Privacy Policy

Privacy Policy

Last Updated: October 17, 2025

Introduction

This Privacy Policy explains how Korawells ("we," "us," or "our") collects, uses, discloses, and protects your personal and health information when you use our website at korawells.com, therapeutic services, immigration psychological evaluation services, or any related services (collectively, the "Services").

Your privacy and confidentiality are our highest priorities. As a mental health services provider, we are bound by HIPAA (Health Insurance Portability and Accountability Act) regulations and California state privacy laws to protect your sensitive health information.

By using our Services, you agree to the collection and use of information in accordance with this policy.

Our Commitment to Confidentiality

We understand that seeking mental health services requires immense trust. We want to be absolutely clear:

  • We do not share information with immigration authorities except under court order
  • Your immigration status is not asked or documented in our standard intake processes
  • All therapy sessions are confidential under HIPAA and California law
  • We use HIPAA-compliant platforms for all telehealth and communications
  • Cultural confidentiality considerations are integrated into our practice

Information We Collect

Protected Health Information (PHI)

As a healthcare provider, we collect and maintain Protected Health Information as defined by HIPAA:

  • Personal Identifiers: Name, date of birth, address, phone number, email address
  • Clinical Information: Mental health diagnoses, treatment plans, therapy session notes, psychological assessment results
  • Immigration Evaluation Documentation: Information specific to asylum evaluations, VAWA applications, U-Visa/T-Visa documentation, hardship waiver assessments (only when you specifically engage these services)
  • Payment Information: Billing address, insurance information, payment method details
  • Emergency Contacts: Information about individuals to contact in case of emergency
  • Communication Records: Messages, emails, and correspondence between you and our practice

Automatically Collected Website Information

When you visit korawells.com, we automatically collect:

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent on pages, navigation patterns
  • Location Data: General geographic location based on IP address
  • Cookies: Small data files that help us improve your website experience

How We Use Your Information

Clinical and Treatment Purposes

  • Providing Care: To deliver mental health therapy, conduct immigration psychological evaluations, and provide culturally competent treatment
  • Treatment Planning: To develop and implement personalized treatment plans
  • Consultation: To consult with other healthcare providers involved in your care (only with your authorization)
  • Crisis Intervention: To respond to mental health emergencies and ensure your safety

Administrative Purposes

  • Appointment Management: To schedule, confirm, and manage your therapy appointments
  • Billing and Payment: To process payments, submit insurance claims, and manage your account
  • Communication: To send appointment reminders, treatment updates, and respond to your inquiries
  • Service Improvement: To improve our Services and understand patient needs

Legal and Professional Obligations

  • Legal Compliance: To comply with HIPAA, California state laws, and professional licensing requirements
  • Court Orders: To respond to valid subpoenas, court orders, or other legal requirements
  • Mandated Reporting: To fulfill mandatory reporting obligations for child abuse, elder abuse, or imminent danger to self or others (as required by California law)

How We Share Your Information

We take your privacy seriously and only share your information in limited circumstances:

With Your Authorization

  • Attorney Coordination: For immigration evaluation clients, we share evaluation reports with your immigration attorney (only with your written consent)
  • Healthcare Providers: We may share information with other healthcare providers involved in your care (with your authorization)
  • Insurance Companies: We share necessary information to process insurance claims (only the minimum necessary)

Without Your Authorization (Only When Legally Required)

  • Mandated Reporting: California law requires us to report suspected child abuse, elder abuse, or imminent danger
  • Court Orders: We may be legally compelled to disclose information pursuant to valid court orders or subpoenas
  • Emergency Situations: To prevent serious and imminent harm to you or others

Service Providers

We work with HIPAA-compliant service providers who help us operate our practice:

  • Telehealth Platforms: HIPAA-compliant video conferencing services
  • Electronic Health Records: Secure, encrypted EHR systems
  • Payment Processors: Secure payment processing services
  • Practice Management: Appointment scheduling and billing software

All service providers sign Business Associate Agreements (BAAs) ensuring HIPAA compliance.

Special Protections for Immigration Status

We want to be absolutely clear about immigration-related privacy:

  • We do not routinely collect immigration status information
  • Immigration status is never shared with immigration enforcement agencies except under court order
  • For immigration evaluation clients, documentation is only shared with your designated immigration attorney
  • All immigration evaluation materials are stored with the highest security standards
  • We understand the unique vulnerability of immigrant communities and provide extra privacy protections

Data Security

We implement comprehensive security measures to protect your Protected Health Information:

Technical Safeguards

  • Encryption: All data is encrypted both in transit (using SSL/TLS) and at rest
  • Access Controls: Strict user authentication and role-based access controls
  • Secure Systems: HIPAA-compliant electronic health record systems
  • Regular Audits: Ongoing security assessments and vulnerability testing

Physical Safeguards

  • Secure Facilities: Locked offices with restricted access
  • Confidential Disposal: Secure destruction of physical records when no longer needed
  • Private Spaces: Soundproofed therapy rooms ensuring conversation privacy

Administrative Safeguards

  • Staff Training: All staff receive comprehensive HIPAA and privacy training
  • Policies and Procedures: Written privacy policies followed by all personnel
  • Incident Response: Clear procedures for addressing any security incidents

Your Privacy Rights Under HIPAA

Under HIPAA and California law, you have the following rights:

Right to Access

You have the right to inspect and obtain a copy of your medical records. We will provide copies within 30 days of your request.

Right to Amendment

You can request corrections to your medical records if you believe information is inaccurate or incomplete.

Right to an Accounting

You can request a list of certain disclosures we have made of your health information.

Right to Restriction

You can request restrictions on how we use or disclose your information for treatment, payment, or healthcare operations.

Right to Confidential Communications

You can request that we communicate with you in a specific way (e.g., call your cell phone instead of home phone).

Right to a Paper Copy

You have the right to receive a paper copy of this Privacy Policy at any time.

Right to File a Complaint

If you believe your privacy rights have been violated, you can file a complaint with:

We will not retaliate against you for filing a complaint.

Data Retention

We retain your Protected Health Information in accordance with:

  • HIPAA Requirements: Minimum 6 years from the date of creation or last use
  • California Law: As required by state professional licensing boards
  • Immigration Evaluations: Records retained for 7 years to support any future legal proceedings

After the retention period, we securely destroy all records in compliance with HIPAA regulations.

Minors' Privacy

For clients under 18 years old, parents or legal guardians generally have the right to access their child's Protected Health Information, except:

  • When California law grants minors independent treatment rights (e.g., for certain mental health services)
  • When a court order specifies otherwise
  • When disclosure could endanger the minor

We discuss confidentiality boundaries with minors and their families at the beginning of treatment.

Telehealth Privacy

We use HIPAA-compliant telehealth platforms for virtual sessions. During telehealth sessions:

  • Find a private space where you cannot be overheard
  • Use secure internet (avoid public Wi-Fi when possible)
  • Close doors and windows to ensure conversation privacy
  • Use headphones to prevent others from hearing
  • Inform us immediately if you're not in a private location

We understand that private space can be challenging, especially for those in shared housing, and we'll work with you to find solutions.

Website Cookies and Analytics

Our website uses cookies to improve your experience. You can control cookie settings through your browser, though some features may not work properly if cookies are disabled.

We use privacy-focused analytics to understand how visitors use our website. This data is anonymized and cannot identify you personally.

International Data Transfers

Our Services are provided in California, and we store data on servers located in the United States. If you access our Services from outside the U.S., your information will be transferred to and processed in the United States.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Posting the updated policy on korawells.com
  • Updating the "Last Updated" date
  • Sending email notification for significant changes (if you've provided your email)

Notice of Privacy Practices

This Privacy Policy serves as our HIPAA Notice of Privacy Practices. You may request a paper copy at any time by contacting us.

Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us through our website at korawells.com.

Location: Los Angeles & Orange County, California