Privacy Policies
PRIVACY POLICY AND NOTICE OF PRIVACY PRACTICES
Last updated: February 25, 2026
This document has two parts:
PART A applies to our patients and describes how we may use and disclose Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
PART B applies to all visitors and describes how we collect and use information through our website, including cookies and advertising/analytics tags.
If you have questions, contact:
New Chapter TMS
140 S Arthur St, Suite 506, Spokane, WA 99202
Phone: (509) 934-0245
Email: admin@newchaptertms.org
IMPORTANT: If you are experiencing a medical or mental health emergency, do not use our website or email. Call 911 or go to the nearest emergency room. In the U.S., you can also call or text 988 for the Suicide & Crisis Lifeline.
PART A — HIPAA NOTICE OF PRIVACY PRACTICES (NPP)
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Responsibilities
We are required by law to:
• Maintain the privacy and security of your PHI.
• Provide you with this Notice of our legal duties and privacy practices.
• Notify you if a breach occurs that may have compromised the privacy or security of your information.
• Follow the terms of the Notice currently in effect.
We will not use or share your PHI other than as described in this Notice unless you tell us we can in writing, unless otherwise permitted or required by law.
We have the right to change our privacy practices and the terms of this Notice. If we make changes, the new Notice will apply to all PHI we maintain. The updated Notice will be available on our website and upon request.
Your Rights
When it comes to your PHI, you have certain rights. Subject to limited exceptions, you may:
• Get an electronic or paper copy of your medical record.
• Ask us to correct (amend) your medical record.
• Request confidential communications (for example, ask us to contact you at a different phone number, address, or email).
• Ask us to restrict certain uses and disclosures (we are not required to agree in all cases).
• Get a list (accounting) of certain disclosures.
• Get a paper copy of this Notice.
• Choose someone to act for you (personal representative) such as a medical power of attorney, subject to applicable law.
To exercise any of these rights, contact us using the information above.
How We May Use and Disclose Your PHI Without Special Permission
HIPAA allows us to use and disclose your PHI in certain ways without asking you for a separate written authorization in many situations, including for:
1) Treatment
We may use and share your PHI to provide, coordinate, or manage your health care and related services. For example, we may share information with other health care providers involved in your care.
2) Payment
We may use and share your PHI to bill and collect payment from health plans or other entities. For example, we may provide information to your health insurance plan to support coverage and payment.
3) Health Care Operations
We may use and share your PHI to run our practice, improve your care, and contact you when necessary. For example, we may use information for quality assessment, staff training, licensing/credentialing, and auditing.
Other Uses and Disclosures That May Be Allowed or Required
We may also use or share PHI as permitted or required by law, such as for:
• Public health and safety activities.
• Health oversight activities (audits, investigations, inspections, licensing).
• Reporting abuse, neglect, or domestic violence when required or permitted by law.
• Responding to a court order or certain lawful requests.
• Law enforcement purposes in limited circumstances.
• To prevent or lessen a serious and imminent threat to health or safety (as permitted by law).
Special Protections for Certain Mental Health Information
Most mental health information is treated like other PHI under HIPAA. However, “psychotherapy notes” (as defined by HIPAA) receive additional protections and generally require your written authorization for most uses and disclosures, with limited exceptions.
Uses and Disclosures That Require Your Written Authorization
We will ask for your written authorization before using or disclosing your PHI for certain purposes, including:
• Most marketing uses of PHI.
• Any sale of PHI (if ever applicable).
• Most uses and disclosures of psychotherapy notes.
You may revoke an authorization at any time in writing, but it will not apply to actions already taken based on your authorization.
Substance Use Disorder (SUD) Records (42 CFR Part 2) — Only If Applicable
Some organizations are subject to special federal confidentiality rules for certain substance use disorder (SUD) treatment records under 42 CFR Part 2. If New Chapter TMS is subject to 42 CFR Part 2 for specific records, additional protections and notices may apply to those records, and we will provide any required Part 2 notice.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above and/or file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
WASHINGTON CONSUMER HEALTH DATA PRIVACY POLICY (RCW 19.373)
This section applies to “consumer health data” as defined by Washington’s My Health My Data Act.
Categories of consumer health data we collect and why
Depending on how you use our website, we may collect consumer health data such as:
• Information you submit that relates to mental health services (for example, screening tool responses or information you enter when requesting care).
• Inferences about interest in health services based on pages you visit on our website (for example, viewing pages about depression, anxiety, TMS, or teen mental health services).
We use this information to provide requested services (such as responding to an inquiry), to operate the website, and—if you consent—for analytics and advertising measurement.
Sources of consumer health data
We collect consumer health data from:
• You (when you submit forms or complete screening tools), and
• Your device/browser (via cookies and similar technologies, where enabled and permitted).
Categories of consumer health data we share
We may share consumer health data:
• With service providers who help us operate our website and respond to requests, and
• With advertising/analytics partners only if you consent to marketing/analytics cookies, and only for measurement and advertising purposes described in this policy.
Third parties / affiliates with whom we share
We may share consumer health data with categories of third parties such as:
• Website hosting and website service providers
• Analytics providers
• Advertising platforms and ad measurement partners
We do not share consumer health data with affiliates except as specifically listed in this policy. (If we have affiliates, we will list them here.)
Your Washington consumer health data rights
Washington residents have rights to:
• Confirm/access consumer health data and receive certain lists of third parties,
• Withdraw consent for collection/sharing,
• Request deletion, and
• Appeal certain decisions.
To exercise these rights, email admin@newchaptertms.org with the subject line “Washington Consumer Health Data Request,” or call (509) 934-0245.
Minors: We follow applicable federal and Washington laws regarding minors’ consent to care and confidentiality. In some circumstances, a minor may have rights to consent to care and to control access to certain information. We will handle requests from parents/guardians and minors consistent with applicable law.
We will respond to Washington consumer health data requests consistent with Washington law. If you request deletion, we will delete consumer health data from our records and take steps required by Washington law to notify relevant processors and third parties to delete the data we previously shared, subject to applicable exceptions.
Consent
Where required, we obtain your opt-in consent before collecting consumer health data and separate opt-in consent before sharing consumer health data, except where collection/sharing is necessary to provide a product or service you request or as otherwise permitted by law. You may withdraw consent at any time for future collection/sharing.
Geofencing
We do not implement geofences around our physical clinic location for the purpose of identifying or tracking consumers seeking health care services or for sending ads or messages related to consumer health data.
PART B — WEBSITE AND MARKETING PRIVACY (WIX, COOKIES, TAGS, PIXELS)
This section applies to information collected through our website and online services, including when you:
• Visit our site pages
• Use website forms
• Request an appointment or consultation
• Use screening/self-assessment tools we make available online
Information We Collect Through the Website
Depending on how you interact with the website, we may collect:
• Contact information you submit (for example, name, email, phone number).
• Information you submit through forms or screening tools (which may include health-related information).
• Technical and usage information (for example, IP address, device identifiers, browser type, pages viewed, approximate location derived from IP, referring page, and timestamps).
• Cookie and tracking information as described below.
Cookies and Similar Technologies
Our website is built using Wix. Wix and third-party services we use may place cookies or similar technologies on your browser or device.
We use the following categories of cookies/trackers (where enabled):
• Strictly necessary: required for basic site functions.
• Analytics/performance: helps us understand website usage and improve the site.
• Marketing/advertising: helps us measure advertising performance, build audiences, and show ads to people who may be interested in our services.
Advertising and Analytics Tags We Use
We use (or expect to use) some combination of:
• Google tags (for analytics and/or advertising measurement)
• Microsoft/Bing advertising tags (UET)
• Meta Pixel (Facebook/Instagram ad measurement and remarketing)
These technologies may collect information about your interactions with our website and may associate those interactions with identifiers in your browser or device.
Remarketing and Audience Advertising
We may use advertising services such as Google Ads, Microsoft Advertising, Meta (Facebook/Instagram), and other advertising or programmatic platforms to:
-
Measure advertising performance
-
Deliver ads to individuals who have previously visited our Website
-
Build advertising audiences based on Website activity
-
Deliver ads across devices
These platforms may use cookies, device identifiers, or similar technologies to show you advertisements on other websites or platforms.
We may also use hashed identifiers (such as email addresses, if provided with consent) to create matched or lookalike audiences for advertising purposes, in compliance with applicable law.
We do not upload Protected Health Information (PHI) to advertising platforms.
IMPORTANT HIPAA NOTE ABOUT TRACKERS
We do not intend to disclose PHI to advertising platforms through website tracking technologies. Cookie banners and website disclosures are not a substitute for HIPAA authorizations. We use reasonable efforts to configure and place tags to reduce the chance that health information you submit (or appointment/screener information) is shared with advertising or analytics vendors.
In general, marketing/advertising tags should not be present on pages where you enter sensitive health information or schedule care. However, no web tracking implementation is perfect. If you believe a web technology disclosed your information improperly, contact us.
Advertising Trackers and Sensitive Pages
We use reasonable efforts to configure tracking technologies to avoid transmitting detailed health intake information or Protected Health Information (PHI) to advertising or analytics platforms.
Advertising or marketing trackers are not intended to be active on authenticated patient portals or pages used exclusively for submission of detailed clinical intake information.
However, interactions with general informational pages about mental health conditions may still generate technical data (such as IP address or device identifiers) that advertising platforms process under their own privacy policies.
Your Choices
Cookie banner:
• When you visit our site, you may be offered cookie choices. You can accept or decline non-essential cookies and you can change your preferences later (where supported).
Browser controls:
• You can also control cookies through your browser settings, though blocking some cookies may affect site functionality.
Opt-outs:
• Advertising platforms may allow you to adjust ad preferences through their own settings.
Adding New Tracking Tools
We may add or change analytics and advertising tools as our marketing needs evolve. If we do, we will update this Privacy Policy, and where required, we will request consent before enabling new non-essential tracking.
How We Share Website Information
We may share website information with:
• Service providers that help us operate the website and business (for example, hosting, IT support, form and scheduling tools).
• Advertising and analytics partners when you permit marketing/analytics cookies (for example, Google, Microsoft, and Meta).
We do not sell your PHI. If we ever “sell” personal information as that term is defined under applicable law, we will provide any required notices and choices.
WASHINGTON CONSUMER HEALTH DATA (MY HEALTH MY DATA ACT)
Under Washington’s My Health My Data Act (MHMDA), certain information collected through websites may qualify as “consumer health data” if it identifies or is reasonably linkable to a consumer and relates to physical or mental health conditions.
What May Qualify as Consumer Health Data
Depending on how you interact with our Website, consumer health data may include:
-
Information you enter into screening tools related to mental health conditions
-
Appointment request information indicating a mental health service interest
-
Technical data associated with pages that relate to specific health conditions
How We Use Consumer Health Data
We use consumer health data to:
-
Provide requested services or respond to inquiries
-
Operate and improve our Website
-
Maintain security
-
Comply with legal obligations
We do not sell consumer health data.
Your Rights Under Washington Law
If you are a Washington resident, you may have the right to:
-
Confirm whether we are collecting consumer health data about you
-
Access such data
-
Withdraw consent for collection or sharing
-
Request deletion of consumer health data
-
Appeal our decision regarding a privacy request
To exercise these rights, contact us at:
admin@newchaptertms.org
We will respond as required by applicable law.
CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Your Rights May Include:
-
The right to know what personal information we collect, use, disclose, or share
-
The right to request deletion of personal information
-
The right to correct inaccurate personal information
-
The right to opt out of the “sale” or “sharing” of personal information
-
The right to limit the use of sensitive personal information (where applicable)
-
The right not to receive discriminatory treatment for exercising privacy rights
Sale or Sharing of Personal Information
We do not sell personal information for monetary compensation. However, certain website tracking technologies (such as advertising cookies or pixels) may be considered “sharing” under California law when used for cross-context behavioral advertising.
You may opt out of such sharing by:
-
Using our cookie preference tools (where available)
-
Adjusting your browser settings
-
Contacting us at admin@newchaptertms.org
Global Privacy Control (GPC)
Where required by law, we will process Global Privacy Control (GPC) signals as requests to opt out of sale or sharing of personal information.
To submit a California privacy request, contact:
admin@newchaptertms.org
Data Security
We use administrative, technical, and physical safeguards designed to protect information. No website or internet transmission is 100% secure.
Retention
We retain website information as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required by law or for legitimate operational needs.
Children and Minors
Our website is not directed to children under 13. If you are 13–17, please use the website with a parent or guardian. If you submit information on behalf of a minor, you represent that you have the authority to do so, and you agree to provide accurate information.
INTERNATIONAL VISITORS
Our Website is operated in the United States and is intended for individuals located in the United States.
If you access the Website from outside the United States, you understand that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdiction, you may have rights under applicable data protection laws, including rights of access, correction, deletion, restriction, objection, and data portability. To exercise such rights, contact admin@newchaptertms.org.
We rely on consent (where required) or other lawful bases permitted by applicable law to process personal information.
Contact Us
For questions about this Privacy Policy or to request access, correction, or deletion of website information (where applicable), contact:
-
(509) 934-0245
-
140 S Arthur St, Suite 506,
Spokane, WA 99202
.png)
