Privacy Policy

Effective Date: April 2026

Mind Balance Flow Medical Corporation (“Mind Balance Flow,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit mindbalanceflow.com or use our services.

If you are a patient, your health information is also protected under our HIPAA Notice of Privacy Practices, provided at your first appointment and available at the link below.

1. INFORMATION WE COLLECT

Personal Information:

• Full name, date of birth, and contact information (email, phone, address)
• Payment information — processed securely via Stripe (we do not store full credit card numbers)
• Insurance information 

Protected Health Information (PHI):

• Psychiatric, social, and medical history gathered during your initial consultation and evaluation
• Mental health history, current medications, and supplements
• Treatment records, clinical notes, and progress notes from your Ketamine-Assisted Psychotherapy (KAP) sessions and integration therapy
• Intake forms, questionnaires, and intention-setting documents completed as part of your care
• Ketamine consent forms and authorization documents
• Appointment records and clinical communications
• Good Faith Estimates provided as required by the No Surprises Act

Technical Information (collected automatically on website visits):

• IP address, browser type, pages visited, and device type

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Schedule and manage appointments and coordinate your care
• Conduct initial consultations, evaluation sessions, and ongoing KAP and integration therapy
• Provide telemedicine consultations via Zoom for Healthcare (HIPAA-compliant, through our Osmind EHR)
• Communicate with you about your care via Spruce Health, our HIPAA-compliant patient messaging platform
• Process payments through Stripe
• Fulfill legal obligations including DEA record-keeping (21 CFR Parts 1301–1307), California Medical Board requirements, and HIPAA

We do NOT:

• Sell, rent, or share your personal or health information with third parties for commercial purposes
• Contact you for marketing without your explicit consent
• Use your information for any purpose not described in this policy or our HIPAA Notice of Privacy Practices

3. HOW WE PROTECT YOUR INFORMATION

Electronic Health Records:

All patient records, clinical notes, consent forms, and appointment information are stored in Osmind, a HIPAA-compliant EHR platform designed specifically for mental health and ketamine therapy practices. Osmind uses role-based access controls, encryption, and audit logging to protect your data.

Telemedicine:

Video consultations are conducted through Zoom for Healthcare, a HIPAA-compliant video platform integrated with our Osmind EHR. All sessions are encrypted. No recordings are stored without your explicit consent.

Patient Communications:

All clinical communications occur through Spruce Health, a HIPAA-compliant patient messaging platform. Protected health information is never transmitted via standard unencrypted SMS or email.

Website Security:

This website uses SSL/TLS encryption (HTTPS). All data transmitted between your browser and our website is encrypted.

Payment Security:

Payments are processed through Stripe (PCI-DSS compliant). We do not store full credit card numbers on our systems.

Controlled Substance Records:

All ketamine inventory, administration, and disposal records are maintained per DEA regulations (21 CFR Parts 1301–1307) and California law, with timestamped chain-of-custody documentation.

4. SHARING YOUR INFORMATION

We share your information only in the following circumstances:

• With your written authorization (using our Authorization to Disclose Protected Health Information form)
• To coordinate your care with providers you are referred to
• As required by law (mandatory reporting, court orders, DEA inspections, California Medical Board)
• With our HIPAA Business Associate Agreement (BAA) partners: Osmind (EHR), Zoom for Healthcare (telemedicine), Spruce Health (communications), and Stripe (payments)
• In a medical emergency to protect your health or safety

We have executed HIPAA Business Associate Agreements with all vendors who handle protected health information.

5. YOUR RIGHTS

You have the right to:

• Access and receive a copy of your medical records
• Request corrections to your records
• Request restrictions on how we use or share your information
• Receive a list of disclosures we have made
• Revoke any authorization to release your information at any time (unless action has already begun)
• File a privacy complaint with us or the U.S. Department of Health and Human Services

To exercise your rights or request your Authorization to Disclose Protected Health Information form, contact:

Mind Balance Flow Medical Corporation

Dr. Elyas Parsa, DO

1985 1st St, Ste 205, Livermore, CA 94550

Email: elyas@mindbalanceflow.com

Phone: [INSERT CLINIC PHONE NUMBER]

6. HIPAA COMPLIANCE

Mind Balance Flow is a HIPAA-covered entity. We comply with the HIPAA Privacy Rule (45 CFR Part 164), HIPAA Security Rule, and the California Confidentiality of Medical Information Act (CMIA, Civil Code §56 et seq.). A full HIPAA Notice of Privacy Practices is available upon request and is provided to all patients at their first appointment.

7. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our practices or applicable law. Updates will be posted on this page with a revised effective date.