Privacy Policy

Effective Date: June 4, 2025

Summit Together Mental Health (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal and health information. This policy explains how we collect, use, and protect your information both through our website (www.summitmhealth.com) and during the course of providing psychiatric care. It includes our Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act (HIPAA).

What Information We Collect

We may collect the following types of information through our website:

  • Your name, email, phone number, or other contact details (via contact forms or appointment requests)

  • Browsing behavior or IP address (via analytics tools or cookies)

When you become a patient, we may also collect:

  • Health history, diagnosis, treatment plans, and medication details

  • Insurance and billing information

  • Any other information you share with us during care

How We Use Your Information

We use your information to:

  • Communicate with you about appointments or inquiries

  • Coordinate psychiatric care and follow-up services

  • Improve our website experience

  • Comply with legal, billing, and administrative obligations

We will never sell your personal or health information.

How We Protect Your Data

  • All Protected Health Information (PHI) is stored in IntakeQ, our encrypted, HIPAA-compliant electronic health record system.

  • We limit internal access to only authorized staff members.

  • We use secure email and encryption when possible to reduce risk.

  • Any third-party vendor who handles PHI on our behalf must sign a Business Associate Agreement (BAA)ensuring HIPAA compliance.

Email and Digital Communications

While we do our best to keep communications secure, please note:

  • Standard email may not be encrypted

  • You should avoid sending sensitive information via unsecured email

  • You may request secure communication alternatives at any time

HIPAA Notice of Privacy Practices

Effective Date: August 1, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Our Legal Duties

Summit Together Mental Health, pllc is required by law to protect the privacy of your protected health information (PHI), provide you with this Notice of Privacy Practices, and follow the privacy practices described in the notice currently in effect. We may revise this notice when our privacy practices materially change. The current notice will be available upon request and on our website.

How We May Use and Disclose Your Information

We may use or disclose your PHI without your separate written authorization for purposes permitted by law, including:

Treatment: To provide, coordinate, or manage your healthcare, including consultation with other healthcare professionals involved in your care.

Payment: To bill and collect payment for services, determine insurance eligibility or coverage, process claims, obtain prior authorization, and perform related activities.

Healthcare Operations: To operate the practice, improve quality of care, conduct administrative activities, train personnel as permitted by law, and perform other healthcare operations.

Appointment Reminders and Communications: We may contact you by telephone, patient portal, email, text message, or other permitted methods regarding appointments, treatment, billing, or healthcare-related information.

Required by Law: We may disclose information when required by federal, state, or local law.

Public Health: We may disclose information for certain public-health activities permitted or required by law.

Health Oversight: We may disclose information to governmental agencies for licensing, audits, investigations, inspections, or other authorized oversight activities.

Abuse, Neglect, or Domestic Violence: We may disclose information when required or permitted by law to report suspected abuse, neglect, or domestic violence.

Serious Threats to Health or Safety: We may disclose information when necessary to prevent or lessen a serious and imminent threat to health or safety, consistent with applicable law.

Judicial and Administrative Proceedings: We may disclose information in response to legally valid court orders, subpoenas, or other lawful processes as permitted by law.

Law Enforcement: We may disclose information to law-enforcement officials when legally permitted or required.

Workers' Compensation: We may disclose information as authorized by workers' compensation laws.

Organ and Tissue Donation: We may disclose information as necessary to facilitate organ, eye, or tissue donation and transplantation.

Medical Examiners and Funeral Directors: We may disclose information as permitted by law for these purposes.

Uses and Disclosures Requiring Your Authorization

Other uses or disclosures of your PHI generally require your written authorization when required by law. You may revoke an authorization in writing at any time, except to the extent the practice has already relied on the authorization. We will not sell your PHI without an authorization when an authorization is required by law.

Psychotherapy Notes

Psychotherapy notes maintained separately from the medical record generally receive additional protection under HIPAA and may require your written authorization for disclosure, except in circumstances specifically permitted by law.

Substance Use Disorder Records

Certain records relating to substance use disorder treatment may be subject to additional federal confidentiality protections under 42 CFR Part 2. Where Part 2 applies, Summit Together Mental Health, pllc will comply with the additional privacy requirements applicable to those records. Federal law provides additional protections regarding the use and disclosure of Part 2 records.

Your Privacy Rights

You generally have the following rights regarding your PHI:

Right to Inspect and Obtain Copies: You may request access to your PHI as permitted by law.

Right to Request an Amendment: You may request correction or amendment of information that you believe is inaccurate or incomplete.

Right to an Accounting of Certain Disclosures: You may request an accounting of certain disclosures of your PHI, subject to legal exceptions.

Right to Request Restrictions: You may request restrictions on certain uses or disclosures of your PHI. We are not required to agree to every requested restriction unless required by law.

Right to Confidential Communications: You may request that we communicate with you through a particular method or at a particular location. We will accommodate reasonable requests as required by law.

Right to a Paper Copy: You may request a paper copy of this notice even if you agreed to receive it electronically.

Right to Receive Notice of a Breach: You will be notified as required by law if a breach of unsecured PHI occurs.

Complaints

If you believe your privacy rights have been violated, you may contact Summit Together Mental Health, pllc. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a privacy complaint.

State Privacy Laws

Because Summit Together Mental Health, pllc provides services to patients in multiple states, certain state laws may provide additional privacy protections. We will comply with applicable federal and state privacy requirements, including requirements that provide greater protection than federal law when applicable. Mental-health information, substance-use-disorder information, reproductive-health information, HIV-related information, genetic information, and other categories of sensitive information may receive additional protection under federal or state law depending on the circumstances.

Contact Information

Summit Together Mental Health, pllc
Phone: (720) 994-4810
Website: www.summitmhealth.com

Privacy Contact: Janelle Adrienne Aguilon
Phone: (720) 994-4810

You may contact us to request a copy of this notice, ask questions about our privacy practices, or submit a privacy complaint.

We have the right to change these policies at any time. If we change our privacy policies, we will notify you of these changes immediately and update the effective date. This current policy is in effect unless stated otherwise. If the policy is changed, it will apply to all your current and past health information.