Privacy Policy

Millennium Medical Associates, a DBA of Millennium Health Group, A Professional Medical Corporation

Effective September 19, 2026. This replaces our previous policy dated November 6, 2025.

We're a Beverly Hills practice that evaluates and treats adults with ADHD. This page explains what we collect, who sees it, and what you can do about it.

Your medical record is covered by our Notice of Privacy Practices, not by this page.

That's the document that governs your health information under HIPAA and California law, and it's where your rights to your chart come from. You can read it at millenniummedicalassociates.com/notice-of-privacy-practices, or ask us and we'll send you a copy. This policy covers everything around it: what our sites collect, what we collect when you become a patient, and who we work with.

We run two sites, and they do different things

• millenniummedicalassociates.com is our main site. You read about the practice here and you can send us a message. It doesn't ask you for health information.
• start.millenniummedicalassociates.com is our intake site. This is where you complete your pre-assessment and your medical history, and it is built for health information.

This policy covers both. The sections below say which one is which.

The short version

• Our main site collects contact form submissions and ordinary browsing data. Please don't put health details in the contact form. That's what the intake site is for.
• On the intake site we collect a lot, because a careful evaluation needs a full picture.
• We record video visits. We tell you at the start of every one, and you can say no.
• We don't run advertising or remarketing trackers on either site.
• We don't sell your information, and we don't share it for anyone else's marketing.
• Your mobile number and your text consent are never shared with anyone for marketing, under any circumstances.

What we collect on our main site

If you fill in the contact form, we receive your name, your email address, and whatever you write in the message. That's the only thing our main site asks you for, and it doesn't collect health information.

Like most websites, ours records ordinary technical information when you visit: your IP address, your browser and device, which pages you looked at, and how you found us. The site is hosted on Squarespace, and we use Google Analytics to understand which pages people read.

We don't run advertising or remarketing trackers here. No advertising pixels, no ad conversion tags, no session recording.

A small ask: please don't put health details into the contact form on our main site. It isn't built for that. If you want to tell us about your health, the place for it is the medical history on our intake site, or a call to the office.

What we collect on our intake site

Once you decide to go ahead, you complete a pre-assessment and a medical history at start.millenniummedicalassociates.com. This is the secure place for health information, and it is where the detail belongs.

The medical history is long, and we know it asks a lot of you. Having the full picture is what lets your psychiatric practitioner give you a careful answer, including when the answer is that ADHD isn't the diagnosis.

• Who you are: your legal name, a preferred name if you give us one, your email address, your mobile number, your date of birth, your sex assigned at birth, your gender, your pronouns if you choose to share them, and confirmation that you live in California.
• Your health: your medical and mental health history including your childhood history, mood and anxiety screening, your current medications, substance use, and your health conditions.

When you book, we collect a payment card, which is held by our payment processor rather than by us.

During your video visit, your practitioner checks a photo ID to confirm you're the person we're treating. A copy of that ID is kept in your medical record, and it's protected the same way the rest of your record is.

Our intake site uses ordinary website analytics so we can see where people get stuck in the form. It carries no advertising trackers and no session recording.

Information we get from other places

With your written authorization, we ask previous practitioners for your records, so your practitioner can see your history rather than starting from scratch.

Before prescribing a controlled medication, we check CURES, California's prescription database, and we report prescriptions to it as state law requires. Every practice that prescribes these medications in California does this. It isn't something we do because of anything about you.

Video visit recordings

We record video appointments so your practitioner has an accurate record of your visit.

• You're told at the start of every appointment that it's being recorded.
• If you'd rather not be recorded, tell your practitioner before the visit starts and we won't record it. It won't affect your care.
• Recordings are kept in secure, HIPAA-compliant cloud storage, separate from your chart, and only the people involved in your care can open them. We don't use them for training, quality review, or marketing.
• We keep them at least seven years after your last date of service, the same as your medical record.
• If you want a recording deleted, email care@millenniummedicalassociates.com and we'll take care of it, unless the law requires us to keep it.

How we use your information

We use what you give us to run the practice and to take care of you: scheduling and confirming your appointments, evaluating and treating you, prescribing and managing medication, sending you reminders and paperwork, answering you when you write to us, taking payment, and keeping the records the law requires.

We also look at how people use our sites so we can make them more useful. That's ordinary website analytics and it isn't connected to your medical record.

Who we share it with

We work with companies that help us operate, and some of them handle patient information on our behalf. They fall into these categories: our medical records system, our intake forms, scheduling, payments, video visits, email delivery, text message delivery, secure file storage, our shared inbox, and website hosting.

When we share your information with one of them, we share only what they need in order to do that work, and they can use it only for that.

Outside of that, we share your information when the law requires it, such as reporting prescriptions to CURES, and when you tell us to, such as sending your records to another practitioner.

What we don't do

• We don't sell your personal information, and we haven't.
• We don't share it so that anyone else can market to you.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent, and this information will not be shared with any third parties.
• We don't use your health information or anything from your medical history to build advertising or marketing profiles.

Text messages

When you complete your medical history, you tell us it's okay to text you, and we text you about your intake, your appointments, and your next steps. You can reply STOP at any time and we'll stop. Message and data rates from your carrier may apply.

Cookies and Do Not Track

Our sites use cookies, which are small files your browser stores. Some are needed for a site to work. Others come from Squarespace and from Google Analytics.

You can clear or block cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on. Blocking cookies won't stop you from using our sites or from becoming a patient.

Some browsers can send a Do Not Track signal. There still isn't an agreed standard for what a website should do when it receives one, so like most websites, we don't currently respond to Do Not Track signals. If that changes, we'll update this page.

How long we keep things

We keep medical records at least seven years after your last date of service, or longer where the law requires it. That includes visit recordings.

Contact form submissions and website browsing data are kept only as long as we need them for the purpose we collected them for, and then deleted.

Your rights

If you're a patient, your rights to your medical record come from HIPAA and California's Confidentiality of Medical Information Act, and our Notice of Privacy Practices explains them in full. In short, you can see your record, get a copy, ask us to correct something that's wrong, and ask for an accounting of certain disclosures. California gives you faster timelines than federal law, and the notice spells those out.

If you're a California resident, you also have rights over the information our sites collect that sits outside your medical record. You can ask us what we've collected about you and who we've shared it with, ask us to correct it, ask us to delete it, and ask for a copy. We won't treat you differently for asking. We don't sell or share personal information for cross-context behavioral advertising, so there's nothing for you to opt out of there.

How to make a request

Email care@millenniummedicalassociates.com or use the form at millenniummedicalassociates.com/contact, and tell us what you're asking for.

Because we're handling medical information, we verify who you are before we act on a request. That usually means confirming details we already have on file. If someone is making a request for you, we'll need written proof that you authorized them.

We'll respond within the time the law allows, and we'll tell you if we can't do something and why.

People under 18

We treat adults. We don't knowingly collect information from anyone under 18, and if we learn we have, we delete it. If you think a minor has given us information, email care@millenniummedicalassociates.com.

How we protect your information

We use secure, HIPAA-compliant systems, we limit access to the people who need it to do their jobs, and we hold the companies we work with to the same standard. No system is perfectly secure, and we won't tell you otherwise, but we'd rather explain what we actually do than make a promise nobody can keep.

Changes to this policy

We'll update this page when our practices change, and the effective date at the top tells you when we last did. If we make a change that materially affects how we handle your information, we'll let you know directly rather than expecting you to notice.

How to reach us

Millennium Medical Associates
a DBA of Millennium Health Group, A Professional Medical Corporation
9400 Brighton Way, Suite 303
Beverly Hills, CA 90210

(310) 360-5917
care@millenniummedicalassociates.com