatment records.

- Communicate with you about scheduling, care, and services.

- Comply with professional, ethical, and legal obligations.

3. Your Rights Under HIPAA

You have the right to:

- Access and Copies: Request a copy of your health records.

- Amendments: Request corrections to your records if you believe they are inaccurate or incomplete.

- Restrictions: Ask to limit how I use or share your information (though I may not always be able to agree if it conflicts with legal or clinical requirements).

- Confidential Communications: Request that I communicate with you in a specific way (e.g., only by phone, not by email).

- Accounting of Disclosures: Request a list of certain disclosures of your health information.

- Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with me (see contact info below) or with the U.S. Department of Health and Human Services (HHS).

4. Confidentiality and Disclosure

I will not use or disclose your PHI without your written authorization, except in situations where HIPAA permits or requires disclosure, such as:

- If required by law.

- If there is a serious risk of harm to yourself or others.

- For public health and safety reporting obligations.

5. Data Storage and Security

- All records are stored securely in [locked physical files and/or encrypted electronic systems].

- Only I (and authorized staff, if applicable) have access to your information.

- Records are retained for at least 6 years (HIPAA requirement) and then securely destroyed.

6. Third-Party Services

If I use third-party services (e.g., online booking, telehealth platforms, or payment processors), those providers may have access to certain information. I only work with services that maintain HIPAA-compliant safeguards.

7. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your HIPAA rights, or need to file a privacy complaint, please contact:

Kyra Strasberg

Yoga With Kyra

kyra@yogawithkyra.com

You also have the right to file a complaint directly with:

Office for Civil Rights (OCR)

U.S. Department of Health and Human Services

https://www.hhs.gov/ocr