PRIVACY POLICY
YOU BRIDGE HEALTH
Effective Date: February 17, 2026
Last Updated: February 17, 2026
Website: https://www.youbridgehealth.org/
================================================================================
1. INTRODUCTION
================================================================================
Welcome to You Bridge Health. Your privacy matters to us, and we are committed to protecting your personal information. This Privacy Policy explains how You Bridge Health ("we," "us," or "our") collects, uses, stores, shares, and protects your personal and health information when you visit our website, use our services, or communicate with us.
You Bridge Health is a psychiatric mental health practice located in Iselin, New Jersey, providing medication management, psychiatric evaluations, supportive focused therapy, and life coaching services. We are committed to complying with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), the New Jersey Identity Theft Prevention Act, and other applicable regulations.
By using our website, booking an appointment, or receiving services from You Bridge Health, you acknowledge that you have read and understood this Privacy Policy.
================================================================================
2. CONTACT INFORMATION
================================================================================
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:
Practice Name: You Bridge Health
Address: 485C US-1, Suite 100 - Room 101, Iselin, NJ 08830
Phone: (732) 447-9470
Fax: (732) 790-8133
Email: contact@ybh.sprucecare.com
Website: https://www.youbridgehealth.org/
Privacy Officer: Adedoyin Kolawole, PMHNP (Founder)
================================================================================
3. INFORMATION WE COLLECT
================================================================================
We collect the following categories of personal information in order to provide you with quality care and operate our practice effectively:
A. Personal Identifying Information
- Full name
- Date of birth
- Email address
- Phone number
- Mailing address
- Emergency contact information
B. Health and Clinical Information
- Mental health history and diagnoses
- Psychiatric evaluation results
- Treatment plans and progress notes
- Medication history and prescriptions
- Lab and genetic testing results
- Therapy and session notes
- Information related to ADHD, anxiety, depression, trauma, OCD, bipolar disorder, psychosis, schizophrenia, and other conditions treated at our practice
C. Insurance and Billing Information
- Health insurance plan details and member ID
- Credit card or payment card information
- Health savings account (HSA) card details
- Billing address
- Superbill and claims information
D. Appointment and Communication Information
- Appointment scheduling details
- Intake forms and questionnaires
- Correspondence via phone, email, fax, video calls, and the patient portal
- Visit summaries and personalized provider letters
E. Technical and Website Information
- IP address
- Browser type and version
- Device type
- Pages visited on our website
- Date and time of website visits
- Referring website URLs
- Cookie and tracking data (see Section 11 for details)
================================================================================
4. HOW WE COLLECT YOUR INFORMATION
================================================================================
We collect personal information through the following methods:
- Website contact forms (e.g., the "Contact (Website Lead)" form on our Contact/Fees page)
- Online appointment booking through IntakeQ (https://intakeq.com/booking/youbridgehealth)
- Patient portal (via IntakeQ at https://youbridgehealth.intakeq.com/portal)
- Electronic Medical Records (EMR) system
- Telehealth and video call platforms used for virtual appointments
- In-person visits at our Iselin, NJ office
- Phone calls and voicemails
- Fax transmissions
- Email communications via Spruce Care (contact@ybh.sprucecare.com)
- Insurance verification and claims submissions
- Cookies and website analytics tools (see Section 11)
- Referrals from other healthcare providers (with your consent)
================================================================================
5. WHY WE COLLECT AND HOW WE USE YOUR INFORMATION
================================================================================
We collect and use your information for the following purposes:
A. Providing Clinical Care
- Conducting psychiatric evaluations and assessments
- Developing and managing treatment plans
- Prescribing and managing medications
- Providing supportive focused therapy and life coaching
- Ordering and reviewing lab or genetic tests
- Sending personalized visit summaries after each session
B. Appointment Management
- Scheduling, confirming, rescheduling, and canceling appointments
- Sending appointment reminders
- Managing the patient portal
C. Billing and Payment Processing
- Processing payments for services rendered
- Submitting insurance claims on your behalf
- Generating superbills for out-of-network reimbursement
- Collecting co-pays, deductibles, and outstanding balances
D. Communication
- Responding to inquiries submitted through our website, phone, email, or fax
- Following up on your care between appointments
- Providing resources and educational materials
E. Legal and Regulatory Compliance
- Complying with HIPAA and other federal and state laws
- Responding to lawful requests from courts, regulatory agencies, or law enforcement
- Maintaining records as required by New Jersey health regulations
F. Quality Improvement
- Improving our website, services, and patient experience
- Conducting internal quality assurance and practice audits
G. Website Operations and Analytics
- Understanding how visitors use our website
- Improving website functionality and content
- Ensuring website security
================================================================================
6. WHO WE SHARE YOUR INFORMATION WITH
================================================================================
We do not sell your personal information to any third party. We may share your information with the following parties only as necessary to provide care, process payments, or comply with the law:
A. Healthcare Collaborators
- Other healthcare providers involved in your treatment (with your written consent), such as therapists, primary care physicians, or specialists
B. Technology and Service Providers
- IntakeQ: Online booking, intake forms, and patient portal
- Spruce Care: Secure clinical communication platform
- Electronic Medical Records (EMR) system for clinical documentation
- Payment processors for credit card and HSA transactions
- Duda (website hosting platform, via lirp.cdn-website.com)
C. Insurance Companies
- Your health insurance provider for claims processing, preauthorization, and coordination of benefits (for in-network clients)
D. Legal and Regulatory Authorities
- Courts, government agencies, or law enforcement when required by a valid subpoena, court order, or legal obligation
- State licensing boards or regulatory bodies as required by law
- As necessary for the protection of public health or safety
E. Business Operations
- IT service providers for technical support and maintenance
- Accounting or billing professionals for financial management
All third-party service providers with access to Protected Health Information (PHI) are required to sign Business Associate Agreements (BAAs) in compliance with HIPAA, obligating them to maintain the confidentiality and security of your data.
================================================================================
7. HOW LONG WE RETAIN YOUR INFORMATION
================================================================================
We retain your personal and health information in accordance with applicable federal and state laws:
- Adult client clinical records: A minimum of seven (7) years after the last date of service, or as otherwise required by New Jersey law and applicable regulations.
- Minor client clinical records: A minimum of seven (7) years after the last date of service or until the minor reaches the age of 23, whichever is longer.
- Billing and financial records: A minimum of seven (7) years, or as required by tax and insurance regulations.
- Website analytics data: Retained in accordance with the data retention policies of our analytics providers and typically anonymized or aggregated.
- Contact form submissions: Retained for as long as necessary to respond to your inquiry and maintain records of communications.
When records are no longer required to be retained, they will be securely destroyed using methods appropriate to the format (e.g., secure electronic deletion, shredding of paper records).
================================================================================
8. HOW WE PROTECT YOUR INFORMATION
================================================================================
We take the security of your information seriously and implement the following safeguards:
A. Administrative Safeguards
- Staff training on HIPAA compliance, privacy practices, and data security
- Designated Privacy Officer to oversee privacy-related matters
- Business Associate Agreements (BAAs) with all third-party vendors who handle PHI
- Regular review and updates to privacy and security policies
B. Technical Safeguards
- Encryption of electronic data in transit and at rest
- Secure, password-protected access to all electronic health records and systems
- Role-based access controls limiting data access to authorized personnel only
- Use of HIPAA-compliant platforms for telehealth, communication, and scheduling (IntakeQ, Spruce Care)
- Firewalls and security monitoring on practice systems
C. Physical Safeguards
- Secure office location at 485C US-1, Suite 100 - Room 101, Iselin, NJ 08830
- Locked storage for any paper records
- Restricted physical access to areas where client information is stored or accessed
================================================================================
9. DATA BREACH NOTIFICATION PROCEDURE
================================================================================
In the event of a breach of unsecured Protected Health Information (PHI), You Bridge Health will comply with the HIPAA Breach Notification Rule and applicable New Jersey state laws. Our breach notification procedure is as follows:
- We will investigate any suspected breach promptly and take immediate steps to mitigate harm.
- Affected individuals will be notified in writing without unreasonable delay, and no later than sixty (60) days from the date the breach is discovered.
- Notification will include a description of the breach, the types of information involved, steps individuals should take to protect themselves, a description of what we are doing to investigate and mitigate the breach, and contact information for further inquiries.
- If the breach affects 500 or more individuals, we will notify the U.S. Department of Health and Human Services (HHS) and prominent media outlets in the affected area as required by law.
- If the breach affects fewer than 500 individuals, we will report it to HHS as part of our annual breach log submission.
- We will also comply with the New Jersey Identity Theft Prevention Act notification requirements where applicable.
================================================================================
10. YOUR RIGHTS
================================================================================
As a client of You Bridge Health, you have the following rights regarding your personal and health information:
A. Right to Access
You have the right to request access to and obtain a copy of your health records and other personal information we maintain about you. We will respond to your request within thirty (30) days.
B. Right to Amend
You have the right to request that we correct or update inaccurate or incomplete information in your records. We may deny your request in certain circumstances permitted by law but will provide a written explanation if we do.
C. Right to Restrict
You may request that we restrict how your information is used or disclosed for treatment, payment, or healthcare operations. We are not required to agree to all restriction requests, but we will honor a request to restrict disclosure to your health plan if you pay for a service in full out of pocket.
D. Right to Confidential Communications
You may request that we communicate with you through a specific method or at a specific location (for example, calling your cell phone only or sending correspondence to an alternate address).
E. Right to an Accounting of Disclosures
You have the right to request a list of certain disclosures we have made of your health information for purposes other than treatment, payment, or healthcare operations.
F. Right to Receive a Copy of This Policy
You have the right to receive a paper or electronic copy of this Privacy Policy at any time upon request.
G. Right to Revoke Authorization
If you have previously provided written authorization for a specific use or disclosure of your information, you may revoke that authorization at any time in writing. Revocation will not affect disclosures already made in reliance on your prior authorization.
H. Right to File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with:
- You Bridge Health, by contacting our Privacy Officer (see Section 2)
- The U.S. Department of Health and Human Services Office for Civil Rights:
Website: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
Phone: 1-800-368-1019
You will not be retaliated against for filing a complaint.
Exceptions: In certain circumstances, we may be unable to fulfill your request in whole or in part. For example, we may be required by law to retain certain records, or we may deny a request to amend records if we determine the information is accurate and complete. We will provide you with a written explanation in such cases.
To exercise any of these rights, please contact us using the information in Section 2. We may require you to submit your request in writing and verify your identity before processing your request.
================================================================================
11. COOKIES AND TRACKING TECHNOLOGIES
================================================================================
Our website (https://www.youbridgehealth.org/) uses cookies and similar tracking technologies to improve your browsing experience and help us understand how our site is used.
A. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help the website recognize your device, remember your preferences, and provide a better user experience.
B. Types of Cookies We Use
- Essential Cookies: Required for the website to function properly (e.g., navigation, security, form submissions). These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website, including which pages are visited most frequently and how visitors navigate between pages. This data is collected in aggregate form and does not personally identify you.
- Functional Cookies: Remember your preferences and settings to enhance your browsing experience.
- Third-Party Cookies: Our website is hosted on the Duda platform, which may set its own cookies. Additionally, embedded content (such as YouTube videos on our Resources/FAQ page) may set third-party cookies.
C. How to Manage Cookies
You can control or disable cookies through your web browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.
To learn more about managing cookies, visit:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471
- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/manage-cookies-in-microsoft-edge
D. Do Not Track
Some web browsers send "Do Not Track" signals. Our website does not currently respond to Do Not Track signals, as there is no universal standard for how websites should respond to these signals.
================================================================================
12. NOTICE OF PRIVACY PRACTICES (HIPAA)
================================================================================
This section constitutes our Notice of Privacy Practices (NPP) as required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
A. Our Duty to Protect Your Health Information
We are required by law to maintain the privacy of your Protected Health Information (PHI), provide you with this notice of our legal duties and privacy practices, and notify you in the event of a breach of unsecured PHI. We are required to follow the terms of this notice currently in effect.
B. How We May Use and Disclose Your PHI
We may use and disclose your PHI for the following purposes:
Treatment: We may use or share your health information to provide, coordinate, or manage your psychiatric care and related services. For example, we may share your information with another provider involved in your treatment or include information in your personalized visit summary.
Payment: We may use or share your health information to bill and collect payment for your services from you, your insurance company, or a third-party payer. For example, we may share diagnosis and treatment information with your insurance company to process a claim.
Healthcare Operations: We may use or share your health information for practice management activities such as quality improvement, staff training, compliance audits, and business planning.
C. Other Permitted Uses and Disclosures Without Your Authorization
We may use or disclose your PHI without your written authorization in the following situations, as permitted or required by law:
- When required by federal, state, or local law
- For public health activities (e.g., reporting communicable diseases)
- To report suspected abuse, neglect, or domestic violence
- For health oversight activities (e.g., audits or investigations)
- In response to a court order or subpoena
- To avert a serious threat to your health or safety or the health or safety of others
- For workers' compensation claims
- For specialized government functions (e.g., military, veterans, national security)
- To coroners, medical examiners, and funeral directors as necessary
D. Uses and Disclosures Requiring Your Written Authorization
For uses and disclosures not described in this notice, we will obtain your written authorization before sharing your PHI. This includes:
- Marketing purposes
- Sale of your PHI
- Most uses of psychotherapy notes (if applicable)
- Other purposes not covered by this notice
You may revoke your authorization at any time in writing.
E. Your Rights Under HIPAA
Your rights are described in detail in Section 10 of this Privacy Policy.
================================================================================
13. WEBSITE ACCESSIBILITY (USERWAY)
================================================================================
You Bridge Health is committed to ensuring that our website is accessible to all visitors, including individuals with disabilities. To support this commitment, we use the Accessibility by UserWay widget on our website.
A. What Is UserWay?
UserWay is an AI-powered accessibility solution designed to help websites comply with the Americans with Disabilities Act (ADA), Web Content Accessibility Guidelines (WCAG 2.1), Section 508, and European EN 301 549 accessibility standards.
B. Features Included in the UserWay Accessibility Widget
The UserWay widget provides our website visitors with the ability to customize their browsing experience through the following features:
- Contrast Adjustment: Allows users to change the color contrast of the website, including options such as dark contrast, light contrast, and high contrast, to improve readability for individuals with visual impairments.
- Text Resizing: Allows users to increase or decrease the size of text displayed on the website to improve readability.
- Text Spacing: Allows users to increase the spacing between text characters and lines for improved legibility.
- Link Highlighting: Highlights all links on a page to make navigation easier for users who may have difficulty identifying clickable elements.
- Readable Font: Switches the website fonts to a more readable and accessible typeface.
- Cursor Options: Provides larger cursor or reading guide options for users with low vision or motor impairments.
- Accessibility Profiles: Offers pre-defined accessibility profiles (such as for seizure-safe, vision-impaired, ADHD-friendly, cognitive disability, and keyboard navigation users) to quickly adjust multiple settings at once.
- Page Structure and Navigation: Provides tools that improve keyboard navigation and help users understand the structure of the page.
- Language Support: Supports 40+ languages to help non-English-speaking visitors access accessibility features.
- Screen Reader Compatibility: Enhances compatibility with screen readers for visually impaired users.
C. How to Access the UserWay Widget
The UserWay accessibility icon appears on our website (typically as a small icon at the corner of the screen). Click or tap the icon to open the accessibility menu and customize your settings. You can reset all accessibility settings at any time using the "Reset All" option within the widget.
D. UserWay and Your Privacy
UserWay has adopted a Privacy by Design approach. The UserWay widget does not collect any personal information from users interacting with the widget. Accessibility preference settings are stored locally on your device and are not transmitted to You Bridge Health or UserWay. For more information, you may review UserWay's Privacy Policy at: https://userway.org/privacy/
E. Feedback on Accessibility
If you experience any accessibility issues on our website or have suggestions for improvement, please contact us at:
Email: contact@ybh.sprucecare.com
Phone: (732) 447-9470
We are committed to continually improving the accessibility of our website for all users.
================================================================================
14. SOCIAL MEDIA POLICY
================================================================================
You Bridge Health maintains a presence on social media platforms, including YouTube (youtube.com/@YouBridgeHealth), for educational and informational purposes.
Please be aware of the following:
- Our social media pages are public spaces. Do not share personal health information, appointment details, or other sensitive information in comments, direct messages, or posts on our social media channels.
- We are not responsible for the privacy practices of third-party social media platforms. We encourage you to review the privacy policies of any social media platform you use.
- Interaction with our social media content (liking, commenting, sharing) does not constitute a provider-client relationship.
- We may share general mental health tips, educational content, and practice updates on our social media pages. We will never share identifiable client information on social media.
- If you need to discuss personal health matters, please contact us directly by phone, email, or through our secure patient portal rather than through social media.
================================================================================
15. TELEHEALTH AND VIRTUAL SERVICES
================================================================================
You Bridge Health offers virtual appointments via telehealth. When you participate in a virtual visit, the following applies:
- We use HIPAA-compliant telehealth platforms to conduct virtual appointments.
- Video and audio from telehealth sessions are not recorded unless you are informed and provide written consent.
- The same privacy protections that apply to in-person visits apply to your telehealth sessions.
- You are responsible for ensuring you are in a private, secure location during your telehealth appointment.
- While we take every reasonable precaution to secure telehealth communications, no electronic communication is completely risk-free. By using our telehealth services, you acknowledge this inherent limitation.
================================================================================
16. MINORS AND PARENTAL CONSENT
================================================================================
For clients who are minors (under the age of 18), a parent or legal guardian must provide consent for treatment and for the collection and use of the minor's personal and health information, except in circumstances where New Jersey law permits minors to consent to their own treatment.
Parents or guardians may exercise privacy rights on behalf of their minor child, subject to any applicable legal exceptions (such as when a minor has the legal right to consent to their own care).
================================================================================
17. THIRD-PARTY LINKS
================================================================================
Our website may contain links to third-party websites, including but not limited to IntakeQ (for booking and patient portal), YouTube, and insurance company websites. We are not responsible for the privacy practices, content, or security of these third-party sites. We encourage you to review the privacy policies of any third-party website you visit.
================================================================================
18. STATE-SPECIFIC DISCLOSURES (NEW JERSEY)
================================================================================
As a healthcare practice operating in the State of New Jersey, we comply with all applicable New Jersey privacy and health information laws, including:
- New Jersey physician-patient privilege and mental health confidentiality statutes
- New Jersey Identity Theft Prevention Act (requiring notification in case of a data breach involving personal information)
- New Jersey regulations regarding retention of medical records
- Any other applicable New Jersey Department of Health or Division of Consumer Affairs regulations
If there is a conflict between federal (HIPAA) and New Jersey state law, the law providing greater privacy protection to the client will apply.
================================================================================
19. UPDATES TO THIS PRIVACY POLICY
================================================================================
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
- The "Last Updated" date at the top of this policy will be revised.
- If changes are significant, we will make reasonable efforts to notify you, which may include posting a notice on our website, sending an email notification, or informing you at your next appointment.
- The updated policy will be effective immediately upon posting to our website unless otherwise stated.
- We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
- A copy of the most current Privacy Policy is always available on our website and upon request.
================================================================================
20. CONSENT
================================================================================
By using our website, scheduling an appointment, submitting information through our contact forms, or receiving services from You Bridge Health, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.
For uses and disclosures of your health information not described in this policy, we will obtain your written authorization before proceeding.
If you do not agree with any part of this Privacy Policy, please do not use our website or services, and contact us to discuss your concerns.
================================================================================
21. QUESTIONS AND COMPLAINTS
================================================================================
If you have questions about this Privacy Policy, want to exercise your rights, or wish to file a complaint, please contact:
You Bridge Health
Privacy Officer: Adedoyin Kolawole, PMHNP
Address: 485C US-1, Suite 100 - Room 101, Iselin, NJ 08830
Phone: (732) 447-9470
Fax: (732) 790-8133
Email: contact@ybh.sprucecare.com
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
Website: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
Phone: 1-800-368-1019
You will not be penalized or retaliated against for filing a complaint.
================================================================================
Copyright 2026 You Bridge Health. All rights reserved.
================================================================================
