Privacy Policy

Effective Date: April 10, 2026
Last Updated: April 10, 2026

Ascend Mind and Body ("Ascend," "we," "our," or "us") operates the website ascendmb.com (the "Site") and provides healthcare services at our offices in Wesley Chapel, Tampa, and Lakeland, Florida, as well as through telehealth across the state of Florida. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or interact with our practice.

This Privacy Policy applies to information collected through this website. It does not replace our Notice of Privacy Practices (NPP), which governs how we handle your Protected Health Information (PHI) as required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

1. Information We Collect

1.1 Information You Provide Voluntarily

When you interact with our Site, you may voluntarily provide information including:

• Contact information: Name, email address, phone number, and mailing address when you submit a contact form, request an appointment, or sign up for communications.
• Insurance information: Insurance carrier name, member ID, and group number when requesting benefits verification.
• Appointment requests: Service type, preferred location, preferred provider, and scheduling preferences.

Important: Our website contact forms are not intended for the transmission of Protected Health Information (PHI). Do not submit medical records, diagnosis information, treatment details, or other sensitive health information through website forms or email. Clinical communications should occur through our secure patient portal or in person.

1.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain technical information:

• Device information: Browser type, operating system, device type, and screen resolution.
• Usage data: Pages visited, time spent on pages, referring URLs, and navigation paths.
• Network information: IP address (which may be anonymized) and approximate geographic location (city/region level).

1.3 Cookies and Similar Technologies

Our Site may use cookies and similar tracking technologies to improve your browsing experience. Types of cookies we may use include:

• Essential cookies: Required for basic site functionality (e.g., form submission, navigation). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our Site so we can improve it. We use HIPAA-compliant analytics tools that do not track individual patients or collect PHI.
• Preference cookies: Remember your preferences (e.g., location selection) to provide a more personalized experience.

We do not use advertising cookies or retargeting pixels on this website. We do not sell your data to advertisers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and appointment requests.
• To verify your insurance benefits and provide cost estimates.
• To improve our website's functionality, content, and user experience.
• To communicate with you about our services, including appointment reminders (when you opt in).
• To comply with legal and regulatory obligations.
• To protect the security and integrity of our Site and systems.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service providers: We work with HIPAA-compliant third-party vendors who assist with website hosting, appointment scheduling, form processing, and analytics. All vendors who may access personal information are bound by Business Associate Agreements (BAAs) or equivalent data protection contracts.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety: We may share information when we believe disclosure is necessary to protect the safety of our patients, staff, or the public.

4. Protected Health Information (PHI)

This Privacy Policy governs information collected through our website. The collection, use, and disclosure of Protected Health Information (PHI) - including medical records, diagnoses, treatment plans, and billing records - is governed by our Notice of Privacy Practices and by HIPAA. If there is a conflict between this Privacy Policy and our NPP regarding PHI, the NPP controls.

5. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These safeguards include:

• SSL/TLS encryption for all data transmitted between your browser and our website.
• HIPAA-compliant hosting infrastructure.
• Access controls limiting employee access to personal information on a need-to-know basis.
• Regular security assessments and vulnerability reviews.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Third-Party Links

Our Site may contain links to third-party websites, including patient portals, insurance company websites, and healthcare directory listings. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

7. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 through our website. If you believe a child under 13 has provided personal information through our Site, please contact us immediately so we can delete it.

Note: Ascend Mind and Body does provide clinical services to minors with the consent of a parent or legal guardian. The handling of minor patients' health information is governed by our Notice of Privacy Practices and applicable state and federal law.

8. Your Rights Under Florida Law

Under the Florida Information Protection Act of 2014 (FIPA, Florida Statutes Section 501.171) and other applicable Florida laws, you have certain rights regarding your personal information:

• Notification of data breaches: We will notify affected individuals within 30 days of discovering a breach of personal information, as required by FIPA.
• Access to your information: You may request access to the personal information we hold about you.
• Correction: You may request that we correct inaccurate personal information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.

Your rights regarding Protected Health Information are described in our Notice of Privacy Practices.

9. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry-standard interpretation of DNT signals, our Site does not currently respond to DNT signals. However, as noted above, we do not use advertising cookies or retargeting pixels.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about your personal information, please contact us:

For questions specifically about your medical records or Protected Health Information, please refer to our Notice of Privacy Practices or contact our Privacy Officer at the number above.