Privacy Policy

Introduction

At In Therapy, we are committed to protecting your privacy and maintaining the confidentiality of your personal and health information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you access our website, use our services, or engage with our practice.

By using our website or receiving services from In Therapy, you consent to the practices described in this policy. If you do not agree with the terms of this policy, please do not access our website or use our services.

Information We Collect

We collect information to provide you with high-quality, personalized mental health services and to maintain a safe, compliant practice environment.

1. Information You Provide

• Contact details (name, email, phone number, mailing address)
• Demographic and insurance information
• Intake forms, consent documents, and clinical assessments
• Messages sent through our secure portal or email
• Payment and billing information (processed securely by third-party payment processors)

2. Protected Health Information (PHI)

When you engage in therapy with us, we collect sensitive health information related to your mental health, treatment plans, session notes, and diagnostic assessments. This information is strictly protected under applicable health privacy regulations.

3. Automatically Collected Data

• IP address, browser type, and device information
• Pages visited, time spent on site, and navigation patterns
• Cookies and similar tracking technologies for site functionality and analytics

How We Use Your Information

We use the information we collect for the following purposes:

• Providing, administering, and improving our therapy services
• Communicating with you regarding appointments, cancellations, and clinical matters
• Processing payments and managing insurance billing
• Maintaining clinical records in compliance with healthcare regulations
• Enhancing website functionality, security, and user experience
• Complying with legal obligations and regulatory requirements
• Sending important administrative notices or policy updates

We do not sell your personal or health information to third parties.

Sharing & Disclosure

We only share your information in the following circumstances:

• Treatment & Care Teams: With other healthcare professionals involved in your care, with your explicit written consent.
• Business Operations: With trusted third-party vendors (e.g., telehealth platforms, billing services, cloud hosting) who agree to strict confidentiality obligations.
• Legal Requirements: When required by law, court order, or government regulation, or to protect the rights, property, or safety of In Therapy, our clients, or the public.
• Insurance & Billing: With your consent, to process claims and manage payments.

Data Security & Confidentiality

We implement industry-standard administrative, physical, and technical safeguards to protect your information, including:

• End-to-end encryption for telehealth sessions and secure messaging
• HIPAA-compliant electronic health record (EHR) systems
• Regular security audits, access controls, and employee training
• Secure, password-protected servers with automatic session timeouts

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and report any suspected unauthorized access immediately.

Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request corrections to inaccurate or incomplete information.
• Deletion: Request deletion of your data, subject to legal and clinical retention requirements.
• Opt-Out: Unsubscribe from marketing or non-essential communications at any time.
• Portability: Request transfer of your data in a structured, machine-readable format.
• Complaint: File a complaint with relevant regulatory authorities if you believe your rights have been violated.

Clinical records may be subject to mandatory retention periods under healthcare law, and cannot be immediately deleted upon request.

Data Retention

We retain your personal and clinical information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Clinical records are retained in accordance with state/provincial healthcare regulations, typically for a minimum of 7 years after the last date of service (or longer for minors).

Children's Privacy

Our services are available to minors, typically with parental or guardian consent as required by law. We collect and process information about minors strictly for clinical care purposes, with appropriate safeguards and consent protocols in place. Parents/guardians may request access to their minor child's information, subject to applicable laws regarding minor confidentiality.

Third-Party Services & Links

Our website may contain links to third-party sites, telehealth platforms, or resource partners. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or service offerings. When we make material changes, we will update the "Last Updated" date at the top of this page and may notify you via email or website notice. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact our Privacy Officer:

*This document is provided for informational purposes and does not constitute legal advice. Consult a qualified attorney for jurisdiction-specific compliance requirements.