Website Privacy Policy
Practice: “Joy Mental Wealth Services PLLC, doing business as JoyPath Mental Health (“The Practice”).
Policy Owner: Joy Uduehi MSN, RN, ARNP, PMHNP-BC,
Practice Owner
Effective Date: 10/16/2026
Last Reviewed: 10/16/2026
Next Review Date: 10/16/2027
Version: 1.0
1. Introduction
Joy Mental Wealth Services PLLC, doing business as JoyPath Mental Health (“JoyPath Mental Health,” “we,” “us,” or “our”), respects your privacy. This Website Privacy Policy describes how we collect, use, disclose, retain, and protect information when you visit or interact with our website, joymentalwealth.com (the “Website”).
This policy applies to information collected through the Website and related online features that we operate. It does not replace our Notice of Privacy Practices, which describes how we use and disclose protected health information (“PHI”) in connection with healthcare services when applicable under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
Certain information collected through the Website may be subject to HIPAA, Washington healthcare privacy laws, Washington’s My Health My Data Act, and other applicable laws, depending on the information and the circumstances in which it is collected or used.
2. Information We Collect
The information we collect depends on how you interact with the Website and the services you choose to use.
A. Information You Provide
You may voluntarily provide information when you:
Contact us or submit a question.
Request information about our services.
Complete an inquiry or other Website form.
Request or schedule an appointment.
Access a patient portal or other online service.
Communicate with us electronically.
Submit a privacy request or otherwise communicate with us.
Depending on the interaction, information may include your name, email address, telephone number, mailing address, appointment preferences, and the contents of your message.
If you provide health-related information through an inquiry, scheduling, or other online feature, we may receive information concerning your mental health, symptoms, treatment interests, medications, or other health-related matters.
Please do not submit sensitive medical, psychiatric, medication, or other confidential health information through a general Website contact form or ordinary email unless we have specifically instructed you to use that method. Use our designated secure patient portal or another approved secure communication method for clinical communications when appropriate.
B. Information Collected Automatically
When you visit the Website, we or the service providers supporting the Website may automatically collect certain technical and usage information, depending on the Website's configuration. This information may include:
Internet Protocol (IP) address.
Browser type and version.
Device type and operating system.
Pages or content accessed.
Date and time of access.
Referring website or page.
General Website usage and performance information.
Cookie identifiers and similar technical information, where applicable.
Information used to maintain Website security, detect misuse, and troubleshoot technical problems.
The specific information collected depends on the technologies enabled on the Website and your browser or device settings.
C. Information From Third-Party Services
If you choose to use a third-party scheduling platform, patient portal, payment service, communication tool, or other external service linked to the Website, we may receive information from that service as necessary to support the service you requested or as otherwise permitted by law.
The third party may separately collect information under its own privacy notice and terms.
3. How We Use Information
Subject to applicable law and any additional notice or consent requirements, we may use information collected through the Website to:
Respond to questions and requests.
Communicate information about services you have requested.
Facilitate appointment inquiries and scheduling.
Provide access to patient portals or other requested services.
Operate, maintain, troubleshoot, and improve the Website.
Maintain Website security and prevent fraud, misuse, and unauthorized access.
Administer privacy requests and respond to legal obligations.
Maintain records and comply with applicable legal, regulatory, and professional requirements.
Carry out other purposes disclosed when information is collected or otherwise permitted by law.
We do not use Website information for purposes materially different from those disclosed in this policy without providing additional notice or obtaining consent when required by law.
4. Health and Medical Information
The Website may contain information about mental health services and may allow visitors to contact us or request appointments.
Information relating to an individual's health, treatment, or request for healthcare services may be subject to special privacy protections. Whether information qualifies as PHI under HIPAA or is otherwise protected by applicable law depends on the nature of the information, the circumstances of its collection, and how it is maintained or used.
When HIPAA applies, we handle PHI in accordance with applicable HIPAA requirements and our Notice of Privacy Practices. Other information collected through the Website is handled under this policy and other applicable laws.
Submitting information through the Website does not, by itself, establish a patient-provider relationship or guarantee that a message will be treated as a clinical communication.
For information about your rights concerning medical information maintained in connection with healthcare services, please review our Notice of Privacy Practices.
5. Cookies and Similar Technologies
The Website may use cookies and similar technologies, such as pixels or local storage, depending on its configuration.
These technologies may support:
Basic Website functionality.
Security and fraud prevention.
Website performance and troubleshooting.
Analytics and usage measurement, where enabled.
Other purposes disclosed when the technology is used and permitted by law.
Cookies are small data files that may be stored on your device. You may be able to manage or disable certain cookies through your browser settings. Disabling some cookies may affect Website functionality.
Where required by applicable law, we will provide appropriate notice and obtain consent before using technologies that require consent.
Our use of cookies and other tracking technologies does not authorize a disclosure of PHI or consumer health data that would otherwise be prohibited by law. We assess applicable privacy and security requirements before implementing tracking technologies.
6. Analytics and Website Performance
We may use analytics or similar tools, where enabled, to understand general Website usage, identify technical issues, and improve Website content and performance.
Depending on the tools used, analytics information may include pages viewed, browser and device information, referring pages, approximate geographic information, and Website interaction data.
We do not use Website analytics to diagnose, treat, or make clinical decisions about an individual's mental health condition.
We review analytics and other Website technologies for compliance with applicable privacy and security requirements. We do not permit analytics tools to receive PHI in a manner that would violate applicable law.
7. Advertising and Marketing Technologies
We do not sell PHI.
We assess advertising, marketing, and tracking technologies before implementation to determine what information they collect, how information is used, and whether information is disclosed to third parties.
We do not authorize the use of advertising or marketing technologies in a manner that would unlawfully disclose PHI or consumer health data. Any use or disclosure of PHI must satisfy applicable legal requirements, including obtaining a valid HIPAA authorization when required.
Where Washington consumer health data laws apply, we will comply with applicable requirements concerning the collection, use, sharing, and consent for consumer health data.
We do not represent that a general Website privacy notice or cookie banner alone authorizes an otherwise impermissible disclosure of health information.
8. How We Share Information
We may disclose information collected through the Website in the following circumstances, subject to applicable law:
A. Service Providers
We may disclose information to service providers that support Website hosting, security, scheduling, patient portals, communications, payment processing, or other services we use.
We limit disclosures to what is appropriate for the relevant service and require applicable privacy, confidentiality, and security protections.
Where a service provider qualifies as a HIPAA business associate, we will obtain a business associate agreement when required by law.
B. Services You Request
We may disclose information as reasonably necessary to provide a service you request, facilitate communications, or support appointment scheduling, subject to applicable privacy and consent requirements.
C. Legal and Safety Requirements
We may disclose information when required or permitted by applicable law, valid legal process, or other lawful requirements. We may also disclose information when reasonably necessary to protect the security of our systems, investigate suspected misuse, or protect the rights, safety, or property of our practice or others, subject to applicable privacy restrictions.
D. Other Disclosures
We will not sell personal information submitted through the Website as a business practice. We will not disclose PHI or consumer health data for a purpose that is prohibited by applicable law.
Where required, we will provide additional notice and obtain consent or authorization before a disclosure.
9. Washington Consumer Health Data
Washington's My Health My Data Act provides specific protections for certain consumer health data.
Consumer health data may include personal information linked or reasonably linkable to a consumer that identifies the consumer's past, present, or future physical or mental health status, subject to statutory definitions and exemptions.
Where the Act applies to information collected through the Website, we will comply with applicable requirements concerning:
Disclosure of the categories and purposes of consumer health data collection.
Disclosure of applicable data sources and sharing practices.
Consent for collection or sharing when required.
Consumer rights and privacy requests.
Security and service-provider obligations.
Other requirements applicable to our activities.
Information governed by an applicable statutory exemption may be treated differently. We do not assume that all information handled by a healthcare provider is exempt from Washington consumer health data requirements.
Our separate Consumer Health Data Privacy Policy describes the categories of consumer health data covered by that policy, the applicable purposes and sharing practices, and how to exercise relevant rights.
10. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information collected through the Website against unauthorized access, use, alteration, and disclosure.
Safeguards may include access controls, appropriate service-provider protections, security monitoring, and other measures appropriate to the nature of the information and the systems involved.
No Website, electronic transmission, or storage system can be guaranteed to be completely secure. We cannot guarantee the security of information transmitted over the internet.
Please avoid submitting highly sensitive health information through general Website forms or other communication methods that have not been designated for secure clinical communications.
11. Data Retention and Deletion
We retain Website information for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal, regulatory, contractual, professional, and record-retention requirements.
Retention periods may vary depending on the type of information, the purpose for which it was collected, the services involved, and applicable law.
When information is no longer required, we will handle its deletion or disposal in accordance with applicable requirements and our retention practices.
A request to delete Website information may be subject to legal exceptions or retention obligations. Clinical records and other records maintained in connection with healthcare services may be subject to separate requirements.
12. Third-Party Websites and Services
The Website may contain links to third-party websites or services that we do not own or control.
Third-party services may collect, use, or disclose information under their own privacy notices and terms. We encourage you to review those notices before submitting information through an external service.
We are not responsible for the privacy practices or content of third-party websites that we do not control. This does not eliminate any obligations we may have under applicable law concerning information we disclose to or receive from third parties.
13. Children's and Adolescents' Privacy
JoyPath Mental Health provides mental health services to adolescents and adults.
The Website is not intended to encourage children to submit personal information independently except where the service and applicable law permit it. We do not knowingly collect information from children for purposes unrelated to the Website's intended services.
Information concerning a minor may be subject to additional privacy, consent, access, and confidentiality requirements under federal and Washington State law. A parent's or guardian's authority to access or consent to the disclosure of a minor's health information may depend on the circumstances and applicable law.
Questions concerning a minor's clinical information will be handled in accordance with applicable law and our Notice of Privacy Practices.
14. Your Privacy Rights and Choices
Your rights depend on the type of information involved and the laws that apply.
Depending on the circumstances, you may be able to:
Request information about our collection or use of certain Website information.
Request access to certain information.
Request correction of certain information.
Request deletion of certain information where legally applicable.
Withdraw consent where consent is the legal basis for collection or sharing and withdrawal is permitted.
Exercise rights available under Washington's My Health My Data Act or other applicable privacy laws.
Opt out of communications where an opt-out is available.
Requests concerning PHI maintained in connection with healthcare services should be submitted through the process described in our Notice of Privacy Practices.
Requests concerning Website information or consumer health data may be submitted using the contact information in Section 17. We will process requests under the laws applicable to the information involved.
We may take reasonable steps to verify your identity and authority before responding. Certain requests may be denied or limited where permitted or required by law. Where applicable law provides an appeal process, we will provide instructions for exercising that right.
We will not unlawfully discriminate against individuals for exercising applicable privacy rights.
15. Communications and Emergency Information
If you voluntarily provide your email address or telephone number through the Website, we may use that information to respond to your inquiry or provide information you requested.
Submitting a general Website inquiry does not establish a patient-provider relationship.
The Website and general email are not intended for emergency communications and should not be used to request urgent clinical assistance.
If you are experiencing a mental health emergency or believe you are in immediate danger, call 911 or go to the nearest emergency department. You may also call or text 988 to reach the Suicide & Crisis Lifeline.
16. Changes to This Policy
We may update this Website Privacy Policy to reflect changes in our services, Website technology, data practices, or legal requirements.
When we update the policy, we will revise the “Last Updated” date above and post the revised policy on the Website. Where additional notice or consent is required by law, we will provide it as applicable.
Changes to this policy do not retroactively authorize collection, use, or disclosure of information that was not permitted when it occurred.
17. Contact Us
For questions about this Website Privacy Policy, Website privacy practices, or privacy requests, please contact:
Joy Mental Wealth Services PLLC
Doing business as JoyPath Mental Health
Privacy Officer: Joy Uduehi, ARNP
Phone: 425-332-7341
Email: info@joypathmentalhealth.com
Website: https://joymentalwealth.com
Mailing address:
Joy Mental Wealth Services PLLC
DBA JoyPath Mental Health
707 South Grady Way,Suite 600
Renton, WA 98057
For questions concerning the privacy of your medical information or to exercise rights concerning PHI, please refer to our Notice of Privacy Practices.
Related documents:
Consumer Health Data Privacy Policy (coming soon)