Privacy Policy
How this website and the practice collect, use, and protect your information — and your rights under Arizona, Nevada, and federal law.
Effective date:
This Privacy Policy describes how itsmentalwellness.com (the website) handles information.
1. Who we are
This website is operated by Heidi Reed, MSN, APRN, PMHNP-BC, doing business as Intersect Mental Wellness, a solo psychiatric mental health nurse practitioner practice located in Arizona and Nevada (the “Practice,” “we,” “us,” or “our”). When we refer to “you,” we mean the visitor to this website.
2. What this policy covers
This Privacy Policy describes how we handle information collected through this website. It does not describe how Protected Health Information (PHI) is handled inside the clinical practice — that’s covered in the Notice of Privacy Practices, as required by the Health Insurance Portability and Accountability Act (HIPAA).
3. Information we collect
Information you give us directly.
When you use the contact form, email the practice, or call us, you may provide:
- Your name and contact information (email, phone).
- Brief information about the reason you’re reaching out.
- Your relationship to the patient (self, parent, guardian, young adult, referring provider, etc.).
- Any other information you choose to include in your message.
We ask you not to include detailed health information, diagnoses, medication details, or other sensitive clinical information in the website contact form or in email. Email is not a fully secure channel. We move to a HIPAA-compliant channel (the patient portal) as soon as we begin a clinical relationship.
Information collected automatically.
When you visit this website, our web server and any analytics services we use may collect:
- IP address
- Browser type and version
- Device type, operating system, and screen size
- Pages viewed, time on page, and navigation paths
- Referring website
- Approximate geographic location (derived from IP address)
This information is used in aggregate to understand how the website is used and to improve it. It is not used to identify individual visitors.
Cookies and similar technologies.
This website uses a small number of first-party and third-party cookies:
- Essential cookies: required for core website functionality.
- Analytics cookies: if we use a privacy-respecting analytics tool or Google Analytics 4 with IP anonymization, to understand aggregate site usage.
You can disable cookies in your browser settings. Doing so may affect some website functionality, but will not prevent you from using the site to contact us.
“Do Not Track” signals.
Some browsers send a “Do Not Track” (DNT) signal to websites. Because there is no universally accepted standard for DNT, we do not currently respond differently to DNT signals. We do, however, limit our use of tracking technologies as described above.
4. How we use your information
We use the information we collect for the following purposes only:
- To respond to inquiries submitted via the website contact form, email, or phone.
- To schedule and conduct a free 10-minute call.
- To operate, maintain, and improve the website.
- To comply with legal obligations, including any applicable recordkeeping requirements.
- To protect against fraud, abuse, or misuse of the website.
We do not use website information for marketing, profiling, advertising, or any use unrelated to responding to your inquiry — without your prior consent.
5. How we share your information
We do not sell your personal information. We do not share your personal information with third parties for their own marketing or advertising purposes.
We may share limited information with service providers we rely on to run the practice and the website, each of which has agreed to contractual confidentiality and (where PHI is involved) to a HIPAA Business Associate Agreement. Categories of service providers include:
- Website hosting and maintenance (for delivery of this site).
- Patient portal / electronic health record (IntakeQ/PracticeQ or equivalent, once a clinical relationship is formed).
- Telehealth platform (HIPAA-compliant video provider, for telehealth visits only).
- Payment processor (for collecting visit fees).
- Email & calendar providers (for non-PHI administrative communication and scheduling).
- Analytics provider (for aggregate site usage data, as described above).
We may also disclose information when required by law — for example, in response to a valid subpoena, court order, or as otherwise required by applicable federal, Arizona, or Nevada law — or to protect the rights, safety, or property of the practice, our patients, or others.
6. How we protect your information
We use reasonable administrative, technical, and physical safeguards to protect the information we collect. These include:
- Transport-layer encryption (HTTPS / TLS) for all data submitted through this website.
- Access controls limiting who can view practice data.
- HIPAA Business Associate Agreements with vendors handling PHI.
- Reasonable physical security for the practice office and any devices used.
No system is perfectly secure. We cannot guarantee the security of information transmitted over the internet, and email, specifically, should not be used for sensitive clinical information.
7. How long we keep your information
Website inquiry data is kept only as long as necessary to respond to you and to maintain a reasonable record of communications. Clinical records, once a care relationship exists, are retained according to Arizona or Nevada record-retention law — generally a minimum of seven (7) years after the last date of service for adult records, and seven (7) years after the patient reaches age 18 for minor records, with specific requirements set by the Arizona and Nevada Boards of Nursing and federal HIPAA rules.
8. Your rights under federal law
Rights relating to clinical records (HIPAA)
If you are a patient of the practice, you have extensive rights regarding your clinical records under HIPAA, including the right to inspect and obtain a copy of your records, to request amendments, to request restrictions on use and disclosure, to receive an accounting of disclosures, and to receive confidential communications. These rights are detailed in the Notice of Privacy Practices.
To exercise any of these rights, email info@itsmentalwellness.com with the subject line “Privacy Request.” We will respond within a reasonable timeframe, and in no event more than 45 days.
Nevada residents
Nevada residents may direct us not to sell their personal information (which we do not sell) by emailing the address above.
9. Children’s privacy
This website is not directed to children under 18, and we do not knowingly collect personal information directly from children under 18 through this site. Clinical services for minors are provided through parents/guardians and under clinical consent processes, separate from this website.
10. Third-party links
This website may link to third-party websites — for example, to the 988 Suicide & Crisis Lifeline, the Arizona and Nevada Boards of Nursing, or government resources. We are not responsible for the content or privacy practices of linked sites. Please review their privacy policies when you visit them.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll post the updated version here with a new effective date. Significant changes that affect how we handle your information will be communicated prominently.
12. How to contact us
For any questions about this Privacy Policy, to exercise any of the rights described above, or to raise a concern about how the practice handles information, please reach out:
This Privacy Policy is provided in plain language for usability. It is intended to describe our practices accurately and comply with applicable state (AZ and NV) and federal laws, including relevant HIPAA provisions. This is not legal advice. If you need legal advice regarding your own privacy rights, please consult a licensed attorney.