Privacy Policy
Effective Date: November 3, 2026
1. Introduction
Welcome to Shifa Health. We value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how Shifa Health collects, uses, stores, maintains, and discloses information when you visit our website, contact our team, request an appointment, or interact with our online services. Shifa Health provides personalized mental health and psychiatric care, including medication management, psychotherapy, Transcranial Magnetic Stimulation (TMS), Spravato treatment, and other evidence-based mental health services. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.2. Information We Collect
We may collect different types of information depending on how you interact with our website and services.Personal Information
When you contact us, request an appointment, or submit an inquiry, we may collect:- Full name
- Email address
- Phone number
- Mailing address
- Date of birth, where required
- Preferred appointment location
- Other information you voluntarily provide through our website forms.
Health and Medical Information
If you submit a patient referral, appointment request, or other healthcare-related information, we may collect:- Medical and mental health history
- Current medications and treatment information
- Insurance provider and policy information
- Clinical notes and supporting medical documents
- Referring healthcare provider information
- Other information necessary to coordinate or provide appropriate healthcare services.
Automatically Collected Information
When you visit our website, certain technical information may be collected automatically, including:- IP address
- Browser type and version
- Device and operating system information
- Pages visited and time spent on our website
- Referring website addresses
- Website usage and interaction data.
3. How We Use Your Information
Shifa Health may use the information collected for the following purposes:- Responding to questions and inquiries.
- Scheduling and managing appointment requests.
- Communicating with prospective and existing patients.
- Processing patient referrals and related documentation.
- Coordinating healthcare services and treatment.
- Providing information about our mental health services.
- Improving website performance and user experience.
- Maintaining website security and preventing unauthorized activity.
- Meeting applicable legal, regulatory, and healthcare obligations.
- Sending administrative communications and service-related updates.
4. Healthcare Information and HIPAA Privacy
Shifa Health recognizes the importance of protecting the confidentiality of patient health information. To the extent Shifa Health is subject to the Health Insurance Portability and Accountability Act (HIPAA), protected health information (PHI) is handled in accordance with applicable HIPAA requirements, including the HIPAA Privacy Rule and Security Rule. Patient health information may be used or disclosed for treatment, payment, healthcare operations, or other purposes permitted or required by law. Patients may have additional rights regarding their protected health information, including the right to access, request corrections to, and receive information about certain disclosures of their medical records. Please note that this website Privacy Policy does not replace Shifa Health’s separate Notice of Privacy Practices, which explains how patient medical information is used and disclosed.5. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve your browsing experience and understand how visitors interact with our website. These technologies may help us:- Remember website preferences.
- Understand visitor behavior and website traffic.
- Monitor website performance.
- Improve website functionality.
- Support website analytics and marketing activities.
6. Sharing and Disclosure of Information
Shifa Health does not sell your personal information to third parties. We may share information when necessary with:- Healthcare Professionals: Authorized healthcare providers involved in your treatment and care.
- Service Providers: Trusted third-party companies that support website hosting, communications, appointment management, analytics, and administrative operations.
- Insurance Providers: When necessary for billing, payment, or insurance-related services.
- Legal and Regulatory Authorities: When disclosure is required by law, court order, or applicable regulatory requirements.
- Authorized Representatives: Individuals or organizations you have authorized to receive relevant information, where permitted by law.
7. Data Security
We take reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include:- Secure website connections.
- Restricted access to sensitive information.
- Appropriate access controls.
- Security monitoring and maintenance.
- Confidentiality practices for authorized personnel.
8. Third-Party Websites and Services
Our website may contain links to external websites, healthcare platforms, patient portals, or other third-party services. These external platforms operate independently and may have their own privacy policies and data protection practices. Shifa Health is not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review their privacy policies before submitting personal information.9. Your Privacy Rights and Choices
Depending on applicable law and the nature of the information we maintain, you may have the right to:- Request access to your personal information.
- Request corrections to inaccurate or incomplete information.
- Request information about how your data is used or disclosed.
- Request restrictions on certain uses or disclosures of your health information, where applicable.
- Request confidential communications regarding your healthcare information.
- Withdraw consent for certain optional communications.
- Request deletion of personal information where legally permitted.