Privacy Policy

Effective date: October 1, 2026 Last reviewed: October 2026

Overview

This Privacy Policy explains how Schema Mental Health, PLLC ("Schema," "we," "us," or "our") collects, uses, and protects information through this website, schemamentalhealth.com, and related communications.

This policy covers website visitors and people who contact us or request an appointment. Health information we create or receive while providing care is protected health information (PHI) and is governed by our HIPAA Notice of Privacy Practices, not this policy. If the two ever conflict regarding your health information, the HIPAA Notice of Privacy Practices controls.

Information We Collect

Information you give us. When you contact us, request a consultation, or request an appointment, you may provide your name, email address, phone number, preferred contact method, how you heard about us, and a brief message.

Information collected automatically. Like most websites, our hosting provider records basic technical information in server logs, such as IP address, browser type, device type, the pages you visit, and the date and time of your visit. We use this to keep the website secure and working properly.

Appointment requests and patient forms. When you click "Request an Appointment" or use our patient portal, you leave this website and go to SimplePractice, our HIPAA-compliant electronic health record and scheduling platform. Information you enter there is handled by SimplePractice on our behalf under a Business Associate Agreement and is protected under our HIPAA Notice of Privacy Practices.

How We Use Information

We use the information we collect to:

  • Respond to your questions and consultation requests
  • Schedule appointments and communicate with you about your care
  • Verify insurance coverage when you ask us to
  • Operate, secure, and improve this website
  • Comply with legal obligations

We do not sell your personal information, and we do not use it for advertising profiles.

Please Don't Send Detailed Health Information Through This Website

This website is not a patient portal or medical record. Please don't include diagnoses, medications, medical history, or urgent safety concerns in a website message. Once you become a patient, use the secure SimplePractice client portal for clinical communication.

If you are in crisis, call or text 988, call 911, or go to the nearest emergency room. Website messages are not monitored for emergencies.

How We Share Information

We share information only as needed to run our practice:

  • Service providers who help us operate, such as our electronic health record and scheduling platform (SimplePractice), website hosting, secure phone and messaging (Spruce), email, and billing services. Providers that handle protected health information do so under a Business Associate Agreement.
  • When required by law, such as in response to a valid subpoena or court order, or to protect someone's health or safety as permitted by law.
  • With your permission.

We do not share your information with advertisers.

Text Messages

If you give us your mobile number, we may text you about appointments, scheduling, and other practice-related matters. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

We do not share mobile phone numbers or text messaging consent with third parties or affiliates for marketing or promotional purposes. Information shared with service providers that help us deliver text messages is used only to provide that service.

Analytics, Advertising, and Cookies

We do not currently use analytics tools, advertising pixels, or tracking cookies on this website. The website may use strictly necessary cookies or similar technology for basic functions, such as security and loading pages correctly.

If we add analytics or advertising tools in the future, we will update this policy first. We will not place third-party tracking technology on pages where you enter health information or in our patient portal.

Data Retention

We keep website inquiries for up to 24 months, then delete them, unless you become a patient. If you become a patient, your information becomes part of your medical record and is kept for the period required by Florida law. Server logs are kept for up to 12 months.

Security

We use reasonable administrative, technical, and physical safeguards to protect information, including encrypted connections (HTTPS) for this website. No method of transmitting or storing information online is completely secure. If you believe your information has been compromised, contact us right away using the information below.

Children's Privacy

Our services are for adults 18 and older. This website is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us information, contact us and we will delete it.

Your Choices and Rights

You can ask us to access, correct, or delete the personal information you've given us through this website by contacting us below. We will respond within a reasonable time. Some information may need to be kept to comply with the law, such as information that is part of a medical record.

For your rights regarding protected health information, including access to and amendment of your medical records, see our HIPAA Notice of Privacy Practices.

Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when it was last changed. If we make a significant change, we will post a notice on this website.

Contact

Privacy Officer: Tyler R. Nieves, APRN, PMHNP‑BC Schema Mental Health, PLLC Email: privacy@schemamentalhealth.com Phone: (786) 983-5399 Fax: (786) 698-1906 Mailing address: 1000 Brickell Ave, Ste 715 PMB 2243, Miami, FL 33131 (Administrative mailing address only. All care is provided by telehealth.)