Privacy Policy

Here's the complete privacy policy as plain text you can copy and paste directly into Shopify's policy field:

PRIVACY POLICY Journey Mental Health & Wellness PLLC | journeymhw.com Effective Date: July 2026 | Last Updated: July 2026

Journey Mental Health & Wellness PLLC ("Journey MHW," "we," "us," or "our") is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (journeymhw.com) or use our services.

This Privacy Policy applies to information collected through our website. It does not apply to information collected through our clinical telehealth platform (SimplePractice), which is governed by a separate Notice of Privacy Practices provided to patients at intake, as required by the Health Insurance Portability and Accountability Act (HIPAA).

1. INFORMATION WE COLLECT

A. Information You Provide Directly

When you contact us, book an appointment, or purchase our annual care plan, we may collect:

  • Full name and date of birth
  • Email address and phone number
  • Mailing address
  • Insurance information
  • Payment information (processed securely through Shopify Payments, Affirm, and Shop Pay — we do not store full payment card numbers)
  • Messages or inquiries you send through our contact forms

B. Information Collected Automatically

When you visit journeymhw.com, we automatically collect certain technical information, including:

  • IP address and approximate location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the site
  • Referring website or search terms
  • Cookies and similar tracking technologies

C. Information from Third-Party Tools

We use the following third-party tools that may collect information about your visit:

  • Google Analytics / Google Ads — tracks website traffic, user behavior, and ad performance. Google may use this data per their own privacy policy.
  • Meta (Facebook) Pixel — tracks website visits and actions for advertising purposes on Facebook and Instagram. Meta may use this data per their own privacy policy.
  • Shopify — our website platform processes transactions and stores order information per Shopify's privacy policy.
  • Email marketing platform — if you opt in to marketing communications, your email address will be stored in our email marketing platform. You may unsubscribe at any time.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

  • To respond to inquiries and provide information about our services
  • To process appointment bookings and annual care plan purchases
  • To verify insurance eligibility and process claims
  • To communicate with you about your appointments or account
  • To send marketing communications, if you have opted in
  • To improve our website and understand how visitors use it
  • To display relevant advertisements on Google and Meta platforms
  • To comply with legal and regulatory obligations

We do not sell your personal information to third parties.

3. HIPAA AND PROTECTED HEALTH INFORMATION (PHI)

If you become a patient of Journey Mental Health & Wellness PLLC, your health information is Protected Health Information (PHI) under HIPAA. PHI collected through our clinical platform (SimplePractice) is governed by our Notice of Privacy Practices, which is provided to you at intake and available upon request.

We do not collect or transmit PHI through our public website (journeymhw.com). Do not include sensitive health information in contact forms or general email communications with us.

Please note that standard internet contact forms and email are not HIPAA-secure. If you need to communicate sensitive health information, please use the secure messaging feature within SimplePractice's patient portal after establishing care with us.

4. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how visitors use our site and improve your experience.

Types of cookies we use:

  • Essential cookies — required for basic website functionality (e.g., shopping cart, checkout)
  • Analytics cookies — Google Analytics uses these to track website traffic and user behavior
  • Advertising cookies — Google Ads and Meta Pixel use these to measure ad performance and show relevant ads
  • Functional cookies — used by Shopify to remember your preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. You may also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout and Meta ad tracking through your Meta account settings.

5. HOW WE SHARE YOUR INFORMATION

We share your information only in the following circumstances:

  • Service providers — We share information with trusted vendors (Shopify, SimplePractice, Google, Meta, payment processors) who assist us in operating our website and providing services. These providers are contractually required to protect your information.
  • Insurance companies — With your authorization, we share necessary information with your insurance carrier for billing and claims purposes.
  • Legal compliance — We may disclose information when required by law, court order, or government regulation, or to protect the safety of patients or the public.
  • Business transfers — If Journey MHW is acquired or merged with another entity, your information may be transferred as part of that transaction.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6. DATA SECURITY

We take reasonable technical and administrative measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted through journeymhw.com
  • Shopify's PCI-compliant payment processing infrastructure
  • HIPAA-compliant clinical data storage through SimplePractice
  • Limited access to personal information on a need-to-know basis

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. YOUR RIGHTS AND CHOICES

General Privacy Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information, subject to legal retention requirements
  • Opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email
  • Opt out of Google Analytics tracking via Google's opt-out tool
  • Opt out of Meta advertising via your Meta account settings

HIPAA Rights (Patients Only)

As a patient, you have additional rights under HIPAA regarding your Protected Health Information, including the right to access, amend, and request restrictions on your PHI. These rights are described in our Notice of Privacy Practices provided at intake.

8. THIRD-PARTY LINKS

Our website may contain links to third-party websites, including our booking platform (SimplePractice) and other resources. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

9. CHILDREN'S PRIVACY

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Our clinical services are available to patients aged 13 and older, with appropriate parental or guardian consent as required by applicable law. If you believe a child under 13 has provided us with personal information, please contact us immediately.

10. STATE-SPECIFIC PRIVACY RIGHTS

Texas Residents

Texas residents may have additional rights under the Texas Data Privacy and Security Act (TDPSA), including the right to access, correct, delete, and port your personal data, and to opt out of targeted advertising and the sale of personal data. To exercise these rights, please contact us using the information below.

Colorado Residents

Colorado residents have rights under the Colorado Privacy Act (CPA), including the right to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising and the sale of personal data. To exercise these rights, please contact us using the information below.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Journey Mental Health & Wellness PLLC Attn: Privacy Officer — Christopher James Spitale, PMHNP-BC Email: jamie@journeymhw.com Phone: (469) 427-3480 Website: journeymhw.com

For HIPAA-related requests regarding your Protected Health Information, please contact us through the secure messaging feature in your SimplePractice patient portal.