Privacy Policy
Effective Date: September 29, 2026 · Last Updated: September 29, 2026 · Version: PP-2026.09.29-1
Nureli Medical Group, PLLC ("Nureli," "we," "us," or "our") respects your privacy and is committed to protecting information about you.
This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you interact with Nureli, including through our websites, digital services, patient-facing applications, communications, and other services that link to this Privacy Policy.
Nureli provides psychiatric and behavioral healthcare services and operates digital systems that support access to and delivery of those services.
This Privacy Policy is separate from our Notice of Privacy Practices, which describes how Nureli may use and disclose protected health information ("PHI") under HIPAA and describes patient rights concerning PHI. Where information is PHI governed by HIPAA, Nureli handles that information according to HIPAA and our Notice of Privacy Practices.
1. Scope
This Privacy Policy applies to our public website, patient accounts and our patient web application, provider discovery, onboarding, scheduling and appointment reminders, telehealth visits, patient communications, billing and payments, patient support, and other Nureli services that link to it.
It does not replace our Notice of Privacy Practices. If you are a Nureli patient, the Notice of Privacy Practices governs how we use and disclose your PHI. If anything in this Privacy Policy conflicts with the Notice of Privacy Practices as to PHI, the Notice of Privacy Practices controls.
Nureli currently provides psychiatric care. Where appropriate, a provider may recommend or refer you to psychotherapy or other services offered by others.
2. Information We Collect
The information we collect depends on how you interact with us. It falls into three groups: information you give us, information collected automatically, and information we receive from other sources.
3. Information Provided Directly
You may give us information when you contact us, create an account, begin onboarding, schedule an appointment, receive care, or communicate with us. Depending on the service, this may include:
- contact details, such as name, email address, phone number and mailing address;
- account and identity information, such as date of birth and information used to verify your identity;
- health information you share during onboarding, visits and communications, such as symptoms, history, medications and care preferences;
- insurance information, such as your plan and member details, used to check eligibility and bill for care;
- payment information, which is processed by our payment processors;
- electronic signatures and acknowledgments;
- messages and other content you send to us or your care team.
4. Information Collected Automatically
When you use our websites and digital services, we and our service providers may automatically collect limited technical information, such as device and browser type, IP address, approximate location derived from IP address, pages viewed, referring pages, dates and times of access, and diagnostic and security logs.
We use this information to operate, secure, maintain and improve our services. See "Cookies and Similar Technologies" and "Healthcare Information and Tracking Technologies" below.
5. Information Received From Other Sources
We may receive information about you from other sources where permitted by law, such as health plans and eligibility services, referring or treating healthcare professionals, pharmacies and laboratories, identity verification and security processes, and people you authorize to act on your behalf.
6. How We Use Information
We use information to:
- provide, coordinate and document psychiatric care, including telehealth visits, electronic prescribing and laboratory workflows;
- help you find a provider and schedule, confirm, change and remind you of appointments;
- create and secure your account and verify your identity;
- verify insurance eligibility, bill for services and process payments;
- communicate with you about your care, account and our services, and respond to your requests;
- operate, maintain, secure and improve our services, including detecting and preventing fraud, abuse and security incidents;
- comply with law, professional obligations and legal process, and protect the rights, safety and property of patients, Nureli and others.
7. Cookies and Similar Technologies
Our websites use cookies and similar technologies. Some are necessary for security and basic operation, such as keeping a session secure, remembering your privacy choices and protecting against abuse. These necessary technologies cannot be switched off through our privacy preferences because the site cannot work safely without them.
If we use technologies that are not strictly necessary on our public website, we will make them subject to the privacy choices described in the next section and to applicable law.
8. Ketch and Privacy Preferences
Nureli uses Ketch, a privacy and consent preference-management platform, on our public website. Where privacy choices are available, you can manage them through the privacy-preference interface presented on the site.
Our public marketing website is kept separate from our authenticated healthcare and workforce environments. Privacy preference tools used on the public website are not used within those authenticated environments, and technologies used in authenticated healthcare services may be more restricted because those environments may contain PHI.
A choice you make in a website cookie or consent tool is not a HIPAA authorization. It does not permit Nureli to use or disclose your PHI in any way that would otherwise require your written authorization.
9. Healthcare Information and Tracking Technologies
We design our services so that health information you provide in connection with your care is not made available to advertising or analytics technologies on our public website. We do not use or disclose PHI through tracking technologies except as permitted by HIPAA and other applicable law.
10. How We Disclose Information
We disclose information only as described in this Privacy Policy, in our Notice of Privacy Practices for PHI, as you direct, or as permitted or required by law. The categories below describe these disclosures.
11. Service Providers
We use service providers that perform services for us, such as hosting, communications, scheduling and video visits, electronic prescribing, laboratory services, billing, payment processing, identity and security, and customer support. They may receive information only as needed to perform services for us, under contracts that restrict their use of it. Where a service provider handles PHI, it does so under a business associate agreement where HIPAA requires one.
12. Healthcare Operations and Care Coordination
We share information with healthcare professionals, pharmacies, laboratories and health plans involved in your care or payment for it, and use it to run our practice, as described in our Notice of Privacy Practices.
13. Legal and Safety Disclosures
We may disclose information when we believe in good faith that disclosure is required or permitted by law, such as to comply with legal process, respond to lawful requests from public authorities, meet reporting obligations, or prevent a serious threat to health or safety.
14. Business Transactions
If Nureli is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to applicable law, including HIPAA for PHI.
15. User-Directed and Authorized Disclosures
We disclose information to people or organizations you direct us to, or when you give us a valid authorization. You may revoke a HIPAA authorization in writing as described in our Notice of Privacy Practices.
16. Sensitive and Health Information
Mental health information is sensitive. We limit access to it to people who need it to provide care, operate our services or meet legal obligations. Some records, such as certain substance use disorder records, receive additional legal protections, which are described in our Notice of Privacy Practices.
Nureli does not sell PHI. Nureli does not use or disclose PHI for marketing in a manner requiring HIPAA authorization unless the legally required authorization has been obtained.
State consumer privacy laws may define terms such as "sale," "sharing," "targeted advertising" or "consumer health data" differently from HIPAA. Where those laws apply, Nureli will provide the rights and notices they require.
17. Payments
Payments are processed by payment processors. Nureli does not store full payment card numbers on its own systems. We keep records of charges, balances and payments as needed for billing, accounting and legal purposes.
18. Communications
We may contact you by email, text message, phone or secure message about appointments, your care, your account, billing and our services. Message and data rates may apply to text messages. You can opt out of non-essential communications. Some messages, such as those about your care, account security or legal notices, are necessary while you use our services.
19. Authentication and Account Security
We use authentication and verification measures to protect accounts. Keep your sign-in credentials confidential and tell us promptly if you believe your account has been accessed without permission.
20. Security
Nureli maintains administrative, physical, and technical safeguards designed to protect information appropriate to the sensitivity of the information and the risks associated with its processing. These include access controls, authentication, encryption, security monitoring, audit logging, workforce controls, vendor oversight and incident response.
No method of transmission or storage is completely secure, and we cannot guarantee the security of information. If a breach affects your information, we will notify you as required by law.
21. Data Retention
We keep information for as long as needed for the purposes described in this Privacy Policy, including to provide care and meet medical record retention, legal, accounting and security obligations, and then delete or de-identify it in line with applicable law.
22. Privacy Choices and Rights
You can manage available public-website privacy choices through our privacy-preference interface, opt out of non-essential communications, and contact us about your information. If you are a patient, your HIPAA rights regarding PHI are described in our Notice of Privacy Practices.
We may need to verify your identity before responding to a request. We will not discriminate against you for exercising a privacy right.
23. State-Specific Privacy Rights
Depending on where you live, state law may give you additional rights, such as rights to access, correct or delete certain personal information, or to opt out of certain processing. Many state laws exempt PHI governed by HIPAA. Where a state law applies to information we hold, we will honor the rights it provides. Where a state requires additional disclosures, we will publish a state-specific privacy supplement to this Privacy Policy.
24. HIPAA and the Notice of Privacy Practices
As a healthcare provider, Nureli is subject to HIPAA. Our Notice of Privacy Practices describes how we may use and disclose PHI and your rights regarding it.
Read it here: Notice of Privacy Practices.
25. Children's and Minors' Privacy
Our public website is not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without appropriate consent. Where Nureli provides care to a minor, information is handled according to applicable law, which may give parents or guardians, or the minor, particular rights.
26. External Websites and Services
Our services may link to websites and services we do not control, such as those of pharmacies, laboratories, health plans or payment processors. Their privacy practices are governed by their own policies.
27. Automated Systems and Technology
We may use automated systems to support administrative and operational workflows, security, scheduling, provider matching and healthcare workflows. These systems support, and do not replace, the professional judgment of licensed clinicians. Clinical decisions about your care are made by licensed professionals.
28. Changes to the Privacy Policy
We may update this Privacy Policy. When we do, we will change the "Last Updated" date above and, where required by law, give you additional notice.
29. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact:
- Privacy Officer, Nureli Medical Group, PLLC
- Email: privacy@nurelimed.com
- Phone: 972-945-8840
- Mail: 2340 E. Trinity Mills Rd., STE 300, Carrollton, Texas 75006