top of page

Privacy policy & notice of privacy practices

Effective Date: July 6, 2026

 

This Privacy Policy and Notice of Privacy Practices describes how Oxytocin protects, uses, and discloses your personal and protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records), applicable Montana law, and other applicable federal regulations.

​

Please review this Notice carefully. It explains how your information may be used and disclosed, your privacy rights, and our legal responsibilities regarding your information.

​

Table of Contents
​

  1. Our Legal Responsibilities

  2. How We Use and Disclose Your Health Information

  3. Substance Use Disorder Records (42 CFR Part 2)

  4. Mental Health Records

  5. Telehealth & Electronic Services

  6. Phone, Text, Email & Electronic Communications

  7. Oxytocin Privacy Policy for SMS Messaging

  8. Requests, Website & Electronic Forms

  9. Third-Party Service Providers

  10. Minors & Parent/Guardian Rights

  11. Your Privacy Rights

  12. Data Security & Retention

  13. Changes to This Notice

  14. Questions or Complaints

 

1. Our Legal Responsibilities
​

Oxytocin is required by law to:

  • Maintain the privacy and security of your protected health information (PHI).

  • Provide you with this Notice of Privacy Practices.

  • Notify you following a breach of unsecured protected health information when required by law.

  • Comply with HIPAA, 42 CFR Part 2, applicable Montana statutes, and other federal privacy laws.

 

We are required to follow the privacy practices described in this Notice.

​

2. How We Use and Disclose Your Health Information
​
Treatment
​

We may use and disclose your health information to provide, coordinate, or manage your care. This may include communication among clinicians, medical providers, peer support specialists, care managers, laboratories, pharmacies, hospitals, and other healthcare professionals involved in your treatment.

​

Payment

 

We may use and disclose your health information for payment purposes, including:

  • Insurance billing

  • Prior authorizations

  • Claims submission

  • Coordination of benefits

  • Payment collection

 

Please note that some services, including certain court-ordered evaluations and educational programs, are not billable to insurance.

 

Health Care Operations

 

We may use your information to:

  • Improve the quality of care

  • Conduct quality assurance activities

  • Maintain accreditation

  • Train staff

  • Perform audits

  • Meet licensing and regulatory requirements

  • Operate our organization

 

Individuals Involved in Your Care
​

With your written authorization or as otherwise permitted by law, we may share relevant information with family members, legal guardians, or other individuals involved in your care or payment.

 

Required by Law
​

We may disclose information when required by federal or Montana law, including reporting requirements related to abuse, neglect, court orders, public health reporting, or threats to health or safety.

 

3. Substance Use Disorder Records (42 CFR Part 2)
​

Because Oxytocin provides Substance Use Disorder treatment services, many client records are protected under 42 CFR Part 2, a federal law that provides additional confidentiality protections beyond HIPAA.

​

Except as specifically permitted by law, your written consent is required before we disclose information identifying you as having received substance use disorder services.

​

Disclosures without your written consent are limited to situations specifically authorized by federal law, including certain medical emergencies, research, audits, evaluations, and court orders that meet the requirements of 42 CFR Part 2.

 

4. Mental Health Records
​

Mental health records are protected under HIPAA and applicable Montana law.

​

Certain psychotherapy notes receive additional legal protections and generally cannot be disclosed without your separate written authorization, except in limited circumstances permitted by law.

​

5. Telehealth & Electronic Services
​

Oxytocin provides telehealth services through secure, HIPAA-compliant technology.

​

Although reasonable safeguards are used, electronic communications involve inherent privacy risks, including technical failures or unauthorized access beyond our control.

​

By participating in telehealth or submitting information electronically, you acknowledge these risks and consent to electronic communication when appropriate.

​

6. Phone, Text, Email & Electronic Communications
​

By providing your telephone number or email address, you authorize Oxytocin to communicate with you regarding:

  • Appointment reminders

  • Scheduling changes

  • Billing questions

  • Care coordination

  • Administrative communications

  • Requests for documentation

 

These communications are not used for marketing purposes.

 

Oxytocin does not accept requests via its website. Requests related to services, appointments, documentation, records, billing, privacy rights, complaints, consent changes, or communication preferences must be made by contacting the office directly or going through the client portal on the EHR.

​

Text Message Opt-Out
​

You may stop receiving text messages at any time by replying:

​

STOP

​

Privacy Statement: No mobile information, text messaging opt-in data, or consent information will be shared with third parties or affiliates for marketing or promotional purposes.

​

Text messaging originator opt-in data and consent will only be shared with messaging aggregators and service providers necessary to deliver text message services.

​

7. Oxytocin Privacy Policy for SMS Messaging
​

Links:

​

Introduction

​

At Oxytocin, protecting your privacy is our priority. This Privacy Policy explains how we collect, use, and safeguard your information when you opt into our SMS program. By enrolling, you agree to these terms, which comply with the 2026 Telephone Consumer Protection Act (TCPA), Campaign Registry requirements, and CTIA Best Practices.

​

1. Information We Collect

 

  • Phone Number: The mobile number you provide to receive SMS messages.

  • Message Interaction Data: Delivery and engagement metrics, such as delivery status and response keywords.

  • Consent Records: Timestamps and methods of opt-in, such as keyword, verbal consent, paper consent, or another office-approved consent method.

​

2. How We Use Your Information

  • Send SMS messages, including notifications, updates, and reminders, per your opt-in preferences.

  • Demonstrate regulatory compliance, including TCPA 2025 and Campaign Registry requirements.

  • Improve messaging and measure engagement.

​

3. One-to-One Consent Requirement

  • Under the January 2024 FCC ruling, opt-in consent applies solely to Oxytocin. We do not share your consent with third parties or affiliates unless you expressly agree.

​

4. Message Frequency & Data Rates

  • The SMS message frequency will vary, but will not exceed 3-5 messages per day unless there is a notification event. Message and data rates may apply; check your carrier’s terms.

​

5. Opt-Out & HELP Instructions

  • Text “STOP” to any message to unsubscribe immediately.

  • Text “HELP” for assistance or contact us at info@oxytocinclinic.com or 406.314.6565.

​

6. Data Sharing & Disclosure

  • We will never sell your data.

  • We may share data with service providers, such as carriers, with strict confidentiality regarding SMS delivery.

  • National Do Not Call Registry (DNC) protections apply to SMS; we honor existing DNC registrations unless you expressly opt in.

​​

7. Security of Your Information

  • Reasonable measures are in place to protect your data, though no system is infallible.

​

8. Record-Keeping & Proof of Consent

  • We retain all opt-in and opt-out records, including timestamps and consent methods, to comply with TCPA 2026 and Campaign Registry guidelines.

​​

9. Changes to This Policy

  • We may update this Policy as laws evolve. Material changes will be communicated via SMS or on our website. Continued use after updates constitutes acceptance.

 

10. Contact Us

  • If you have any questions about this Privacy Policy or wish to update your SMS preferences, you must contact the office directly:

 

Key 2026 Compliance Elements:

​

One-to-One Consent: Consumers are only giving consent to receive messages from the specific business they opt in for, not from multiple parties or third parties.

​

Clear Disclosures: The policy includes clear language about the nature of the messages, frequency, potential charges, and opt-out mechanisms.

​

Do Not Call Protections: The policy reflects the latest FCC guidance that DNC protections apply to SMS, making it clear that businesses must adhere to DNC regulations.

​

Data Sharing and Record-Keeping: Emphasizes the importance of maintaining proof of consent and clear guidelines on how data is shared for operational purposes.

​

This updated Privacy Policy example aligns with current 2026 TCPA and FCC guidelines, ensuring your business remains compliant while fostering transparency with consumers.

​

8. Requests, Website & Electronic Forms

 

Oxytocin does not accept any requests through its webpage, website, website contact form, or online scheduling feature. All requests must be made by contacting the office directly. This includes, but is not limited to:

  • Requests for services

  • Requests for appointments

  • Requests to cancel or reschedule appointments

  • Requests for records

  • Requests for documentation

  • Requests related to billing

  • Requests related to privacy rights

  • Requests to change communication preferences

  • Requests to update SMS preferences

  • Requests to file complaints or grievances

  • Requests for releases of information or consent changes

 

Oxytocin may use an electronic health record and electronic intake forms when appropriate. Electronic forms are provided or directed by the office and, when applicable, become part of your designated record set. These forms are protected under HIPAA, 42 CFR Part 2, and applicable Montana law.

​

Information submitted through office-directed electronic forms is used only for treatment, payment, health care operations, legal compliance, and other purposes permitted or required by law.

​

9. Third-Party Service Providers
​

Oxytocin utilizes trusted third-party vendors to support operations, including:

  • Electronic Health Records

  • Secure telehealth platforms

  • Internal appointment scheduling systems

  • Billing services

  • Payment processing

  • Website hosting for informational purposes only

  • Secure messaging

  • Office-directed electronic forms

  • Analytics necessary for website performance

 

The website is used for informational purposes only. Oxytocin does not accept requests via its website.

​

These vendors are contractually required to safeguard protected information in accordance with applicable federal privacy laws.

​

Required Privacy Statement
​

All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties except messaging aggregators and providers necessary to deliver text messaging services.

​

10. Minors & Parent/Guardian Rights
​

Oxytocin provides behavioral health and substance use disorder services to adolescents and minors as permitted under Montana law. Parents or legal guardians generally have rights regarding their child's treatment information. However, Montana law recognizes certain circumstances in which minors may consent to treatment or have confidentiality rights independent of a parent or guardian. When permitted by Montana law, Oxytocin will protect a minor's confidentiality in accordance with applicable legal requirements. Only information necessary to provide treatment, coordinate care, and comply with legal requirements is collected.

​

11. Your Privacy Rights
​

You have the right to:

  • Inspect and obtain copies of your health records, subject to applicable federal and Montana law

  • Request amendments to your record

  • Receive an accounting of disclosures

  • Request restrictions on certain disclosures

  • Request confidential communications

  • Receive a paper copy of this Notice

  • Receive notification of certain data breaches

  • File a complaint without fear of retaliation

 

Some requests may be denied when permitted by federal or Montana law.

 

Requests must be made by contacting the office directly. Oxytocin does not accept privacy requests via its website or webpage.

 

12. Data Security & Retention
​

Oxytocin maintains administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. Records are retained in accordance with applicable Montana record retention requirements, federal regulations, contractual obligations, and professional standards. When information is no longer required, it is securely destroyed or permanently de-identified as permitted by law.

 

13. Changes to This Notice
​

Oxytocin reserves the right to modify this Privacy Policy and Notice of Privacy Practices at any time. Updated versions may be posted on our website for informational purposes and will apply to all information maintained by Oxytocin unless otherwise required by law. Posting information on the website does not create a webpage request process. Any request related to this Notice must be made by contacting the office directly.

 

14. Questions or Complaints
​

If you have questions about this Notice or wish to exercise your privacy rights, please contact the office directly:


Phone: (406) 314-6565
Email: info@oxytocinclinic.com
Address: 1203 US HWY 2 W Ste 15, Kalispell, MT 59901

 

Oxytocin does not accept questions, complaints, privacy requests, record requests, appointment requests, service requests, billing requests, or communication preference requests through its webpage or website.

​

If you believe your privacy rights have been violated, you may file a complaint with Oxytocin by contacting the office directly or with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

​

You will not be retaliated against for filing a complaint.

​

Filing a complaint with Oxytocin does not affect your right to file a complaint directly with the U.S. Department of Health and Human Services.

bottom of page