Privacy Policy

Effective Date: August 2025
Last Updated: August 2025

1. Introduction

The Highland Center for Mental and Behavioral Health (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or receive our mental health and behavioral health services in person or via telehealth.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not use our site or services.

2. Information We Collect

We may collect the following types of information:

Personal Information

Name, contact details (such as phone number, email address, and mailing address)
Date of birth and demographic information
Health information relevant to mental health services
Payment and billing information
Emergency contact information

Website and Technical Data

Information you submit through online contact or appointment request forms
IP address, browser type, and device information
Data collected through cookies or similar technologies (for website performance or analytics)

3. How We Use Your Information

We may use your information to:

Schedule and provide therapy and counseling services (in-person or via telehealth)
Communicate with you about appointments, billing, or clinical matters
Maintain clinical and administrative records as required by law
Improve our website, services, and user experience
Send updates or resources if you opt in to receive them
Comply with legal, ethical, and professional obligations under applicable laws, including HIPAA (Health Insurance Portability and Accountability Act)

4. How We Share Information

We do not sell or rent your personal information. We may share information in the following limited circumstances:

With licensed providers and administrative staff involved in your care
With third-party service providers who assist in operations (e.g., scheduling, payment processing, telehealth platforms, email communication, or analytics)
When required by law, court order, or to prevent harm to you or others
With your written consent or authorization, as required by HIPAA

All third-party vendors we use are expected to comply with applicable privacy and security standards.

5. Data Storage and Security

We take reasonable measures to protect your information from unauthorized access, loss, misuse, or disclosure. Electronic health records and communications are stored using secure, HIPAA-compliant systems. However, no electronic system or transmission is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

Our website may use cookies or similar technologies to enhance user experience and analyze website traffic. You can adjust your browser settings to refuse cookies, though some parts of the website may not function properly.

7. Your Rights and Choices

Depending on applicable law, you may have the right to:

Access and request a copy of your personal information
Request corrections to your information
Request restrictions on certain uses or disclosures
Withdraw consent for certain communications

Requests can be made by contacting us at the email or address listed below.

8. Telehealth Privacy

If you receive services via telehealth, we use secure, HIPAA-compliant platforms to conduct sessions. We do not record sessions unless explicitly authorized by both provider and client in writing.

9. Links to Other Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites.

10. Children’s Privacy

Our services are intended for individuals receiving mental or behavioral health care. We do not knowingly collect personal information from children under 13 without verified parental consent, as required by law.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new effective date.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: info@thehighlandhealthcenter.org
Phone: +1 (214) 489-7635

HIPAA Notice of Privacy Practices

Effective Date: October 2025
Last Updated: October 2025

This Notice describes how your medical and mental health information may be used and disclosed, and how you can access this information. Please review it carefully.

1. Our Responsibilities

The Highland Center for Mental and Behavioral Health (“we,” “our,” or “us”) is committed to protecting your privacy and the confidentiality of your health information. We are required by law to:

Maintain the privacy of your Protected Health Information (PHI)
Provide you with this Notice explaining our legal duties and privacy practices
Follow the terms of this Notice currently in effect
Notify you if a breach occurs that may compromise the privacy or security of your PHI

2. How We May Use and Disclose Your Health Information

We may use or share your health information for the following purposes:

For Treatment

To provide, coordinate, or manage your healthcare and related services. For example, sharing information with other providers involved in your care.

For Payment

To bill and collect payment for the services you receive. For example, we may share information with your insurance company to verify benefits or process claims.

For Healthcare Operations

To support the business activities of our practice, such as quality assessment, staff training, accreditation, or audits.

As Required by Law

We may disclose information when required by federal, state, or local law, such as reporting abuse, neglect, or certain communicable diseases.

To Prevent or Lessen a Serious Threat

We may disclose information if necessary to prevent or lessen a serious threat to your health or safety, or that of others.

Public Health and Safety Activities

We may share information for public health reporting, health oversight activities, or law enforcement purposes when legally required.

Business Associates

We may share information with contractors, vendors, or service providers who perform functions on our behalf (e.g., billing, scheduling, telehealth, or data management). All such associates are required by contract to protect your information.

Other Uses and Disclosures with Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice. You may revoke that authorization at any time in writing.

3. Your Rights Regarding Your Health Information

You have the following rights regarding your PHI:

Right to Access

You have the right to inspect or request a copy of your health records, with limited exceptions.

Right to Request Amendments

If you believe your record is incorrect or incomplete, you may request an amendment. We may deny the request if the information is accurate or if we did not create the record.

Right to an Accounting of Disclosures

You may request a list of certain disclosures of your PHI made in the past six years, excluding those for treatment, payment, or operations.

Right to Request Restrictions

You may ask us to limit how your PHI is used or disclosed. While we are not required to agree to all restrictions, we will comply with any restriction required by law or mutually agreed upon.

Right to Confidential Communications

You may request that we communicate with you in a specific way (for example, only by mail or phone). We will accommodate reasonable requests.

Right to a Paper or Electronic Copy of This Notice

You may request a copy of this Notice at any time, even if you agreed to receive it electronically.

4. Confidentiality of Mental Health and Psychotherapy Notes

Psychotherapy notes receive special protection under HIPAA. We will not release or disclose psychotherapy notes without your written authorization, except as required by law or in emergencies involving safety concerns.

5. Electronic Communications and Telehealth

When providing telehealth services or electronic communications, we use HIPAA-compliant platforms to ensure privacy and security. However, electronic communication (e.g., email or text) carries some inherent privacy risks.

6. Changes to This Notice

We reserve the right to change this Notice at any time. Any updates will apply to all health information we maintain and will be posted on our website.

7. Questions, Concerns, or Complaints

If you have any questions about this Notice or believe your privacy rights have been violated, you may contact us directly at:

Email: info@thehighlandhealthcenter.org
Phone: +1 (214) 489-7635

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. There will be no retaliation for filing a complaint.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Website: https://www.hhs.gov/ocr/privacy/hipaa/complaints/