HIPAA-Compliant Policy

At Bethesda Mental Health, we value your privacy and are committed to protecting the personal information you share with us. This HIPAA Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or interact with our services.

Effective Date: 01 January 2025

Bethesda Mental Health (“we,” “our,” “us”) is committed to protecting the privacy and confidentiality of your personal and health information. Although we operate outside the United States, we follow HIPAA-based best practices to safeguard all Protected Health Information (PHI) and ensure ethical, secure, and transparent handling of patient data.

This Privacy Policy explains how we collect, use, disclose, and protect your health information, as well as your rights as a patient.


1. What Information We Collect

We collect information that identifies you and relates to your health, including:

Personal Information (Identifiers)

  • Full name

  • Date of birth

  • Phone number

  • Physical address

  • Email address

  • Emergency contact details

Health Information

  • Medical history

  • Mental health history

  • Treatment plans

  • Diagnoses

  • Medications

  • Consultation notes and assessments

  • Spiritual or emotional health concerns shared voluntarily

  • Any information provided during therapy, counseling, or psychiatric sessions

Payment Information

  • Billing records

  • Insurance information (if applicable)

This combined data is considered Protected Health Information (PHI).


2. How We Use Your Information

We use your information strictly to provide safe, effective, and personalized care.

A. For Treatment

  • Developing individualized treatment plans

  • Diagnosing and managing mental health conditions

  • Coordinating care with other authorized healthcare providers

  • Providing psychotherapy, counseling, or medication management

B. For Payment Purposes

  • Generating invoices

  • Processing payments

  • Insurance claims (where applicable)

C. For Healthcare Operations

  • Quality assessment and improvement

  • Staff training and supervision

  • Internal review and compliance

  • Appointment reminders and communication

We do not use PHI for marketing without explicit written consent.


3. How We Share Your Information

We do not sell or rent your personal information.

We may share your PHI only under the following conditions:

A. With Your Consent

We share information with:

  • Other healthcare professionals involved in your care

  • Family members or caregivers only if you authorize it

B. Without Your Express Consent (as allowed by HIPAA standards)

When required or permitted by law, such as:

  • If there is risk of harm to you or others

  • Court orders, subpoenas, or legal investigations

  • Reporting abuse, neglect, or threats

  • Public health reporting

We always limit disclosures to the minimum necessary.


4. Your Rights Under HIPAA-Based Standards

Even though HIPAA is a U.S. regulation, we apply these patient rights to you:

You have the right to:

  1. Access your medical records

  2. Request corrections to inaccurate or incomplete information

  3. Request restrictions on how your PHI is used or shared

  4. Request confidential communication, e.g., “call me only via email”

  5. Receive a copy of this privacy policy

  6. Withdraw consent for non-treatment uses of your information

  7. File a complaint if you believe your privacy rights were violated

We will not penalize or refuse care to anyone who exercises these rights.


5. Data Security Measures

We employ strong administrative, technical, and physical safeguards to protect PHI.

Security measures include:

  • Password-protected systems

  • Encryption of digital records

  • Secure storage for physical records

  • Restricted access to authorized staff only

  • Regular staff training on confidentiality

  • Audit logs for access monitoring

If a data breach occurs, we will notify affected individuals promptly.


6. Data Retention

Health records are retained for the required period under Kenyan regulations or according to clinical best practices, typically 7–10 years, unless otherwise required by law.


7. Use of Digital Tools and Telehealth

If you access online forms, telehealth sessions, or digital communication:

  • We use secure communication platforms

  • We cannot guarantee the security of third-party apps you choose

  • We advise patients to use trusted devices and private networks


8. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted with a new “Effective Date.”


9. Contact Information

For questions, complaints, or requests related to your privacy, contact us:

Bethesda Mental Health
Email: hello@bethesdamh.com
Phone: (817) 753-3216 / (817) 350-4377
Address: 4101 McEwen Rd, Ste 410, Dallas, TX 75244