Privacy Policy
WELLMIND HEALTH PLLC
Effective Date: Jan 19, 2026
IMPORTANT NOTICE REGARDING TEXT MESSAGING DATA
WELLMIND HEALTH PLLC ("we," "us," or "our") DOES NOT share patient opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing, promotional, or any other purposes unrelated to providing our direct healthcare services. All text messaging originator opt-in data is kept strictly confidential and is handled in accordance with HIPAA regulations.
1. Information We Collect
Website Information Collection:
When you use our website, we collect personal information that you voluntarily provide through forms, including your
First name
Last Name
Phone number (if provided)
Email address
and any message content you submit.
If you consent to cookies through our cookie banner, we may also collect certain technical information such as IP address, browser type, device type, pages visited, and interaction data through analytics and tracking technologies.
First name
Last Name
Phone number (if provided)
Email address
and any message content you submit.
If you consent to cookies through our cookie banner, we may also collect certain technical information such as IP address, browser type, device type, pages visited, and interaction data through analytics and tracking technologies.
We collect the following types of information through our website, intake forms, and our HIPAA-compliant practice management platform, SimplePractice:
a. Personal Information:
Full name, email address, phone number, physical address
Date of birth
Emergency contact information
Payment and insurance information when you make a payment or submit claims
Opt-in records and timestamps for all communication channels (SMS, email, etc.)
b. Health Information (Protected Health Information - PHI):
When you request or receive mental health services, we collect Protected Health Information such as:
Mental health history
Symptoms and diagnoses
Treatment notes and medication management records
Appointment details and preferences
Intake and assessment responses
Service history and clinical feedback
c. Non-Personal Information:
When you use our website, we may collect:
IP address, browser type, device information
Website usage patterns and analytics
Cookies and similar technologies
d. Patient Communication:
Records of inquiries and service requests
Appointment details and preferences
Care coordination communications
2. How We Use Your Information
We use collected data for:
Providing mental health services, including psychiatric evaluation and medication management
Scheduling appointments and processing telehealth encounters
Processing transactions, payments, and insurance claims
Communicating with you about your care, appointments, billing, and important updates
Enhancing website functionality and user experience
Ensuring security, fraud prevention, and legal compliance
Maintaining records of your communication preferences and consent
Improving our services and clinical quality
3. SMS Messaging & Compliance
SMS Data Protection Statement
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to HIPAA-compliant subcontractors in support services, such as patient communication platforms and customer service, is permitted solely for delivering healthcare services you have consented to receive. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We implement strict data protection measures to safeguard your SMS opt-in information and consent records in accordance with HIPAA requirements.
Text Message Program Terms & Conditions
By opting into our SMS messaging services, you agree to receive text messages related to our healthcare services, including appointment reminders, care coordination, administrative updates, and customer support.
Opt-In & Consent:
You will only receive messages if you have explicitly opted in through intake forms, our website, SimplePractice patient portal, or other consent mechanisms
We maintain timestamped records of all opt-in actions within SimplePractice
We comply with the Telephone Consumer Protection Act (TCPA), HIPAA, and all applicable laws
SMS opt-in is voluntary and not required to receive services
Opt-Out Instructions:
You can cancel SMS notifications at any time by replying "STOP"
You will receive a final confirmation message, and no further messages will be sent unless you re-opt in
All opt-out requests are processed within 24 hours
Message Frequency & Content:
Message frequency varies based on your appointment schedule and interactions with our practice
Messages will be directly related to the healthcare services you have requested
We do not send promotional content without specific consent
Messages may contain appointment reminders, scheduling confirmations, care-related information, and administrative communications
Help & Support:
Reply "HELP" for assistance or contact us during regular business hours
Customer support is available via phone at (385) 236-5515
Carrier Information:
Standard message and data rates may apply
Carriers are not liable for delayed or undelivered messages
Supported carriers include AT&T, Verizon, T-Mobile, Sprint, and most regional carriers
4. HIPAA & Protected Health Information
We comply with the Health Insurance Portability and Accountability Act (HIPAA) regulations regarding the use and disclosure of Protected Health Information (PHI). Your PHI may be used or disclosed without authorization for:
Treatment
Payment
Healthcare operations
Legal or regulatory requirements
Any other use or disclosure requires your written authorization, unless permitted by law. For detailed information about your HIPAA rights and our privacy practices regarding PHI, please refer to our Notice of Privacy Practices, which is provided during intake and available on our website.
5. Information Sharing & Disclosure
We do not sell, rent, or trade personal information or Protected Health Information. We may share information with:
Healthcare Providers & Staff:
Licensed clinicians and staff involved in your care
Consulting providers when clinically appropriate and authorized
Service Providers:
SimplePractice, our HIPAA-compliant practice management platform, which handles electronic health records, appointment scheduling, telehealth, billing, and patient communications on our behalf
Payment processors integrated with SimplePractice for secure transaction processing
SMS aggregators and communication providers solely for the purpose of delivering messages you've consented to receive
All service providers are contractually obligated to maintain HIPAA compliance, confidentiality, and security standards through Business Associate Agreements
Insurance & Payment:
Insurance companies for billing, claims processing, and eligibility verification
Payment processors for secure transaction processing
Legal Compliance:
If required by law, legal process, or to protect our rights and the safety of patients
In response to valid law enforcement requests, court orders, or subpoenas
To report suspected abuse, neglect, or domestic violence as required by law
To avert a serious threat to health or safety when permitted by law
Business Transfers:
In case of mergers, acquisitions, or sale of assets
In such cases, your data remains protected under the terms of this policy and HIPAA requirements
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding HIPAA-compliant aggregators and providers of the text message services necessary to deliver healthcare communications.
6. Data Security
We implement and maintain reasonable administrative, technical, and physical security measures to protect your personal information and Protected Health Information. We use SimplePractice, a HIPAA-compliant practice management platform, which provides:
Encryption of sensitive data in transit and at rest
Secure, HIPAA-compliant servers and hosting infrastructure
Secure access controls and multi-factor authentication mechanisms
Regular security assessments, audits, and updates
Employee training on HIPAA compliance and data protection
Breach notification protocols in accordance with HIPAA and applicable laws
Secure backup systems and disaster recovery procedures
Business Associate Agreements with all vendors handling PHI
Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal and health information but cannot guarantee absolute security.
7. Cookies & Tracking Technologies
The above cookies and tracking technologies are only activated after a user provides consent through our website’s cookie banner. If consent is not granted, non-essential analytics and advertising cookies are not deployed.
We may allow third-party service providers, including Google and Meta, to place cookies or tracking technologies on our website once consent is granted. These providers may collect information directly from your browser or device to provide analytics and advertising services.
You may withdraw or modify your cookie consent at any time through your browser settings or by adjusting your cookie preferences on our website.
These cookies are not strictly necessary for the operation of the website and are considered non-essential tracking technologies.
Analytics & Advertising Cookies
The following cookies and tracking technologies are used on our website only after a user provides consent through our cookie banner.
| Name | Provider | Duration | Description | Trigger |
|---|---|---|---|---|
| _ga | Google Analytics | 2 years | Distinguishes unique website users for analytics reporting. | Activated only after cookie consent |
| _ga_<container-id> | Google Analytics | 400 days | Stores session state and tracks user behavior across sessions. | Activated only after cookie consent |
| _gid | Google Analytics | 24 hours | Identifies users for short-term session tracking. | Activated only after cookie consent |
| _gcl_au | Google Ads / Google Tag | 90 days | Measures advertising effectiveness and stores ad interaction data. | Activated only after cookie consent |
| _fbp | Meta (Facebook) Pixel | 90 days | Identifies browsers for advertising and conversion tracking. | Activated only after cookie consent |
| fr | Meta (Facebook) Pixel | 90 days | Used for ad delivery and performance measurement. | Activated only after cookie consent |
These cookies and tracking technologies are only activated after a user provides consent through our website’s cookie banner. If consent is not granted, non-essential analytics and advertising cookies are not deployed.
8. Your Rights & Choices
Under HIPAA and applicable privacy laws, you have the right to:
Access, inspect, and obtain copies of your personal and health records
Request corrections or amendments to your health information
Request restrictions on certain uses and disclosures of PHI
Request confidential communications (e.g., contact at a specific phone number or address)
Receive an accounting of disclosures of your PHI
Receive a paper copy of our Notice of Privacy Practices
Opt-out of marketing emails by clicking "unsubscribe" in our emails
Opt-out of SMS messages by replying "STOP"
Withdraw consent at any time for future non-essential communications
File a complaint with us or the U.S. Department of Health & Human Services if you believe your privacy rights have been violated, without retaliation
To exercise these rights or request more information, please contact us using the information in Section 12.
9. Third-Party Links
Our website may contain links to third-party websites, including insurance portals, crisis resources, and educational materials. We are not responsible for their privacy practices and encourage you to review their policies. This privacy policy applies only to information collected by WELLMIND HEALTH PLLC.
10. Retention of Information
We retain medical records and personal information as required by federal and Utah state law, typically for a minimum of seven (7) years from the last date of service or as otherwise required. Records are securely disposed of when no longer required by law or for legitimate healthcare purposes.
11. Children’s Privacy
Our services are intended for individuals 18 years and older, or minors receiving services with legally valid parental or guardian consent. We comply with applicable laws regarding the privacy of minors' health information.
12. Changes to This Policy
We may update this policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The latest version will always be available on our website with the effective date. For significant changes, we will notify you by email, through a notice on our website, or through our patient portal.
13. Contact Us
If you have questions about this Privacy Policy, how your information is handled, or wish to exercise your privacy rights, contact us at:
Wellmind Health PLLC
485 South Orem Blvd Suite 102 Orem, Utah 84058
Phone: (385) 236-5515
Fax: (801) 396-0592
Email: [email protected]
Website: https://wellmindhealth.co
For HIPAA-related inquiries or to file a complaint, you may also contact: U.S. Department of Health & Human Services Office for Civil Rights Website: www.hhs.gov/ocr/privacy
By using our website and services, you consent to this Privacy Policy.
We are committed to providing compassionate, confidential, and effective psychiatric care. Whether you're seeking medication management, diagnostic evaluation, or ongoing mental health support, we're here to help.
485 S Orem Blvd, Suite 102 Orem, UT 84058
(385) 236-5515
FAX: 801-396-0592
Office Hours
Thursday - Saturday:
8:00 AM - 6:00 PM
Telehealth
Monday - Tuesday:
5:00 PM - 6:00 PM
Wednesday:
7:00 AM - 8:00 AMThursday - Saturday:
8:00 AM - 6:00 PM
© 2026 WELLMIND HEALTH PLLC. All rights reserved.
The information on this website is for informational purposes only and does not constitute medical advice, diagnosis, or treatment. Use of this website does not establish a provider-patient relationship. If you are experiencing a medical or mental health emergency, call 911 or go to the nearest emergency room.
WELLMIND HEALTH PLLC provides mental health services to individuals located in the State of Utah, where our clinicians are licensed, unless otherwise permitted by law.
By submitting forms on this website, you consent to receive calls, emails, and text messages from WELLMIND HEALTH PLLC related to scheduling, services, and care coordination. Message and data rates may apply. You may opt out of SMS communications at any time by replying STOP.
Privacy Policy | Terms & Services | Notice of Privacy Practices
If you are experiencing a mental health crisis, call 911 or contact the 988 Suicide & Crisis Lifeline by dialing or texting 988.