SeaChange Mental Health SeaChange Mental Health

Legal

Privacy Policy

Effective September 22, 2026

Short version: this website doesn't ask you for anything. It has no form of its own, no analytics, no advertising trackers, and no cookies of its own. Appointment requests, scheduling, and messaging happen on a separate, HIPAA-compliant platform. Details below.

1. Who we are

SeaChange Mental Health LLC, doing business as SeaChange Mental Health (“we,” “us,” “our”), operates this website at seachangecare.com. Our Navarre office is at 7552 Navarre Pkwy Unit 41, Navarre, FL 32566.

This policy explains how we handle information collected through this website.

2. This policy is not our HIPAA notice

These are two different documents, and it matters which one applies to you.

  • This privacy policy covers ordinary website visitors: anyone browsing seachangecare.com.
  • Our Notice of Privacy Practices covers your protected health information (PHI): your records, notes, diagnoses, medications, and treatment history. That's governed by HIPAA, and you receive the Notice when you become a patient.

If you are a patient asking about your medical records, the Notice of Privacy Practices is the document that governs, not this page.

Read our Notice of Privacy Practices →

3. What this website collects

This site is a set of static pages. It has no contact form, no intake form, no login, and no database. It does not ask you to type anything.

Information that exists as a result of your visit:

  • Server logs. Our hosting provider automatically records standard technical data for every request: IP address, approximate location derived from it, browser and device type, the page requested, referring page, and a timestamp. This is generated by the act of loading a web page and is used for security, troubleshooting, and understanding rough traffic levels.
  • Email you choose to send. If you email info@seachangecare.com, we receive whatever you write. Ordinary email is not a secure channel. Please don't send symptoms, diagnoses, medications, or other clinical details that way. Use the patient portal instead.
  • Phone calls. If you call us, we keep the same kind of record any medical office keeps of an inbound call.

We do not run analytics software, advertising pixels, session recording, heatmaps, chat widgets, or A/B testing tools on this site. We do not set cookies. We do not build visitor profiles, and we do not sell or rent personal information to anyone, for any purpose.

4. Third-party requests and tracking technologies

Two things on this site involve Google, and neither is analytics or advertising:

  • Google Fonts. Our typefaces are served from Google's font servers, so loading any page sends your IP address and browser details to Google in order to fetch the fonts. No cookies are set by this request, and it isn't used to identify you to us.
  • An embedded Google map on each of the two office pages, showing where that office is. Loading one of those pages causes your browser to contact Google Maps, which receives your IP address and may set its own cookies under Google's privacy policy. The maps appear on those two pages only. No other page on this site embeds anything.

We flag these specifically because the U.S. Department of Health and Human Services has issued guidance on third-party tracking technologies on healthcare websites, noting that an IP address combined with a visit to a health-related page can, in some circumstances, be treated as protected health information.

We use no tracking technologies beyond the two described above: no analytics, no advertising pixels, no session recording. If you'd rather neither request happen, a content blocker will stop both; the site remains fully readable, with fallback typefaces and the office address in text beside the map.

Links out to Psychology Today, Google Maps, our patient portal, and crisis organizations will, once you click them, be governed by those organizations' own privacy practices rather than this policy.

5. Appointment requests and the patient portal

Appointment requests, intake paperwork, and secure messaging happen on SimplePractice, a HIPAA-compliant practice-management platform. When you follow a request or scheduling link from this site, you leave seachangecare.com. Nothing you type into that form reaches this website or our web host.

SimplePractice is the records system for both the Navarre and Crestview offices, so requests for either office arrive in the same place and are handled by practice staff before reaching your provider. The web address of the request form carries Faiza Greenway's name, but the account is the practice's.

Information you enter there is handled under our Notice of Privacy Practices and under a business associate agreement between our practice and SimplePractice, which contractually obligates them to protect your health information under HIPAA.

6. Billing

Billing for the practice is handled by Therassist, also under a business associate agreement. If you contact them about a bill, the information you share is protected the same way it would be if you shared it with us directly.

7. Who else we share information with

We share information only where it's necessary or legally required. Categories of recipients:

  • Our hosting provider, which necessarily processes server logs to serve the site.
  • Our EHR and patient-portal vendor (SimplePractice) and our billing service (Therassist), both under business associate agreements.
  • Your insurance carrier, where you're using benefits, for claims and payment.
  • Authorities, where disclosure is required by law, for example court orders, mandatory reporting obligations, or a serious and imminent threat to health or safety.

We do not share your information with advertisers, data brokers, or marketing companies. We never sell it.

8. How long information is kept

Server logs are retained for a short period for security and troubleshooting, then discarded, according to our hosting provider's retention schedule. Email correspondence is kept as long as needed to respond and to maintain a business record.

Clinical records are different. They're retained according to Florida's medical-record retention requirements for the applicable licensure, not by this policy.

9. Security

This site is served over HTTPS, so the connection between your browser and our server is encrypted. The patient portal and our EHR carry their own security controls, including encryption and access logging, as required of a HIPAA business associate.

No system is perfectly secure, and we can't guarantee the security of information you send us by ordinary, unencrypted email. That's the reason for the repeated nudge toward the portal.

10. Your choices

Because this site sets no cookies and runs no trackers, there's very little to opt out of. You can browse without giving us anything. If you'd rather your IP address not reach Google's font servers, a content blocker or a VPN will prevent that request; the site remains fully readable, just with fallback typefaces.

We honor Global Privacy Control and “Do Not Track” browser signals by default, in the sense that we do not track visitors regardless of what those signals say.

11. Children and minors

This website is intended for a general audience and is not directed at children under 13. We do not knowingly collect information from children through this site.

Our practice may treat minors as patients. Where we do, treatment consent, parent and guardian access to records, and the minor's own confidentiality rights are governed by Florida law and by our Notice of Privacy Practices, not by this website policy.

12. Your rights regarding health information

If you are a patient, HIPAA gives you rights over your health information, including the right to:

  • Inspect and get a copy of your records
  • Request a correction to something you believe is inaccurate
  • Request an accounting of certain disclosures we've made
  • Request restrictions on how your information is used or shared
  • Request that we communicate with you by a particular method or at a particular address
  • Receive a paper copy of our Notice of Privacy Practices

To exercise any of these, contact us using the details in §14. Our Notice of Privacy Practices describes each right in full, including where limits apply.

13. Changes to this policy

We may update this policy as the practice or the website changes. When we do, we'll revise the effective date at the top of this page. Material changes will be noted here rather than made quietly.

14. Contact us

Questions about this policy, or about how your information is handled:

If you believe your privacy rights have been violated, you may file a complaint with us, or with the U.S. Department of Health and Human Services, Office for Civil Rights at hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.