Last updated: 8/5/2026

Introduction

Growing Minds Mental Health Services (“Growing Minds,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of everyone who visits growingmindsmhs.com (the “Site”) or engages our services. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have.

Because we provide mental health services, we treat your information with the heightened care that sensitive health data deserves. Our handling of medical information is governed by the federal Health Insurance Portability and Accountability Act (HIPAA) and California’s Confidentiality of Medical Information Act (CMIA), among other laws. By using our Site or services, you agree to the practices described in this Policy.

HIPAA and Your Health Information

If you are a client, health information we create or receive in the course of providing care is Protected Health Information (PHI) under HIPAA and medical information under the CMIA. Our uses and disclosures of that information are governed by our separate Notice of Privacy Practices (NPP), which describes your rights in detail and controls over this Policy wherever PHI is concerned. You may request a copy of our Notice of Privacy Practices at any time using the contact details below.

This Privacy Policy applies to information collected through our Site and general business operations. Where a conflict exists between this Policy and our Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices governs.

Information We Collect

Information you provide directly. When you contact us, request an appointment, complete a form, or become a client, you may provide your name, email address, phone number, mailing address, date of birth, and details about your reason for reaching out. If you become a client, we may collect health information, treatment records, insurance details, and emergency contact information as part of providing care.

Information collected automatically. When you visit the Site, we may automatically collect technical information such as your IP address, browser type, device information, pages viewed, and the dates and times of your visits, through cookies and similar technologies.

Information from third parties. We may receive information from referring providers, insurers, or others involved in your care, where permitted by law and with appropriate authorization.

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and schedule appointments
  • Provide, coordinate, and manage mental health services
  • Process billing, payments, and insurance claims
  • Communicate with you about your care, appointments, and our services
  • Maintain accurate treatment and business records
  • Comply with legal, regulatory, and professional obligations
  • Improve, secure, and operate our Site

We do not sell your personal information or medical information, and we do not share your medical information for marketing purposes without your written authorization, as required by the CMIA and HIPAA.

How We Share Information

We share information only as necessary and as permitted or required by law, including:

  • With your consent or written authorization, or as directed by you
  • For treatment, payment, and healthcare operations, consistent with HIPAA and our Notice of Privacy Practices
  • With business associates and service providers (for example, scheduling, billing, or IT vendors) who are contractually bound to safeguard your information under HIPAA Business Associate Agreements where applicable
  • When required or permitted by law, such as in response to a court order or subpoena, for mandatory reporting, or where disclosure is necessary to prevent serious and imminent harm
  • In the event of a business transfer, subject to applicable privacy protections

Cookies and Tracking Technologies

Our Site may use cookies and similar technologies to operate the Site, remember your preferences, and understand how visitors use it. You can control cookies through your browser settings, though disabling them may affect Site functionality. We do not use tracking technologies that transmit your health information to third parties for advertising.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, consistent with the HIPAA Security Rule where applicable. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide services and to comply with our legal and professional recordkeeping obligations. In California, adult patient records are generally retained for a minimum period required by law, and minors’ records are retained until at least the patient reaches the age of majority plus the applicable statutory period. Records are disposed of securely once retention obligations end.

Your California Privacy Rights

Medical information (CMIA). California’s Confidentiality of Medical Information Act gives you rights regarding your medical information, including the right to access and request copies of your records and to limit certain disclosures. These rights are described more fully in our Notice of Privacy Practices.

Personal information (CCPA/CPRA). To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to personal information we collect through the Site that is not otherwise covered by HIPAA or the CMIA, California residents may have the right to:

  • Know what personal information we collect, use, and disclose
  • Request access to or a copy of that information
  • Request correction of inaccurate information
  • Request deletion, subject to our legal recordkeeping obligations
  • Opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under the CPRA)
  • Limit the use of sensitive personal information
  • Not be discriminated against for exercising these rights

Note that medical information governed by HIPAA and the CMIA is exempt from the CCPA/CPRA, so those requests are handled under HIPAA and the CMIA instead. To exercise any right, contact us using the details below. We will verify your identity before responding and will not discriminate against you for making a request.

Marketing Communications

If you receive marketing emails from us, you may opt out at any time using the unsubscribe link or by contacting us. Opting out of marketing does not affect communications necessary for your care.

Children’s Privacy

Where we provide services to minors, we handle their information in accordance with applicable law and with consent from a parent or legal guardian, except where a minor may lawfully consent to their own care under California law. Our Site is not directed at children for the purpose of collecting information without such consent.

Third-Party Links

Our Site may link to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent changes. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or would like a copy of our Notice of Privacy Practices, please contact us:

Growing Minds Mental Health Services

21771 Stevens Creek Blvd Suite 200A Cupertino, CA 95014

Email: admin@growingmindsmhs.com

Phone: 650-727-1523