Privacy
Policy

Information We Collect

At Peniel Mental & Behavioral Health PLLC, we collect information necessary to provide you with safe, effective, and personalised psychiatric care. The types of information we may collect include:

• Personal Identifiers: Full name, date of birth, address, phone number, and email address.
• Protected Health Information (PHI): Diagnoses, treatment records, medication history, clinical notes, and session summaries.
• Insurance & Financial Information: Insurance policy details, billing records, and payment information.
• Technical Data: IP addresses, browser type, device identifiers, and usage data when accessing our website or telehealth platform.
• Communications: Emails, messages, and notes submitted through our contact forms or patient portal.

Your HIPAA Rights

As a patient, you are protected by the Health Insurance Portability and Accountability Act (HIPAA). You have the following rights regarding your Protected Health Information (PHI):

• Right to Access: Request and receive a copy of your health records in paper or electronic format.
• Right to Amend: Request corrections to your health records if you believe they are inaccurate or incomplete.
• Right to Restrict: Request that we limit how we use or share your PHI for treatment, payment, or operations.
• Right to Confidential Communications: Request that we contact you using a specific method or at a specific location.
• Right to an Accounting: Request a list of disclosures we have made of your PHI.
• Right to a Notice: Receive a written copy of this Privacy Policy and our Notice of Privacy Practices.
• Right to File a Complaint: File a complaint with us or with the U.S. Department of Health and Human Services if you believe your rights have been violated.

To exercise any of these rights, please contact our privacy officer directly. We will respond to all valid requests within 30 days.

Third-Party Disclosures

We may share your information only under the following limited and lawful circumstances. In all cases, we require that any third party receiving your information maintains appropriate safeguards consistent with HIPAA and applicable law.

• Treatment Coordination: With other treating providers you authorise us to communicate with for continuity of care.
• Insurance & Billing: With your insurance company or billing service solely to process claims related to your treatment.
• Legal Requirements: When required by law, court order, or governmental authority, including mandatory reporting obligations.
• Business Associates: With HIPAA-compliant business associates (such as our telehealth platform provider) under strict data use agreements.
• Public Health Duties: To public health authorities as required by law for disease prevention and control.
• With Your Written Consent: For any purpose beyond those listed above, we will always obtain your explicit written authorisation first.

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please reach out to us. We are committed to responding promptly and transparently.

This Privacy Policy was last updated on June 1, 2026. We reserve the right to update this policy periodically. Any changes will be posted on this page with a revised effective date.