Privacy policy

The public site collects only what you choose to send: a note through the intake form, a note through the waitlist form, an email you write us, or details you enter into a checkout flow. We do not embed advertising trackers, and we do not sell visitor data. Basic server logs (timestamp, requested URL, response code) are kept for a short rolling window for security and abuse-prevention and are not joined to anything else.

The clinical practice collects protected health information (PHI) — your clinical history, medications, prior records, and the notes Dr. Vinuela keeps about your care — only inside the clinical record, not on the public site. PHI lives in a HIPAA-aligned clinical record, is shared only as you authorize or as required by law, and is never mixed with the public site's intake or waitlist notes.

Telepsychiatry is delivered by secure video to adult patients physically located in New Jersey, per New Jersey telemedicine law. By requesting a telepsychiatry intake you acknowledge that care will be provided remotely, that the standard telemedicine limitations apply (no in-person physical exam, emergency situations routed to 911 or your nearest ER), and that written consent for telehealth is collected at or before your first visit.

Public-site notes (intake, waitlist, contact) are used only to route and reply to your request — Dr. Vinuela reads them personally. Clinical care information is used for treatment, billing, and the healthcare operations of the practice, as those terms are understood under HIPAA. Notes are not used for marketing, not added to mailing lists, and not shared with third-party advertising networks.

We do not sell your information. We share it only as needed to run the practice: a HIPAA-aligned video platform for visits, a HIPAA-aligned clinical record, a payment processor that handles the card transaction without seeing clinical details, and — when you ask for one — a superbill you can submit to your insurer for out-of-network reimbursement. We share PHI otherwise only with your written authorization, or as required by law.

The public site does not store PHI. Intake and waitlist notes are held only as long as is needed to reply and follow up, and are then archived or deleted. Clinical records are retained according to New Jersey medical-record retention requirements. Records may be disclosed to the Secretary of Health and Human Services for HIPAA compliance review as needed.

You can ask for a copy of your clinical record, ask for a correction, ask for a list of disclosures, ask for a restriction on a disclosure, ask to be contacted at a specific address or phone number, or file a complaint — see the HIPAA Notice of Privacy Practices for the full list and how to exercise each right. Public-site notes can be deleted on request; just write.

Questions about this policy or MindGuyMD's privacy practices — write to mindguymd@polsia.app. The full HIPAA Notice of Privacy Practices is posted at /hipaa.