Effective Date: July 1, 2026

1. Overview

Fortitude Mental Health Group Professional Nursing Corporation (the “Practice,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Website Privacy Policy explains how information may be collected, used, disclosed, retained, and protected when you visit or interact with the Practice’s public-facing website, submit a website contact form, communicate with the Practice, or use website links or features that connect to third-party services.

This Website Privacy Policy applies primarily to information collected through or in connection with the public-facing website. Clinical information and protected health information may be governed separately by applicable federal and state healthcare privacy laws, including, as applicable, the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), as well as the Practice’s separate Notice of Privacy Practices.

2. Information We May Collect

Depending on how you interact with the website and which technologies or features are enabled, the Practice may collect information that you voluntarily provide or that is collected automatically.

Information you voluntarily provide may include:

• Name;
• Email address;
• Telephone number;
• Information submitted through website contact forms;
• Information provided when requesting information about services;
• Scheduling-related information when you access or use linked scheduling tools; and
• Other information you choose to provide.

Information that may be collected automatically may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Pages viewed;
• Date and time of visits;
• Referring website or page;
• Approximate geographic information derived from an IP address;
• Visit duration;
• Interactions with website features; and
• Cookie, server log, analytics, or similar technical data.

The Practice encourages you not to submit sensitive medical, psychiatric, financial, or other highly confidential information through general website contact forms or unsecured email.

3. How We May Use Information

Information collected through or in connection with the website may be used to:

• Respond to questions, inquiries, or requests;
• Communicate about services, scheduling, or appointments;
• Facilitate appointment scheduling, patient registration, and intake processes;
• Send appointment confirmations and reminders;
• Provide scheduling and rescheduling information;
• Send notifications concerning required intake forms or documentation;
• Provide administrative updates related to appointments or services;
• Request information needed to facilitate scheduling or care;
• Send notifications concerning patient portal messages or other secure communications;
• Provide other non-marketing communications reasonably related to appointments, care, services, or an individual’s relationship with the Practice, as permitted by law;
• Maintain, operate, secure, troubleshoot, and improve the website;
• Understand website usage, functionality, and performance;
• Detect, prevent, or investigate fraud, misuse, security incidents, or technical problems;
• Comply with applicable laws, regulations, legal processes, professional obligations, contractual requirements, or governmental requests;
• Protect the rights, safety, security, and property of the Practice, its patients, prospective patients, website visitors, or others; and
• Carry out other purposes disclosed at the time information is collected or with consent or authorization where required by law.

4. Website Contact Forms and General Email

The Practice’s general website contact forms and general email are intended primarily for non-urgent, general, and administrative inquiries.

Information submitted through the Practice’s general website contact form may be transmitted to or received through ordinary email. Unless expressly identified as a secure communication method, website contact forms and standard email may not be encrypted or appropriate for transmitting sensitive medical, psychiatric, financial, or other confidential information.

You should not submit highly sensitive health information, detailed medical histories, medication concerns, emergency information, or other highly confidential information through general website contact forms or unsecured email.

Submitting a website contact form, sending an email, requesting information, or otherwise communicating with the Practice does not, by itself, establish a provider–patient relationship, guarantee a response within any particular timeframe, or create an obligation for the Practice to provide treatment.

5. Text Messages, Telephone Calls, and Administrative Communications

If you voluntarily provide a telephone or mobile number in connection with an inquiry, scheduling request, appointment, intake process, or receipt of services, the Practice may use that number, to the extent permitted by applicable law, for non-marketing communications related to appointments, scheduling, intake, required documentation, administrative matters, and services.

Such communications may include:

• Appointment confirmations and reminders;
• Scheduling and rescheduling information;
• Notifications concerning required intake forms or documentation;
• Administrative updates related to appointments or services;
• Requests to complete information needed for scheduling or care;
• Notifications regarding patient portal messages or other secure communications; and
• Other non-marketing communications reasonably related to appointments, care, or the individual’s relationship with the Practice, as permitted by law.

The Practice does not use ordinary SMS text messaging for emergencies or substantive clinical consultation. Patients should use Practice-approved communication channels for clinical questions, medication concerns, and sensitive health information.

Message and data rates may apply. Message frequency may vary.

You may request that text messages stop by contacting the Practice or using any opt-out method provided in the message, where applicable. Opting out of text messages will not affect eligibility to receive healthcare services but may affect the Practice’s ability to provide reminders or other administrative notifications by text.

Do not include sensitive medical or psychiatric information in ordinary text messages.

6. Email and Other Electronic Communications

If you voluntarily provide an email address in connection with an inquiry, scheduling, appointment, intake, or receipt of services, the Practice may use that address for non-marketing communications related to inquiries, scheduling, appointments, intake forms, required documentation, Practice information, administrative updates, and other matters related to services.

Electronic communications may involve inherent privacy and security risks. Messages may be delayed, intercepted, misdirected, or accessed by others who have access to your device, telephone number, email account, voicemail, or other communications account.

Standard email may not always be secure or encrypted. You should avoid sending highly sensitive medical, psychiatric, financial, or other confidential information through unsecured email and use the secure patient portal or another Practice-approved secure communication method when appropriate.

The Practice cannot guarantee immediate review, response, or delivery of electronic communications. Electronic communications should not be used for emergencies.

7. Cookies, Analytics, Server Logs, and Similar Technologies

The website may use cookies, server logs, analytics tools, and similar technologies to support website functionality, security, performance, troubleshooting, and understanding of how visitors interact with the website.

Depending on the technologies enabled, information collected automatically may include:

• IP address;
• Browser type;
• Device information;
• Operating system;
• Pages viewed;
• Referring pages or websites;
• Approximate geographic information derived from an IP address;
• Date, time, and duration of visits; and
• Interactions with website features.

Some website features or third-party services may place or use cookies or similar technologies. Visitors may be able to control certain cookies through their browser settings, although disabling cookies may affect website functionality.

The Practice does not represent that all automatically collected information is anonymous or non-identifiable, because certain technical information, such as an IP address or device identifier, may be considered personal information under applicable law.

8. How Information May Be Disclosed

The Practice does not sell personal information in exchange for money.

Information may be disclosed when reasonably necessary to:

• Service providers supporting website hosting, security, communications, scheduling, intake, patient registration, insurance administration, billing, payment processing, telehealth, secure messaging, electronic health records, analytics, or other operational functions;
• Healthcare providers or other entities involved in care, when permitted or required by law and applicable to the information involved;
• Health plans, payers, billing organizations, or insurance-related service providers when applicable and permitted by law;
• Government authorities, regulators, courts, law enforcement, or other parties when required or permitted by law;
• Comply with subpoenas, court orders, legal processes, regulatory obligations, or professional requirements;
• Protect the rights, safety, security, or property of the Practice, its patients, prospective patients, website visitors, or others;
• Detect, investigate, prevent, or address fraud, misuse, security incidents, technical problems, or violations of applicable terms or policies; or
• Carry out another purpose disclosed at the time of collection or with consent or authorization when required by law.

The Practice does not disclose personal information for purposes inconsistent with applicable law or this Privacy Policy.

9. Third-Party Platforms and Service Providers

Certain buttons, links, embedded tools, or features on this website may direct you to or connect with independent third-party platforms used by the Practice for scheduling, intake, patient registration, insurance administration, billing, payment processing, secure messaging, telehealth, electronic health records, clinical documentation, and other administrative, clinical, or operational functions.

Such platforms may include IntakeQ (PracticeQ platform), Headway, Alma, Doxy.me, Zoom, Google Meet, and other service providers or technology platforms used by the Practice from time to time.

The specific platforms used may vary depending on the patient, appointment, provider, insurance arrangement, availability, functionality, clinical appropriateness, contractual arrangements, or other relevant circumstances.

Information submitted directly through a third-party platform may be subject to applicable law, the Practice’s agreements with that provider, and, where applicable, the third party’s own terms of service, privacy policies, technical requirements, and other practices.

The Practice does not control the independent operations, availability, security, content, or privacy practices of third-party platforms.

Nothing in this section limits any responsibility or legal obligation of the Practice that cannot lawfully be waived.

10. Scheduling, Intake, and Patient Registration

Scheduling, intake forms, patient registration, insurance information, secure messaging, telehealth services, clinical documentation, billing, and other administrative or clinical functions may be conducted through third-party platforms before or after a provider–patient relationship is established, as appropriate.

Submitting information through a scheduling, intake, or registration platform does not, by itself, guarantee:

• Acceptance as a patient;
• Eligibility for services;
• Clinical appropriateness of services;
• Insurance coverage or reimbursement;
• Availability of any particular appointment, provider, medication, treatment, or other requested service; or
• Establishment of a provider–patient relationship.

Information provided through scheduling, intake, registration, and clinical systems may be subject to different privacy protections depending on the information involved, the circumstances of collection, the entity receiving or maintaining it, and applicable law.

11. Telehealth Platforms and Services

The Practice may provide telehealth services through one or more third-party technology platforms selected based on availability, functionality, clinical appropriateness, patient needs, payer requirements, contractual arrangements, and other relevant considerations.

Such platforms may include Doxy.me, IntakeQ (PracticeQ platform), Zoom, Google Meet, Headway, and other telehealth or communications platforms used by the Practice from time to time.

The specific telehealth platform used may vary by patient, appointment, provider, insurance arrangement, or other circumstances.

Telehealth and electronic communications may involve privacy and security risks despite reasonable safeguards, including technical interruptions, connection failures, unauthorized access, and other risks inherent in electronic communications.

Use of a third-party telehealth platform may also be subject to the platform provider’s applicable terms, privacy practices, and technical requirements.

The Practice may determine that a particular platform, communication method, or telehealth modality is not appropriate for a particular situation and may recommend or require another method of communication, in-person evaluation, emergency services, a higher level of care, or other appropriate resources.

12. Clinical Information, Protected Health Information, and Medical Information

Once a provider–patient relationship has been established, certain information maintained by the Practice may constitute protected health information or medical information governed by HIPAA, CMIA, or other applicable federal or state healthcare privacy laws.

Such information may also be subject to the Practice’s separate Notice of Privacy Practices, which describes how protected health information may be used and disclosed and explains certain rights regarding that information.

Not all information collected through a public-facing website is necessarily protected health information under HIPAA. The legal status and protections applicable to information depend on the circumstances, the information involved, the entity receiving or maintaining it, and applicable law.

If there is a conflict between this Website Privacy Policy and the Practice’s Notice of Privacy Practices concerning protected health information, the Notice of Privacy Practices will govern to the extent required by applicable law.

13. Security

The Practice uses reasonable administrative, technical, and physical safeguards, as appropriate and required by applicable law, to protect information within its custody or control.

However, no website, electronic system, communications method, transmission method, or storage system can be guaranteed to be completely secure. The Practice cannot guarantee absolute security or that unauthorized third parties will never defeat security measures.

Security risks may include unauthorized access, interception, loss, misuse, alteration, disclosure, transmission errors, technical failures, or access by others who have control of or access to your device, email account, telephone number, voicemail, or other communications account.

If you believe information you submitted to or received from the Practice may have been compromised, please contact the Practice promptly using the contact information provided below.

14. Data Retention

The Practice may retain information for as long as reasonably necessary to:

• Respond to inquiries;
• Facilitate scheduling, intake, or services;
• Maintain appropriate business, administrative, or clinical records;
• Fulfill the purposes for which information was collected;
• Comply with legal, regulatory, professional, contractual, insurance, or record-retention requirements;
• Resolve disputes;
• Enforce agreements or policies; and
• Protect legitimate legal, security, clinical, or operational interests.

Retention periods may vary depending on the type of information, how it was collected or used, applicable law, contractual obligations, and other relevant circumstances.

15. California Privacy Rights

California residents may have certain rights concerning personal information under applicable California law, including rights of access, correction, deletion, and other rights, subject to statutory applicability, exemptions, exceptions, verification requirements, and legal limitations.

Certain protected health information governed by HIPAA and certain medical information governed by CMIA may be treated differently from other categories of personal information under California consumer privacy laws.

Nothing in this Privacy Policy is intended to provide rights beyond those required by applicable law or to limit any rights that cannot lawfully be limited.

Requests concerning personal information may be submitted using the contact information provided below.

16. Children’s Privacy and Age Limitations

The Practice provides clinical services to adults age 18 and older. The website and Practice services are not directed to children.

The Practice does not knowingly collect personal information directly from children through the public-facing website without appropriate authorization where required by applicable law.

If the Practice becomes aware that personal information has been collected from a child in circumstances inconsistent with applicable law, the Practice will take appropriate steps as required by law.

17. External Links

The website may contain links to third-party websites, platforms, resources, or services. The Practice does not control and is not responsible for the independent content, accuracy, availability, security, terms, privacy practices, or other practices of third parties.

Access to third-party websites and platforms is at your discretion and may be subject to separate terms, privacy policies, and technical requirements.

18. No Emergency Communications

The website, website contact forms, general email, ordinary text messages, patient portal, online scheduling tools, and telehealth platforms are not appropriate for emergencies or situations requiring immediate attention.

If you are experiencing a medical or psychiatric emergency, believe you may harm yourself or someone else, or require immediate assistance:

• Call 911 or your local emergency services;
• Go to the nearest emergency department; or
• Call or text 988 to reach the Suicide & Crisis Lifeline.

Electronic communications and appointment requests may not be reviewed immediately and should never be relied upon for emergency assistance.

19. Changes to This Privacy Policy

The Practice may update this Privacy Policy from time to time to reflect changes in services, operations, technology, website functionality, privacy practices, third-party service providers, or applicable law.

The current version will be posted on the website with an updated effective date. Changes will apply prospectively to the extent required by applicable law.

Material changes requiring additional notice or consent will be handled as required by applicable law.

20. Contact Information

Fortitude Mental Health Group Professional Nursing Corporation
17011 Beach Boulevard, Suite 900
Huntington Beach, CA 92647
Phone: 949-775-1785
Email: info@fortitudemhg.com