PRIVACY POLICY

Last Updated: October 7, 2026

Beyond Mind, TMS & Ketamine Treatment Center (“Practice,” “we,” “us,” or “our”) respects

your privacy and is committed to protecting the personal information and health information

entrusted to us.

This Privacy Policy describes how we collect, use, disclose, and protect information when you

visit or use our website, beyondmindmd.com (the “Website”), contact us electronically,

request an appointment, or otherwise interact with our online services.

This Privacy Policy applies to information collected through the Website and related online

services. It does not replace our Notice of Privacy Practices, which describes how we may use

and disclose protected health information in connection with healthcare services.

1. INFORMATION WE COLLECT

Depending on how you interact with our Website, we may collect the following categories of

information.

A. Information You Provide Directly

You may voluntarily provide information when you:

  •  Request an appointment;

  •  Complete a contact form;

  •  Request information about our services;

  •  Register for or access a patient portal;

  •  Communicate with the Practice;

  •  Complete an online intake or registration form;

  •  Subscribe to communications;

  •  Make a payment;

  •  Complete surveys or other forms; or

  •  Otherwise communicate with us.

This information may include:

  •  Name;

  •  Date of birth;

  •  Address;

  •  Telephone number;

  •  Email address;

  •  Insurance information;

  •  Appointment information;

  •  Billing information;

  •  Information regarding your healthcare needs;

  •  Information you voluntarily include in communications; and

  •  Other information necessary to provide or coordinate services.

B. Health Information

If you become a patient of the Practice, we may collect protected health information (“PHI”) as

permitted by applicable federal and state law, including information relating to your:

  •  Medical history;

  •  Psychiatric history;

  •  Mental health;

  •  Medications;

  •  Diagnoses;

  •  Treatment;

  •  Symptoms;

  •  Laboratory or diagnostic information;

  •  Insurance and billing; and

  •  Communications with healthcare providers.

PHI is handled in accordance with applicable privacy laws, including the Health Insurance

Portability and Accountability Act (“HIPAA”), where applicable, and applicable California law.

Our Notice of Privacy Practices provides additional information about how we use and disclose

PHI.

2. INFORMATION COLLECTED AUTOMATICALLY

When you visit our Website, certain information may be collected automatically.

This may include:

  •  IP address;

  •  Browser type;

  •  Device type;

  •  Operating system;

  •  General geographic information;

  •  Pages visited;

  •  Time spent on pages;

  •  Referring website;

  •  Date and time of visits;

  •  Website interactions; and

  •  Technical information concerning your device and connection.

This information may be collected through cookies, pixels, analytics services, server logs, and

similar technologies.

3. COOKIES AND TRACKING TECHNOLOGIES

Our Website may use cookies and similar technologies that are necessary to operate, secure,

and improve the functionality of the Website.

Depending on the services and technologies implemented on the Website, we may use limited

analytics or similar technologies to understand Website performance and usage. We seek to

configure these technologies in a manner consistent with applicable privacy laws.

We do not intend to use cookies or tracking technologies to collect or disclose protected health

information for advertising purposes.

We do not knowingly use tracking technologies on our Website for purposes of identifying

visitors as patients or determining an individual’s diagnosis, treatment, or medical condition.

Where required by applicable law, we will provide appropriate notice and obtain consent

before using non-essential cookies or tracking technologies.

You may be able to control or disable certain cookies through your browser settings or other

privacy controls. Certain Website functions may not operate properly if essential cookies are

disabled.

For additional information regarding cookies, analytics, third-party services, and your privacy

choices, please contact us using the information provided in this Privacy Policy.

Where required by applicable law, we will obtain appropriate consent before using certain non-

essential cookies or tracking technologies.

4. HOW WE USE INFORMATION

We may use information collected through the Website to:

  •  Respond to inquiries;

  •  Schedule or manage appointments;

  •  Provide requested services;

  •  Communicate with patients;

  •  Provide telehealth services;

  •  Process payments;

  •  Verify insurance information;

  •  Improve our Website and services;

  •  Maintain Website security;

  •  Prevent fraud or misuse;

  •  Comply with legal and regulatory requirements;

  •  Communicate administrative information;

  •  Send requested information or educational materials; and

  •  Carry out other purposes permitted by applicable law.

Health information used in connection with healthcare services is handled in accordance with

applicable privacy laws and our Notice of Privacy Practices.

5. HOW WE MAY SHARE INFORMATION

We do not sell your protected health information.

We may disclose information when permitted or required by law, including to:

Healthcare Providers

We may share information with healthcare professionals involved in your care when permitted

by applicable law.

Service Providers

We may use third-party companies to assist with Website hosting, appointment scheduling,

electronic communications, payment processing, information technology, analytics, security,

and other administrative functions.

Where required, appropriate contractual protections may be implemented.

Insurance Companies

Information may be provided to insurance companies or other healthcare payers when

necessary for billing, payment, claims processing, utilization review, or other permitted

healthcare operations.

Legal and Regulatory Authorities

We may disclose information when required by law, court order, subpoena, governmental

request, or other legal process, or when otherwise permitted or required by applicable law.

Business Transactions

Information may be disclosed as part of a merger, acquisition, sale, restructuring, financing, or

similar transaction, subject to applicable privacy requirements.

6. PROTECTED HEALTH INFORMATION AND HIPAA

If the Practice is a HIPAA-covered entity, protected health information is subject to federal

HIPAA protections and applicable state privacy laws.

HIPAA provides patients with certain rights concerning their protected health information.

These rights are described in greater detail in our Notice of Privacy Practices.

If you are a patient and have questions about the privacy of your medical information, please

contact our Privacy Officer using the contact information below.

7. CALIFORNIA PRIVACY RIGHTS

California residents may have additional privacy rights under applicable California law.

Depending on the circumstances and whether a particular law applies to the Practice, these

rights may include rights relating to:

  •  Access to certain personal information;

  •  Correction of inaccurate personal information;

  •  Deletion of certain personal information;

  •  Information regarding categories of personal information collected and used;

  •  Information regarding sources of personal information;

  •  Information regarding purposes for collecting or using personal information; and

  •  Other rights provided by applicable California law.

Certain healthcare information may be subject to specific exemptions or separate privacy

requirements under applicable law, including HIPAA and California medical privacy laws.

Accordingly, not all rights available under general consumer privacy laws necessarily apply to

protected health information or information maintained as part of a patient’s medical record.

To exercise a privacy right that applies to you, contact us using the information provided below.

We will verify requests as required by law before providing access to or making changes to

certain information.

8. SENSITIVE INFORMATION

Psychiatric and mental-health information can be particularly sensitive.

Please use caution when submitting information through general Website contact forms or

ordinary email.

Unless specifically instructed by the Practice, do not submit highly sensitive medical

information, emergency information, or detailed psychiatric information through a general

contact form.

Where available, patients should use the Practice’s secure patient portal or other designated

secure communication method for sensitive information.

9. EMAIL AND TEXT MESSAGES

If you provide your telephone number or email address, we may use it to communicate with

you regarding appointments, administrative matters, requested information, billing, or other

services.

Text-message communications may be subject to your mobile carrier’s fees and policies.

Electronic communications may not always be completely secure.

You should not use ordinary email or text messaging to communicate an emergency or other

time-sensitive medical issue.

You may opt out of certain non-essential communications by following the instructions

provided in the communication or contacting the Practice.

Opting out of certain communications does not necessarily prevent us from sending important

administrative or legally required communications.

10. TELEHEALTH

If you receive telehealth services, information transmitted during the telehealth encounter may

include protected health information.

Telehealth communications are handled in accordance with applicable privacy and security

requirements.

Patients are responsible for participating in telehealth appointments from a reasonably private

location and should take reasonable steps to protect the confidentiality of their

communications.

Additional telehealth consent and privacy information may be provided before or during

treatment.

11. PATIENT PORTAL

If the Practice offers a patient portal, the portal may provide access to health information,

appointment information, billing information, secure messaging, or other services.

You are responsible for maintaining the confidentiality of your login credentials.

Please notify the Practice promptly if you believe your account credentials have been

compromised.

The patient portal may have its own privacy practices and terms of use.

12. THIRD-PARTY SERVICES

Our Website may use third-party services for functions such as:

  •  Website hosting;

  •  Appointment scheduling;

  •  Patient communication;

  •  Payment processing;

  •  Analytics;

  •  Security;

  •  Telehealth;

  •  Electronic forms;

  •  Patient portals; and

  •  Other administrative functions.

These third parties may process information on our behalf or independently, depending on the

service.

Where appropriate, we evaluate third-party services for privacy and security considerations and

enter into required agreements when applicable.

Third-party websites and services may have their own privacy policies. We encourage you to

review those policies before providing information directly to third parties.

13. ANALYTICS

We may use analytics services to understand how visitors interact with our Website.

Analytics information may include technical information such as browser type, device type,

pages visited, approximate location, and Website interactions.

We use analytics information to improve Website performance, usability, security, and

functionality.

We will take appropriate measures where required by applicable law concerning the collection

and use of information through analytics technologies.

14. MARKETING AND ADVERTISING

If we use online advertising, remarketing, social media advertising, or similar technologies,

those activities may involve the use of cookies, pixels, or other tracking technologies.

Because psychiatric and healthcare information can be highly sensitive, the Practice will use

such technologies in accordance with applicable healthcare privacy laws and applicable

restrictions concerning the use or disclosure of health information for marketing purposes.

We will not use protected health information for marketing purposes in a manner prohibited by

applicable law.

15. DATA SECURITY

We maintain reasonable administrative, technical, and physical safeguards designed to protect

information from unauthorized access, use, alteration, disclosure, or destruction.

However, no website, electronic communication system, or method of transmitting information

over the Internet can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security of information transmitted through the

Website.

16. DATA RETENTION

We retain information for as long as reasonably necessary for the purposes described in this

Privacy Policy and as required by applicable law.

Medical records and other healthcare information may be retained according to applicable

federal and California laws and Practice policies.

Different categories of information may have different retention periods.

17. CHILDREN’S PRIVACY

Our Website is not intended to knowingly collect personal information from children in

violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information

to us through the Website without appropriate authorization, please contact us.

Where healthcare services are provided to minors, additional privacy and consent rules may

apply.

18. DO NOT TRACK

Some web browsers may transmit “Do Not Track” signals.

Because there is not necessarily a uniform industry standard for responding to such signals, our

Website may not respond to every browser-based Do Not Track request.

We will comply with applicable legal requirements concerning browser privacy signals where

required.

19. SOCIAL MEDIA

The Practice may maintain social media accounts or provide links to social media platforms.

Please understand that communications through public social media platforms may not be

private.

For your privacy, do not post personal medical information, psychiatric information, or other

confidential health information on our public social media pages.

We generally will not discuss an individual’s treatment, diagnosis, or care through public social

media channels.

20. EXTERNAL LINKS

Our Website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security, content, or policies of third-party

websites.

We encourage you to review the privacy policies of external websites before providing personal

information.

21. YOUR CHOICES

Depending on the circumstances, you may have choices concerning:

  •  Cookies;

  •  Marketing communications;

  •  Text messages;

  •  Email communications;

  •  Certain analytics technologies; and

  •  Certain uses of personal information.

Healthcare-related communications that are necessary for treatment, payment, healthcare

operations, scheduling, legal compliance, or other permitted purposes may not be subject to

the same opt-out options as promotional communications.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last Updated” date at the top of this Policy.

If significant changes are made, we may provide additional notice where required or

appropriate.

We encourage you to periodically review this Privacy Policy.

23. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or the Practice’s

privacy practices, please contact:

Beyond Mind, TMS & Ketamine Treatment Center

7855 Fay Ave, Suite 200, La Jolla CA, 92037

858-203-7332 or 619-805-0007

beyondmindmd.com

For patient privacy matters, please use the secure communication method provided by the

Practice whenever possible.

24. NOTICE REGARDING MEDICAL RECORDS

This Website Privacy Policy should not be interpreted as replacing the Practice’s Notice of

Privacy Practices.

Patients have additional rights regarding their protected health information and medical

records under applicable federal and state law.

A copy of our Notice of Privacy Practices is available at: NOTICE OF PRIVACY PRACTICES