Privacy Policy for Eunice Rea - Therapist

1. Scope of This Policy

This Privacy Policy applies to information collected through our website, online forms, contact requests, appointment scheduling systems, patient portals, telehealth platforms, email or text communications, and in the course of providing therapy, counseling, consultation, coaching, education, or related support services.

This Policy is intended to provide a clear overview of our privacy practices. It does not replace any separate informed consent, Notice of Privacy Practices, client services agreement, telehealth consent, or professional disclosure statement that you may receive as a client or prospective client.

If there is any conflict between this website Privacy Policy and a healthcare-specific notice provided to you as a patient or client, the healthcare-specific notice will control to the extent required by applicable law.

2. Information We Collect

2.1 Information You Voluntarily Provide

We may collect personal information that you choose to provide, including:

• Name, preferred name, spouse/partner name, child or family member names, and household details
• Email address, mailing address, phone number, and emergency contact information
• Relationship or family status information relevant to marriage, couples, or family therapy
• Appointment requests, intake forms, consultation requests, and scheduling information
• Insurance details, billing information, payment information, and reimbursement documentation
• Health information, mental health history, treatment goals, medications, symptoms, and clinical notes where applicable
• Messages you send through contact forms, secure portal messages, text messages, voicemail, or email
• Information you share during sessions, assessments, consultations, telehealth meetings, or follow-up communications

2.2 Information Collected Automatically

When you visit our website, we may automatically collect limited technical and usage data, such as:

• IP address
• Browser type and version
• Device type, operating system, and language settings
• Pages viewed, time spent on pages, referring websites, click paths, and session timing
• Approximate location based on IP address
• Cookie identifiers, analytics identifiers, and similar online tracking information

2.3 Sensitive Information

Because therapy services may involve highly sensitive personal information, we may receive or maintain information concerning mental health, relationship history, family dynamics, trauma history, stressors, parenting concerns, and other deeply personal matters. We treat such information with heightened care and only use or disclose it as allowed by applicable law, professional ethics, your consent, and our practice policies.

2.4 Information From Other Sources

We may receive information from third parties, including:

• Referral sources such as physicians, attorneys, schools, clergy, or other therapists, where authorized
• Insurance companies, employee assistance programs, or billing services
• Scheduling providers, telehealth vendors, secure portals, payment processors, and website hosts
• Family members or legal guardians when involved in care, subject to consent and applicable law

3. How We Use Information

We may use personal information for the following purposes:

• To respond to inquiries and determine whether our services may be appropriate
• To schedule, confirm, reschedule, or cancel appointments
• To provide therapy, counseling, consultation, psychoeducation, or related services
• To complete intake, assessment, diagnosis, treatment planning, and documentation
• To communicate with you about services, policies, forms, or care coordination
• To process payments, maintain records, submit claims, or support billing and collections
• To operate, maintain, and improve our website and service delivery systems
• To comply with legal, ethical, insurance, accreditation, licensing, and regulatory obligations
• To protect safety, prevent fraud, investigate misuse, or enforce our terms and practice policies
• To create de-identified, aggregated, or anonymized usage information where lawful

4. Legal Bases for Processing

Depending on your location and the laws that apply, we may process personal information based on one or more of the following legal grounds:

• Your consent
• Performance of a contract or taking steps at your request before entering into a contract
• Compliance with legal obligations
• Protection of vital interests
• Provision of healthcare or social care, where applicable
• Our legitimate interests in operating, securing, and improving our practice and website, where permitted by law

Where consent is the basis for processing, you may withdraw consent at any time, subject to legal, ethical, and operational limitations.

5. Therapy Confidentiality

Confidentiality is a core part of therapy. Information disclosed during therapy is generally treated as confidential in accordance with professional ethics, applicable laws, and our clinical policies. However, confidentiality is not absolute.

5.1 Standard Limits of Confidentiality

We may disclose information without your authorization when permitted or required by law, including:

• When there is a risk of serious harm to you or another person
• When abuse, neglect, or exploitation of a child, elder, dependent adult, or vulnerable person must be reported
• When records are required by court order, subpoena, warrant, or other lawful process, subject to available protections
• When disclosure is needed for public health, health oversight, or lawful investigations
• When disclosure is necessary for billing, claims processing, audits, or healthcare operations where permitted

5.2 Couples, Marriage, and Family Therapy

In marriage counseling, couples counseling, family therapy, and parent-child work, privacy and confidentiality can be more complex because more than one person may participate in services.

Our practice may treat the couple, marriage, or family unit as the client rather than any one individual alone, depending on the service model. Information shared by one participant may, under our policy, be clinically relevant to joint work. In some cases, we may not agree to keep “secrets” from one partner or family member if doing so would interfere with treatment integrity, fairness, or safety. Specific confidentiality expectations for couples and family work should be reviewed in our informed consent materials and discussed directly with your therapist.

5.3 No Guarantee of Email or Text Confidentiality

Unless expressly designated as secure, ordinary email, standard text messaging, and some voicemail systems may not be fully encrypted or secure. Please avoid sending highly sensitive clinical details through non-secure channels unless you understand and accept those risks.

6. How We Share Information

We do not sell your personal information. We may share information only as reasonably necessary with:

• Practice staff, clinicians, interns, supervisors, or administrative support personnel who need access to perform their duties
• Business associates and service providers such as EHR vendors, secure portal providers, telehealth platforms, payment processors, website hosts, email systems, scheduling services, billing companies, and IT support providers
• Insurance carriers, employee assistance programs, healthcare providers, pharmacies, or other treatment partners where authorized or permitted
• Attorneys, accountants, auditors, accreditors, and regulators when necessary for lawful or professional compliance
• Emergency contacts, legal guardians, parents, or family members when legally authorized or clinically appropriate
• Government agencies, law enforcement, courts, or protective services when required or permitted by law
• Successor entities in the event of a practice reorganization, sale, merger, acquisition, or transition, subject to applicable confidentiality and legal obligations

We require service providers to use appropriate safeguards and, where applicable, to comply with contractual privacy and security obligations.

7. HIPAA and Health Privacy

If our practice is a “covered entity” or “business associate” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), or if particular services fall under HIPAA-regulated workflows, certain health information may be protected as Protected Health Information (“PHI”).

In that case, our use and disclosure of PHI may also be governed by a separate Notice of Privacy Practices. That notice describes how medical or mental health information may be used and disclosed, as well as your rights regarding such information.

Not all website interactions are necessarily subject to HIPAA, and not every form submitted through a public-facing website is automatically treated as PHI unless and until it enters our clinical systems. For that reason, website privacy and healthcare privacy rules may overlap but are not always identical.

8. Children, Teens, and Families

8.1 Website Visitors Under 18

Our website is not intended for children to use independently without appropriate parental or guardian involvement unless otherwise permitted by applicable law.

8.2 Services for Minors

When therapy is provided to a minor, privacy rights may depend on state law, the age of the minor, the type of treatment, parental rights, custody arrangements, court orders, and the clinical judgment of the treating therapist. In some situations, parents or legal guardians may have rights to certain information. In others, a minor may be entitled to confidential care.

For family therapy and services involving children or adolescents, we may collect information from parents, legal guardians, schools, pediatricians, or other care providers as permitted by law and appropriate releases.

8.3 Custody and Family Disputes

If parents are separated, divorced, or in a custody dispute, privacy, consent, and access to records may be affected by court orders, legal decision-making authority, and state law. We reserve the right to request legal documentation and to define practice rules governing participation, communication, consent, and access to records.

9. Cookies and Tracking Technologies

Our website may use cookies, pixels, server logs, and similar technologies to support essential website functions, remember preferences, analyze traffic, improve performance, and understand how visitors use our website.

9.1 Types of Cookies We May Use

• Essential cookies: necessary for website operation, security, and basic functionality
• Analytics cookies: used to understand website usage, navigation, and performance
• Preference cookies: used to remember choices such as language or accessibility settings
• Advertising or marketing cookies: only if used, to support campaign measurement or audience insights

9.2 Consent and Controls

Depending on the laws that apply, you may be presented with a cookie banner or consent tool that allows you to accept, reject, or customize certain categories of cookies. You may also control cookies through your browser settings, but doing so may affect website functionality.

9.3 Analytics and Session Data

We may use analytics tools to understand aggregate visitor behavior, page popularity, traffic sources, and device performance. Where required by law, we will seek consent before activating non-essential analytics or tracking technologies.

10. Communications and Forms

10.1 Contact Forms

If you submit a contact form, consultation request, or appointment inquiry, we may use the information you provide to respond to you, evaluate fit for services, and maintain administrative records.

10.2 Email, Text, and Phone Communications

We may contact you by phone, voicemail, email, secure portal, or text message for purposes such as:

• Appointment scheduling and reminders
• Administrative follow-up
• Billing notifications
• Practice updates relevant to your care or inquiry

By providing contact information, you acknowledge that communications may occur through the channels you authorize. Message and data rates may apply to text messaging.

10.3 Marketing Communications

If we offer newsletters, educational updates, event invitations, or marketing communications, we will send them in accordance with applicable law. You may opt out of marketing emails at any time using the unsubscribe link or by contacting us directly. Operational or client-care communications may still be sent where necessary.

11. Telehealth and Digital Services

If we provide telehealth or virtual therapy services, personal information may be processed through video platforms, secure messaging systems, portals, digital forms, and electronic health record systems.

• We may use vendors that provide encrypted or security-enhanced video communications
• Session quality may depend on your device, network, browser, and local environment
• You are responsible for choosing a private setting on your end when possible
• Telehealth platforms may generate technical logs, metadata, or account records needed for service delivery

Separate telehealth consent forms may describe additional privacy, technology, emergency, and cross-jurisdiction considerations.

12. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These safeguards may include:

• Access controls and role-based permissions
• Password protection and authentication safeguards
• Encryption in transit and, where available, at rest
• Secure hosting, backups, and vendor due diligence
• Policies governing confidentiality, device use, and record handling
• Training and supervision of workforce members

No internet transmission, cloud platform, email system, or data storage solution can be guaranteed to be 100% secure. Accordingly, while we take security seriously, we cannot promise absolute security.

13. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, to provide services, to comply with legal, regulatory, tax, accounting, insurance, risk management, and professional recordkeeping obligations, and to resolve disputes or enforce agreements.

Retention periods may vary depending on the nature of the information, including whether it involves:

• General website inquiries
• Scheduling or billing records
• Clinical documentation and therapy records
• Insurance and reimbursement records
• Consent forms and legal authorizations
• Minor clients, for whom retention rules may extend beyond age of majority

When information is no longer required, we will take reasonable steps to delete, de-identify, anonymize, or securely destroy it in accordance with applicable law and professional standards.

14. Your Privacy Rights

Depending on your location and the nature of the information at issue, you may have rights including:

• The right to know whether we collect, use, or disclose personal information about you
• The right to request access to certain personal information
• The right to request correction of inaccurate information
• The right to request deletion of certain personal information, subject to exceptions
• The right to request a copy of your data in a portable format where applicable
• The right to limit or object to certain processing in some jurisdictions
• The right to withdraw consent where processing is based on consent
• The right not to be discriminated against for exercising privacy rights

These rights are not absolute. Legal, ethical, licensing, medical records, insurance, public safety, litigation, and practice-management obligations may limit what we can provide, modify, or delete.

To exercise privacy rights, please contact us using the information in the Contact section below. We may take reasonable steps to verify your identity before responding.

15. State and International Rights

15.1 U.S. State Privacy Rights

If you reside in a state with consumer privacy legislation, such as California or another state with similar privacy laws, you may have rights concerning access, deletion, correction, portability, and the handling of sensitive personal information, subject to healthcare-related exemptions and exceptions.

Some state laws may exempt certain health information, HIPAA-regulated data, or provider records from part or all of the statute. Even where an exemption applies, we will still seek to handle information responsibly and transparently.

15.2 “Do Not Sell” / “Do Not Share”

We do not sell personal information for monetary consideration. If applicable law defines certain analytics or advertising practices as “sharing” for cross-context behavioral advertising, and if we engage in those practices, we will provide any required notice and opt-out mechanism.

15.3 International Users

If you access our website from outside the United States, please note that information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate. By using our website or submitting information, you acknowledge such transfers subject to applicable law.

16. Third-Party Services and Links

Our website may integrate or link to third-party services such as scheduling tools, payment processors, maps, social media platforms, embedded media, telehealth vendors, secure client portals, website hosts, form providers, or analytics vendors.

We are not responsible for the privacy, security, content, or practices of third-party websites or services that we do not own or control. We encourage you to review the privacy policies of any external platforms you use.

17. Data Incident Response

If we become aware of a data breach, security event, or unauthorized disclosure affecting personal information, we will investigate the incident, mitigate harm where reasonably possible, and provide any notices required by applicable law, contract, or professional duty.

Our response may include vendor coordination, forensic review, system remediation, documentation, legal compliance steps, and communication with affected individuals or authorities where required.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practice, technology, legal requirements, professional obligations, or website features. When we do, we will revise the “Last Updated” date at the top of this page.

Material changes may also be communicated through the website, patient portal, email, or other appropriate means where required or appropriate.

19. Contact Us

If you have questions, concerns, or privacy-related requests, please contact us:

If this practice is subject to HIPAA and you were provided a separate Notice of Privacy Practices, please refer to that notice for additional information about healthcare privacy rights and disclosures.