How this practice handles your information.

This page is a placeholder. A full Notice of Privacy Practices and HIPAA-compliant privacy policy will be provided at your first session and will be linked here once finalized. The summary below reflects current intent.

What this website does

This site is informational. It does not store health records, patient data, or intake information. The only data submitted through this site is the contact form on the contact page, which is used solely to reach out and schedule a consult.

What this website doesn't do

• It does not load Google Analytics, Meta (Facebook) pixels, or advertising trackers.
• It does not use third-party cookies.
• It does not share visitor data with advertisers, social networks, or data brokers.

This is an intentional choice. U.S. Department of Health and Human Services guidance on web trackers makes clear that common marketing tools can be problematic for behavioral-health sites. I'd rather lose some marketing insight than risk yours.

What does get collected

Standard server logs (IP address, user agent, pages visited) are collected by the hosting platform for security and performance. Those logs are not tied to any identifying information you provide and are not used for marketing.

HIPAA & clinical records

Clinical records - session notes, intake forms, scheduling, billing, and any protected health information - are stored in a HIPAA-compliant practice-management platform separate from this website. That platform has signed a Business Associate Agreement (BAA) covering your information.

Your rights

Once you're a client, you have the standard rights HIPAA provides: access to your records, the right to request amendments, the right to know who information has been disclosed to, and the right to request restrictions on how it's used. These are outlined in detail in the Notice of Privacy Practices you'll sign at your first session.

Questions

If you have questions about privacy, reach me at hello@candacetherapy.com.