This policy explains what information the Strata Outpatient website at strataoutpatient.com collects, how we use it, and the choices you have. It applies to this website only.
If you are a patient, or become one, your health information is protected under a separate document — our Notice of Privacy Practices, which is required by HIPAA and describes how we use and disclose protected health information and the rights you have over it. Where the two overlap, the Notice of Privacy Practices governs your health information.
Who we are
Strata Outpatient is an adult outpatient mental health practice at 11230 Sorrento Valley Road, Suite 225, San Diego, CA 92121. It is a service of Strata Behavioral Healthcare™. Questions about this policy can be sent to contact@strataoutpatient.com or asked by phone at (858) 567-4246.
What we collect
Information you give us through our forms
The site has two forms. When you use them, we receive what you type.
- The contact form asks for your name, phone number, email address, how you would like to be contacted, and a general reason for getting in touch.
- The insurance verification form asks for the details we need to check your coverage: your name, date of birth, phone number, email address, your insurance carrier, plan type, member ID and group number, optional photos of the front and back of your insurance card, who the care is for, the type of care you are interested in, and an optional message. It also asks whether you consent to be contacted by phone, text message and email.
Both forms are hosted for us by Jotform on its HIPAA-compliant platform. What you submit is encrypted in transit, is stored by Jotform, and is sent to our practice email so a member of our team can respond. Information you send through the insurance verification form is treated as protected health information from the moment we receive it and is handled under our Notice of Privacy Practices.
You are never required to use a form. Everything the forms do can also be done by calling us.
Information collected automatically
- Server logs. Our website is hosted by WordPress.com (Automattic Inc.). Like every web host, it records ordinary technical information about each visit — the IP address the request came from, the page requested, the date and time, and the browser and device type. We use these records only to keep the site running and secure.
- Page view counts. We use Cloudflare Web Analytics to see which pages people read and roughly where visitors come from, so we know what is useful and what is not. It records the page you viewed, the site that referred you, your country, and your browser and device type. It sets no cookies, stores nothing on your device, does not fingerprint your browser, and cannot follow you to other websites or build a profile of you. We see totals, never individuals.
Two pages are never measured at all. We have excluded our insurance verification page and our patient portal page from analytics entirely, because on those two the fact that a particular person loaded the page is itself information about their health. One is where someone hands over insurance details to begin treatment; the other is for people already in our care. Nothing we would learn from measuring them is worth that.
What we do not collect
This site stores nothing in your browser — no cookies of its own, and nothing in local storage. It does not run advertising software and does not build profiles of visitors. We do not sell personal information, and we have not sold it in the past. We do not knowingly collect information from anyone under 18; our services are for adults, and the site is written for adults.
Third-party services on this site
A few parts of the site are provided by other companies. When your browser loads them, it connects directly to that company, which may receive your IP address and set its own cookies under its own privacy policy.
- Cloudflare provides the page view counts described above. It is the one service here that loads on nearly every page, and the one that sets no cookies and stores nothing on your device. Cloudflare privacy policy.
- Jotform provides the contact and insurance verification forms. Jotform privacy policy.
- Google Maps provides the map of our location, and Google Fonts provides the typefaces. Google privacy policy.
- Psychology Today serves the verification seal in our footer, which is fetched from them each time a page loads so it reflects our listing as it stands. Psychology Today privacy policy.
How we use information
We use what you send us for one purpose: to respond to you. That means contacting you the way you asked, answering your question, and — if you asked us to — verifying your insurance benefits and calling you back with the result. We use technical information from server logs to operate and protect the site.
We do not use your information for advertising, and we do not share it with anyone for their marketing. Contact details you provide are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes.
Text messages
If you check the consent box on one of our forms, we may contact you by SMS at the mobile number you gave us about your inquiry, appointments, and related updates. Message frequency varies. Message and data rates may apply. You can stop at any time by replying STOP, and get help by replying HELP or calling us. Mobile phone numbers collected for text messaging are not shared with third parties or affiliates for marketing purposes.
Who we share information with
We share information only as needed to do what you asked, and only with:
- Service providers who process it on our behalf under agreements that limit what they may do with it: Jotform (forms), WordPress.com (hosting) and Cloudflare (page view counts), and for health information, providers with whom we have a HIPAA business associate agreement.
- Authorities, when the law requires it — for example in response to a valid subpoena or court order.
Sharing of health information is governed by our Notice of Privacy Practices, which is more restrictive than this policy.
How long we keep it
Form submissions are kept for as long as we need them to respond to you and to meet our record-keeping obligations. Once a form submission becomes part of your patient record, it is retained under the schedule that applies to medical records. Server logs are kept by our host for a limited period and then deleted.
Your choices and rights
- You can ask what information we hold about you, ask us to correct it, or ask us to delete it, by writing to contact@strataoutpatient.com. We will confirm your identity first and respond within a reasonable time. Health information has its own rights and procedures, described in our Notice of Privacy Practices.
- You can withdraw consent to text messages by replying STOP, and to any contact by telling us.
- You can block the third-party services listed above with your browser’s settings or an ad blocker. The forms will not work with Jotform blocked, but the phone number always will.
Do Not Track. Some browsers send a “Do Not Track” signal. This site behaves the same way whether or not it is present, because there is no cross-site tracking here to turn off: our page view counts are anonymous and cannot follow you anywhere. If you would still rather not be counted, blocking the Cloudflare script with your browser’s settings or an ad blocker will leave the rest of the site working normally.
Security
The site is served over HTTPS, so everything between your browser and our site is encrypted. Forms are hosted on a HIPAA-compliant platform with encryption in transit and at rest. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security — which is one reason the forms deliberately ask for the minimum we need, and why you can always call instead.
Changes to this policy
If we change how the site collects or uses information, we will update this page and change the effective date at the top. Material changes will be noted here for a period after they take effect.
Contact
Strata Outpatient
11230 Sorrento Valley Road, Suite 225
San Diego, CA 92121
(858) 567-4246
contact@strataoutpatient.com