Notice of Privacy Practices
MINDSET BEHAVIORAL HEALTH PC
DBA MYINDSET
7230 Arbuckle Commons, Suite 256 | Brownsburg, IN 46112
(317) 207-0273 | www.myindset.com
NOTICE OF PRIVACY PRACTICES
Effective Date: September 19, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
How We May Use and Share Your Information Without Your Authorization
Treatment
We may use your health information to provide you with care, and share it with providers and support staff involved in your treatment. This includes coordinating care with other providers such as your primary care physician, prescriber, or therapist, so your care is consistent.
Payment
We may use and share your health information so services can be billed and paid for by you, an insurance company, or another third party. For example, we may give your insurance company information about services you received to obtain payment or to confirm coverage.
Health Care Operations
We may use and share your health information to run our practice. This includes quality assessment and improvement, staff training and credentialing, licensing, business management and administration, and compliance activities.
Appointment Reminders and Treatment Alternatives
We may contact you to remind you of an appointment, or to tell you about treatment options or health-related services that may interest you. We may contact you by phone, mail, email, or text message, depending on your preferences. You may ask us to contact you in a specific way or at a specific location by making a written request.
People Involved in Your Care
We may share limited information with a family member, guardian, or other person involved in your care or in paying for your care, unless you object. We may also share information with an organization assisting in a disaster relief effort.
Fundraising
We do not currently use your health information for fundraising. If that changes, we will tell you in advance and you will be able to opt out at any time.
Disclosures Required or Permitted by Law
We will share your health information when federal, state, or local law requires it, including in these situations:
-
Public health activities — preventing or controlling disease, injury, or disability; reporting deaths; reporting suspected child abuse or neglect; reporting reactions to medications or problems with products; notifying someone who may have been exposed to a disease.
-
Health oversight — audits, investigations, inspections, and licensing activity by government agencies.
-
Lawsuits and disputes — in response to a court or administrative order, or to a subpoena or discovery request that meets legal requirements.
-
Law enforcement — to identify or locate a suspect, fugitive, material witness, or missing person; about a victim of a crime; about a death that may have resulted from criminal conduct; about criminal conduct on our premises; or in an emergency to report a crime.
-
Abuse, neglect, or domestic violence — to the appropriate government authority when we believe you have been a victim and the law requires or allows the report.
-
Serious threat to health or safety — to prevent or lessen a serious and imminent threat to you, another person, or the public.
-
Coroners, medical examiners, and funeral directors — to identify a deceased person or determine cause of death.
-
Military, national security, and protective services — as required by military authorities or authorized federal officials.
-
Inmates and correctional institutions — if you are an inmate or in the custody of a law enforcement official, as necessary for your health care or the safety and security of the institution.
-
Workers' compensation — as authorized by, and to the extent necessary to comply with, workers' compensation laws.
-
Uses and Disclosures That Require Your Written Authorization
We will obtain your written authorization before using or sharing your health information for any purpose not described in this notice. You may revoke an authorization in writing at any time. If you revoke it, we will stop using or sharing your information for the purposes it covered, except where we have already acted in reliance on it.
The following always require your written authorization:
Psychotherapy Notes
Psychotherapy notes are notes made by a mental health professional documenting or analyzing what was said during a private, group, joint, or family counseling session. They are kept separate from the rest of your medical record and receive special protection. We will not use or share psychotherapy notes without your written authorization, except in limited circumstances allowed by law: use by the person who wrote them for treatment; our own training programs; defending ourselves in a legal action you bring; where required by law; to prevent a serious and imminent threat to health or safety; and to health oversight agencies regarding the person who wrote them.
Marketing
We will not use or share your health information for marketing purposes without your written authorization.
Sale of Health Information
We will not sell your health information without your written authorization.
Research
Before we use or share health information that identifies you for research purposes, we will obtain your written authorization, unless the research has been approved by an institutional review board or privacy board with procedures to protect your privacy.
Records That Receive Extra Protection
Substance Use Disorder Records (42 CFR Part 2)
Records about substance use disorder treatment receive special federal protection under 42 CFR Part 2. The 2024 final rule brought these protections closer to HIPAA to simplify consent, while keeping strong safeguards in place. We follow all Part 2 requirements.
A single consent covers treatment, payment, and operations. With your written consent, we may use and share substance use disorder records for treatment, payment, and health care operations. One general consent is enough — you do not need to sign a separate form for each disclosure.
Sharing without your consent is limited. These records may be shared without consent only in narrow circumstances allowed by federal law: a medical emergency where your life is in immediate danger; qualified research with safeguards; audits and evaluations by authorized entities; reporting suspected child abuse or neglect; a crime committed on our premises or against our staff; and a court order that meets specific Part 2 standards.
Redisclosure is prohibited. Anyone who receives these records from us is forbidden from sharing them further, except as Part 2 specifically permits. A written notice of that prohibition goes with every disclosure.
They cannot be used against you in legal proceedings. Your substance use disorder records may not be used in any criminal, civil, or administrative investigation or proceeding against you, by any federal, state, or local authority, except as 42 CFR Part 2 expressly allows.
Your rights to access, amend, restrict, and receive an accounting of disclosures apply to these records, and breach notification requirements apply to them as well.
Indiana Mental Health Records
Because we are a behavioral health practice, many of our records are mental health records under Indiana law. Indiana Code § 16-39-2 provides protections beyond federal HIPAA requirements, including requirements for specific consent before release. Where Indiana law protects your information more than HIPAA does, we follow the more protective standard.
Other Protected Categories
HIV-related information and genetic information may also carry special confidentiality protections under state or federal law. We follow those protections wherever they apply.
Telehealth Services
If you receive services by video or phone, we use HIPAA-compliant technology to protect your privacy. You are responsible for privacy on your end — please take part from a private location. We cannot guarantee confidentiality if other people can overhear your session. Electronic communication carries inherent risks, and by taking part in telehealth you acknowledge and accept those risks.
Text Messaging and Mobile Communications
Your consent
If you give us your mobile number and opt in — through our website, intake forms, patient portal, scheduling tools, or verbally in our office — you consent to receive text messages at that number. Consent to receive texts is never a condition of receiving care.
What we may send
Appointment reminders and confirmations, cancellation or rescheduling notices, follow-up check-ins, billing and payment reminders, practice updates such as changes to hours or provider availability, replies to questions you send us, and requests for feedback. We will not send marketing or promotional texts without your separate written consent, as the Telephone Consumer Protection Act requires.
Frequency and cost
How often you receive messages depends on your appointments and your contact with our practice. Message and data rates may apply depending on your carrier and plan. We are not responsible for charges from your mobile carrier.
How to stop
Reply STOP to any message to opt out. You may also call (317) 207-0273 or email contact@myindset.com. You will receive one final confirmation message. Opting out will not affect your care. Reply HELP to any message for assistance.
Privacy of text messages
Our texts will not contain detailed health information such as diagnoses, medications, treatment plans, or clinical notes. They are limited to general non-clinical content such as dates and times. We do not sell, rent, share, or trade your mobile number, your opt-in data, or anything collected through our text program to third parties for marketing purposes.
Compliance
Our texting practices follow the Telephone Consumer Protection Act, the CTIA Messaging Principles and Best Practices, and 10DLC registration requirements set by The Campaign Registry and U.S. mobile carriers. We keep records of consent, including how and when it was obtained, for at least five years. Carriers are not liable for delayed or undelivered messages.
Your Rights Regarding Your Health Information
Right to inspect and get a copy
You have the right to see and get a copy of your health information. If we keep it electronically, you have the right to an electronic copy in the format you request when we can readily produce it, or in another format we agree on. You may also direct us to send an electronic copy to a person you designate. Make your request in writing. We will respond within 30 days. We may charge a reasonable fee, described below. We may deny your request in limited circumstances; if we do, you may ask for a review of that denial.
Right to request an amendment
You have the right to ask us to amend your health information if you believe it is incorrect or incomplete. Make your request in writing with the reason. We will respond within 60 days. We may deny the request — for example, if we did not create the information, or if it is accurate and complete — and we will give you a written explanation if we do.
Right to an accounting of disclosures
You have the right to ask for a list of the disclosures we have made of your health information, other than those for treatment, payment, health care operations, and certain other exceptions. Make your request in writing and state a time period of up to six years. We will respond within 60 days. The first list in a 12-month period is free; we may charge a reasonable fee for additional requests.
Right to request restrictions
You have the right to ask us to restrict how we use or share your health information for treatment, payment, or health care operations, or with people involved in your care. We are not required to agree, with one exception: if you pay for a service in full out of pocket, we must agree not to share information about that service with your health plan.
Right to request confidential communications
You have the right to ask us to contact you in a particular way or at a particular place — for example, only by mail, or only at a specific phone number. We will accommodate all reasonable requests. Make your request in writing.
Right to be notified of a breach
You have the right to be told if we discover a breach of your unsecured protected health information. We will notify you within 60 days of discovering it, as required by the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D) and Indiana Code § 24-4.9. The notice will describe what happened, what information was involved, what you can do to protect yourself, what we are doing in response, and how to reach us with questions.
Right to opt out of fundraising
If we ever use your health information to contact you about fundraising, you have the right to opt out. We do not currently do this.
Right to a paper copy of this notice
You have the right to a paper copy of this notice at any time, even if you agreed to receive it electronically.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our office or with the U.S. Department of Health and Human Services. We will not penalize or retaliate against you for filing a complaint.
Mindset Behavioral Health PC DBA MyINDset
Privacy Officer
7230 Arbuckle Commons, Suite 256
Brownsburg, IN 46112
Phone: (317) 207-0273
Email: contact@myindset.com
Hours: Monday–Friday, 9:00 AM–4:00 PM
U.S. Dept. of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Online: ocrportal.hhs.gov/ocr/smartscreen/main.jsf
www.hhs.gov/ocr/privacy/hipaa/complaints
You may also contact the Indiana Professional Licensing Agency, 402 W. Washington Street, Room W072, Indianapolis, IN 46204, (317) 234-2060.
Changes to This Notice
We reserve the right to change this notice, and to make the revised notice apply to health information we already have about you as well as information we receive in the future. We will post the current notice in our office and on our website at www.myindset.com. The effective date appears on the first page.
Questions
If you have questions about this notice, please contact our Privacy Officer at (317) 207-0273 or contact@myindset.com, or write to us at 7230 Arbuckle Commons, Suite 256, Brownsburg, IN 46112. Our office hours are Monday through Friday, 9:00 AM to 4:00 PM, except holidays.