swenson's mental health Therapy

Privacy Policy for Swenson’s Mental Health

This Privacy Policy explains how I protect and handle your personal and health information as a client of Swenson’s Mental Health.

Swenson’s Mental Health is a private therapy practice in Arizona and Idaho, offering HIPAA-secured Zoom sessions.

Questions? Contact me using the information at the end of this page.

1. Commitment to HIPAA and Confidentiality

I comply with HIPAA and state privacy laws in Arizona and Idaho. Your protected health information (PHI)—any information that identifies you and relates to your health, services, or payment—is handled with strict confidentiality and security.

I use secure, HIPAA-compliant tools and limit access to only what is necessary to provide care and operate the practice.

2. Information I Collect

I collect information reasonably necessary to provide therapy, including:

  • Identifying information such as your name, date of birth, mailing address, and state of residence.
  • Contact information such as your email address and phone number so I can communicate with you about appointments and care.
  • Insurance and billing information such as your insurance provider, member ID, claims information, and basic payment details needed to process payments or submit claims.
  • Clinical and treatment information such as intake forms, assessment results, diagnoses, treatment goals, progress notes, and other records related to your therapy.
  • Session information such as appointment dates, times, and follow-up recommendations.

3. How Your Information Is Used

Your information is used to provide therapy, create and update treatment plans, schedule appointments, process billing, and meet professional and legal obligations.

  • Providing therapy services – understanding your history and current concerns, planning and conducting sessions, and coordinating your care.
  • Treatment planning and documentation – creating and updating treatment plans, documenting our work together in clinical notes, and tracking progress over time.
  • Scheduling and communication – contacting you about appointments, scheduling changes, reminders, and practice-related questions.
  • Billing and payment – processing payments, working with your insurance (if applicable), and maintaining the records needed for accurate billing.
  • Practice operations – internal record-keeping, quality assurance, and meeting professional, ethical, and legal obligations.

Your information is never sold, rented, or used for unrelated marketing purposes.

4. When Information May Be Disclosed

I may disclose information without your written permission in these situations:

  • With your written consent – If you would like me to coordinate care with another provider (for example, a primary care physician or psychiatrist), I will ask you to sign a written authorization specifying what information may be shared and with whom.
  • To comply with the law – I may disclose information when required by law, court order, or other legal processes.
  • To prevent serious harm – If you share information that leads me to believe there is a serious and immediate risk of harm to you or to someone else, I may be required to take steps to protect safety, which can include sharing limited information with appropriate individuals or agencies.
  • Mandated reporting – As a mandated reporter, I must report suspected abuse, neglect, or exploitation of children, vulnerable adults, or elders to the appropriate authorities.
  • Health care operations – Limited information may be used for professional consultation, supervision, or administrative purposes. In these cases, identifying details are minimized whenever possible, and those involved are also bound by confidentiality requirements.
  • Business associates – Certain companies that support the practice (such as electronic health record or billing services) may have access to PHI only as needed to perform their contracted services. These companies are required by HIPAA to protect your information through Business Associate Agreements.

Outside these situations, I will not share your information without your explicit, written permission.

5. Use of SimplePractice (Client Portal and Billing)

I use SimplePractice, a HIPAA-compliant platform, for electronic health records, scheduling, intake forms, and billing. You can complete paperwork, manage appointments, send secure messages, and review invoices through the client portal. SimplePractice is a business associate required to protect your PHI.

  • Complete and sign intake paperwork electronically.
  • View and manage appointments.
  • Receive and send secure messages related to your care.
  • Review invoices and make payments.
  • Headway: When needed, I use Headway as an online billing platform to help process claims for certain insurance plans.
  • Mentalyc: I use Mentalyc, a HIPAA-secured AI-powered documentation and transcription platform, to support clinical documentation.

6. Use of Zoom for Telehealth

Therapy sessions use a HIPAA-secured Zoom platform with encrypted video connections and a Business Associate Agreement for compliance. Meeting links are shared directly with you and not posted publicly.

  • Sessions are conducted through encrypted video connections.
  • A Business Associate Agreement is in place for HIPAA compliance.
  • Meeting links are shared directly with you and are not posted publicly.

Join sessions from a private location using a secure internet connection to further protect your privacy.

7. Your Rights Regarding Your Information

Under HIPAA, you have the right to:

  • Right to access your records – You may request to review or receive a copy of your clinical records, subject to certain limitations allowed by law. If your request is denied for clinical reasons, I will explain the reason and discuss options with you.
  • Right to request corrections – If you believe that information in your record is incomplete or inaccurate, you can request an amendment. If I am unable to make the change, I will provide you with a written explanation.
  • Right to request restrictions – You may ask that I limit how your information is used or shared for treatment, payment, or practice operations. While I am not always required to agree to a requested restriction, I will carefully consider your request and communicate clearly about what is possible.
  • Right to request confidential communications – You may request that I contact you in a specific way (for example, by email instead of phone, or at a specific number) to help protect your privacy.
  • Right to a paper or electronic copy of this policy – You can request a copy of this Privacy Policy at any time.

To exercise any of these rights, contact me using the information below.

8. How to Contact Me with Questions or Concerns

For questions or requests about your records:

Swenson’s Mental Health
Attn: Jenni Swenson, LPC, LCPC, ATR-BC
Email: swensonsmentalhealth@gmail.com
Phone: (505) 927-6011

I will do my best to address your questions and concerns thoughtfully and promptly.

9. Changes to This Privacy Policy

This policy may be updated to reflect changes in laws or practice procedures. The “Effective Date” below shows the current version. You may request a copy at any time.

Effective Date

This Privacy Policy is effective as of September 20, 2026.