PRIVACY POLICY
Effective Date: August 20, 2026
Last Updated: August 20, 2026
Root & Rise Brain Health ("Root & Rise Brain Health") respects your privacy and is committed to protecting the personal information you provide when using this website.
This Privacy Policy explains how information may be collected, used, disclosed, stored, and protected when you visit rootandrisebrainhealth.com, request information, submit an online form, request or schedule a consultation, communicate with Root & Rise Brain Health, or access links to services used in connection with the practice.
This Privacy Policy applies to website and general business information. Protected health information ("PHI") created, received, maintained, or transmitted in connection with health care services is subject to the Root & Rise Brain Health Notice of Privacy Practices and applicable federal and state health privacy laws.
SCOPE
Root & Rise Brain Health provides adult psychiatric services to eligible patients located in California and Arizona.
This Privacy Policy applies to information collected through the Root & Rise Brain Health website and associated online services.
Clinical care, medical records, and protected health information are governed by applicable federal law, including the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), and applicable California and Arizona laws.
When state law provides greater privacy protection than federal law, Root & Rise Brain Health will comply with the applicable more protective requirement.
INFORMATION YOU MAY PROVIDE
Depending on how you use the website, you may voluntarily provide information such as:
Name
Email address
Telephone number
Information submitted through a contact, consultation, or appointment-request form
Information necessary to respond to an inquiry or facilitate scheduling
Other information you voluntarily choose to provide
Please avoid submitting detailed medical information, highly sensitive health information, or urgent clinical concerns through ordinary website contact forms or unsecured email unless specifically instructed to do so through a secure method.
Once you become a patient, clinical information and protected health information should generally be communicated through the secure patient portal or other approved secure systems.
INFORMATION COLLECTED AUTOMATICALLY
When you visit the website, certain technical information may be collected automatically by the website platform or related technology providers.
This information may include:
Internet Protocol (IP) address
Browser type and version
Device type
Operating system
Date and time of access
Pages viewed
Referring website or source
Approximate geographic information
Website interaction and performance information
This information may be used to operate, secure, maintain, and improve the website and to understand general website usage.
HOW INFORMATION MAY BE USED
Root & Rise Brain Health may use information collected through the website to:
Respond to inquiries
Provide information about services
Process consultation or appointment requests
Communicate administrative information
Operate and maintain the website
Improve website functionality and user experience
Protect the security and integrity of the website and related systems
Comply with legal, regulatory, licensing, billing, and professional obligations
Connect individuals with secure patient-facing services when appropriate
Root & Rise Brain Health does not use website information to make automated psychiatric diagnoses or treatment decisions.
PROTECTED HEALTH INFORMATION
Information that qualifies as protected health information under HIPAA is handled according to the Root & Rise Brain Health Notice of Privacy Practices and applicable federal and state law.
The Notice of Privacy Practices explains how protected health information may be used and disclosed, your rights regarding your health information, and the privacy responsibilities of Root & Rise Brain Health.
The current Notice of Privacy Practices is available through the Root & Rise Brain Health website and may also be requested directly from the practice.
CALIFORNIA AND ARIZONA PRIVACY REQUIREMENTS
Root & Rise Brain Health provides services to patients located in California and Arizona and complies with applicable federal and state privacy requirements.
California and Arizona may provide privacy protections that are more restrictive than HIPAA for certain categories of health or mental health information.
When applicable law provides greater protection than HIPAA, Root & Rise Brain Health will follow the more protective requirement.
Nothing in this Privacy Policy is intended to reduce any privacy right provided under applicable federal, California, or Arizona law.
MENTAL HEALTH INFORMATION
Because Root & Rise Brain Health provides psychiatric services, information collected in connection with clinical care may include sensitive mental health information.
Mental health records and related information are handled in accordance with HIPAA and applicable California and Arizona confidentiality laws.
Root & Rise Brain Health will not disclose specially protected mental health information except as permitted or required by applicable law or pursuant to an appropriate authorization when authorization is required.
SUBSTANCE USE DISORDER INFORMATION
Certain substance use disorder information may receive additional protection under federal law, including 42 CFR Part 2, when those protections apply.
Root & Rise Brain Health will handle such information in accordance with applicable federal and state requirements.
TELEHEALTH
Root & Rise Brain Health provides telehealth psychiatric services.
Telehealth services are provided according to the laws and professional requirements applicable to the state in which the patient is physically located at the time of the encounter.
Privacy and confidentiality protections applicable to health care also apply to telehealth.
Patients are encouraged to participate in telehealth appointments from a private location and to use secure devices and internet connections when reasonably possible.
ELECTRONIC COMMUNICATIONS
Email, standard text messaging, website contact forms, and other ordinary electronic communications may not provide the same level of privacy protection as a secure patient portal.
Root & Rise Brain Health may use electronic communications for administrative purposes such as appointment information, reminders, scheduling, and general practice communications.
Patients should use the secure patient portal for clinical communication whenever directed to do so.
Electronic communication should not be used for emergencies or urgent psychiatric concerns.
THIRD-PARTY SERVICES
Root & Rise Brain Health may use third-party service providers to operate the website and practice.
These services may include website hosting, business email, electronic health record systems, patient portals, scheduling systems, payment processing, insurance or billing platforms, telehealth technology, electronic prescribing services, laboratory services, and other professional technology vendors.
Examples may include services such as Squarespace, Google Workspace, PracticeQ, Headway, and other vendors used by Root & Rise Brain Health.
The information available to a third-party service depends on the service being provided.
When a third-party vendor receives protected health information on behalf of Root & Rise Brain Health and is required to comply with HIPAA as a business associate, appropriate contractual safeguards will be used as required by law.
Third-party websites and services may also maintain their own privacy policies and terms of use.
COOKIES AND WEBSITE ANALYTICS
The website or its service providers may use cookies and similar technologies necessary for website functionality, security, performance, and analytics.
Cookies are small data files that may be stored on your device.
Depending on your browser and device settings, you may be able to limit or block certain cookies.
Root & Rise Brain Health does not intend to use website tracking technologies to make clinical decisions or to sell patient health information.
ADVERTISING AND SALE OF INFORMATION
Root & Rise Brain Health does not sell protected health information.
Root & Rise Brain Health does not sell personal information collected through the website for monetary compensation.
Root & Rise Brain Health will not use or disclose protected health information for marketing or other purposes requiring patient authorization unless the required authorization has been obtained.
INFORMATION SECURITY
Root & Rise Brain Health uses reasonable administrative, technical, and physical safeguards designed to protect personal information and protected health information.
Safeguards may include access controls, password protections, encryption where appropriate, secure vendors, and other security practices.
No website, internet transmission, electronic communication system, or data-storage system can be guaranteed to be completely secure.
LINKS TO THIRD-PARTY WEBSITES
The Root & Rise Brain Health website may contain links to third-party websites, resources, scheduling platforms, patient portals, educational materials, or other services.
Root & Rise Brain Health is not responsible for the privacy practices, security, accuracy, or content of independent third-party websites.
You should review the privacy policies and terms of those services before providing personal information.
CHILDREN'S PRIVACY
Root & Rise Brain Health provides psychiatric services to adults.
The website and clinical services are not intended for children under 18.
Root & Rise Brain Health does not knowingly use the website to solicit personal information from children for the purpose of establishing psychiatric care.
YOUR PRIVACY RIGHTS
Depending on the type of information involved and applicable law, you may have rights regarding your personal information or protected health information.
HIPAA-related rights regarding clinical information are described in the Root & Rise Brain Health Notice of Privacy Practices.
These rights may include, as applicable, the ability to:
Request access to certain health information
Request an amendment to certain health information
Request confidential communications
Request certain restrictions on uses or disclosures
Request an accounting of certain disclosures
Obtain a copy of the Notice of Privacy Practices
Submit a privacy complaint
A request to amend a health record does not require Root & Rise Brain Health to alter accurate clinical documentation, professional assessments, diagnoses, clinical judgments, or treatment recommendations solely because a patient disagrees with them.
DATA RETENTION
Personal information and clinical information will be retained for the periods required by applicable federal and state law, professional standards, contractual requirements, and legitimate business purposes.
Clinical records are retained according to applicable health care record-retention requirements.
CHANGES TO THIS PRIVACY POLICY
Root & Rise Brain Health may revise this Privacy Policy as laws, technology, business practices, or services change.
When material changes are made, the updated Privacy Policy will be posted on the website and the "Last Updated" date will be revised.
The version posted on the website is the current version.
NOTICE OF PRIVACY PRACTICES
This Website Privacy Policy is separate from the Root & Rise Brain Health Notice of Privacy Practices.
The Notice of Privacy Practices governs the use and disclosure of protected health information associated with health care services and explains your HIPAA and other applicable privacy rights.
The Notice of Privacy Practices is available on the Root & Rise Brain Health website and upon request.
CONTACT INFORMATION
Questions regarding this Privacy Policy or the privacy practices of Root & Rise Brain Health may be directed to:
Root & Rise Brain Health
Privacy Officer: Jill Mobley, PMHNP-BC
Phone: (480) 256-2867
Email: jill@rootandrisebrainhealth.com
Website: rootandrisebrainhealth.com
Individuals who believe their HIPAA privacy rights have been violated may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.
Root & Rise Brain Health will not retaliate against an individual for exercising a privacy right or filing a privacy complaint.