Privacy Policy
Effective Date:October 22, 2025
Dr. Gabriella Farkas, MD, PhD (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and telehealth psychiatric services.
This policy complies with the Health Insurance Portability and Accountability Act (HIPAA) and applicable South Carolina and federal privacy laws.
1. Information We Collect
We may collect the following types of information:
Personal Information
Name, email address, phone number, date of birth, address, and insurance details.
Health Information
Medical and psychiatric history, current symptoms, diagnoses, treatment plans, medications, psychosocial information, clinical evaluation notes, and other protected health information (PHI) under HIPAA.
Technical Information
IP address, browser type, device identifiers, and usage data when you visit our website or access our HIPAA-compliant telehealth platform.
2. How We Use Your Information
We use your information to:
- Provide comprehensive psychiatric evaluations and evidence-based medication management
- Develop and implement personalized treatment plans optimized for efficacy and minimal side effects
- Communicate with you about appointments, treatment progress, and clinical care
- Coordinate care with your other healthcare providers when authorized
- Process payments and insurance claims (we are in-network with Aetna and Cigna, and provide superbills for out-of-network reimbursement)
- Conduct quality improvement activities and measurement-based care assessments
- Comply with legal, regulatory, and professional obligations
3. Sharing Your Information
We do not sell or rent your personal information. We take your privacy seriously and limit disclosures to what is necessary for your care and required by law.
We may share your information with:
- Authorized healthcare providers directly involved in your treatment (with your consent)
- Health insurance companies for claims processing and coverage verification
- HIPAA-compliant technology vendors who support our secure telehealth platform and electronic health record system, under strict Business Associate Agreements
- Government or regulatory agencies when required by law (e.g., court orders, mandatory reporting of abuse or imminent danger)
4. Your Rights Under HIPAA
You have important rights regarding your protected health information:
Right to Access
You have the right to inspect and obtain a copy of your medical records. Requests must be submitted in writing, and we will respond within 30 days.
Right to Amend
If you believe information in your records is incorrect or incomplete, you may request an amendment in writing. We will respond within 60 days.
Right to an Accounting
You have the right to receive a list of certain disclosures we’ve made of your PHI during the six years prior to your request.
Right to Request Restrictions
You may request restrictions on how we use or disclose your information for treatment, payment, or healthcare operations. While we will consider your request, we are not required to agree except in limited circumstances.
Right to Confidential Communications
You may request that we communicate with you in a specific manner or at a specific location (e.g., via cell phone rather than home phone). We will accommodate reasonable requests.
Right to File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.
5. Data Security
We implement comprehensive technical, administrative, and physical safeguards to protect your personal and health information from unauthorized access, disclosure, or loss.
Our security measures include:
- HIPAA-compliant encrypted telehealth platform for all video sessions
- Encrypted electronic health record (EHR) system with secure data storage
- Multi-factor authentication for system access
- Regular security audits, risk assessments, and software updates
- Firewall and anti-malware protection
- Staff training on HIPAA compliance and privacy practices
- Limited access to PHI on a strict need-to-know basis
- Secure disposal protocols for all protected health information
6. Telehealth Privacy Considerations
All telehealth sessions are conducted through a secure, HIPAA-compliant video platform with end-to-end encryption. To protect your privacy during sessions:
- Ensure you are in a private location where you cannot be overheard
- Use a secure internet connection (avoid public Wi-Fi when possible)
- Keep your device updated with the latest security patches
- Do not record sessions without explicit written permission
While we use industry-leading secure technology, no electronic transmission is completely risk-free. By using our telehealth services, you acknowledge and accept the inherent privacy considerations of electronic communication.
7. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve user experience, analyze site traffic, and understand how visitors interact with our content. These tools help us optimize our website and provide relevant information to prospective patients.
You can manage your cookie preferences through your browser settings. Disabling cookies may affect certain website functionality but will not impact your ability to receive clinical care.
8. Third-Party Links
Our website may contain links to external resources, educational materials, or professional organizations. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.
9. Data Retention
We retain your medical records in accordance with South Carolina state law and professional standards, which typically require retention for at least seven years from the date of the last service. Records may be retained longer if required by law or for ongoing treatment purposes.
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Updates will be posted on this page with a revised effective date.
Material changes will apply to information we already have about you as well as any information we receive in the future. We will provide notice of significant changes through our website and, when appropriate, through direct communication with active patients.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, your privacy rights, or our information practices, please contact us:
Dr. Gabriella Farkas, MD, PhD
Adult & Geriatric Psychiatry
New York office: 3245 Hunters Point Ave, Long Island City, New York 11101
South Carolina office: 11 Palmetto Bay Rd, Ste 101, Hilton Head Island, South Carolina 29928
917-267-9678
hello@pearlbh.com
File a Complaint with Federal Authorities
You also have the right to file a complaint with:
Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy
By using our services, you acknowledge that you have read and understood this Privacy Policy. We are committed to protecting your privacy while providing the expert psychiatric care you deserve.