Privacy Policy

1. Information We Collect

We may collect the following types of information:

A. Personal Information

• Parent/guardian name
• Address, phone number, email
• Emergency contact information
• Insurance information (including TRICARE)

B. Child Information

• Child name, date of birth
• Medical/diagnostic documentation provided to us
• Treatment goals and history
• Scheduling information

C. Health Information (PHI)

As an ABA provider, we collect PHI as defined by HIPAA, including:

• Assessments
• Treatment notes
• Behavior data
• Progress summaries
• Care coordination information

D. Automatically Collected Information

When accessing our website:

• IP address
• Device/browser details
• Basic analytics (page views, time on site)

This is non-identifiable and used only to improve our website.

2. How We Use Your Information

We use your information to:

• Deliver ABA therapy services
• Create and maintain treatment plans
• Coordinate with insurance providers (including TRICARE)
• Schedule and manage appointments
• Maintain clinical documentation
• Communicate with you about your child's care
• Comply with legal and regulatory obligations
• Improve service quality

We do not sell personal or health information.

3. How We Share Information

Your information may be shared only in the following situations:

A. With Your Consent

We share PHI with individuals or providers you authorize.

B. For Treatment

• BCBAs, RBTs, and clinical supervisors
• Other healthcare providers involved in your child's care (with consent)

C. For Payment

• Insurance companies (including TRICARE)
• Billing vendors
• Claims processing partners

D. For Healthcare Operations

• Quality audits
• Compliance reviews
• Accreditation processes

E. With Business Associates

We may share PHI with contracted vendors who help us operate, including:

• Electronic health record systems
• Scheduling software
• Billing software
• Secure communication tools

All Business Associates must sign a HIPAA-compliant agreement.

F. When Required by Law

We may disclose information to:

• Courts
• Government agencies
• Mandatory reporting of abuse or neglect
• Requests related to public health or law enforcement

4. HIPAA Compliance

Kudos Autism complies with applicable federal and state laws, including:

• HIPAA Privacy Rule
• HIPAA Security Rule
• TRICARE documentation requirements
• State-specific confidentiality laws

We use secure systems and administrative safeguards to protect PHI.

5. Data Storage & Security

We protect information using:

• Encrypted systems
• Access controls for clinical staff
• Password protection and multi-factor authentication
• Secure servers and HIPAA-compliant platforms

Although no system is 100% secure, we take reasonable steps to protect your information.

6. Your Rights Under HIPAA

You have the right to:

• Request a copy of your child's records
• Request corrections to incorrect information
• Request restrictions on certain uses or disclosures
• Request confidential communications
• Receive a list of disclosures
• File a complaint

To submit a request, email privacy@kudosautism.com.

7. Data Retention

We retain records in accordance with:

• HIPAA
• TRICARE requirements
• State laws (typically 6–7 years)

8. Children's Privacy

All information collected about children is provided by a parent/guardian. We do not collect information directly from minors through our website.

9. Changes to This Privacy Policy

We may revise this policy at any time. Updates will be posted to our website with a new "Last Updated" date.

10. Contact Us

For privacy questions or HIPAA concerns: