Your privacy, explained plainly.
Two things live on this page: the website privacy policy, and the Notice of Privacy Practices that federal law requires every health provider to give you.
Effective [Effective date]
This page is a working draft written to be accurate and readable. Before launch, have it reviewed against New York and Florida requirements, and against the Notice of Privacy Practices template provided by her malpractice carrier or professional association. Anything in [brackets] needs a real answer.
Part one: this website
What the website collects
This site is a set of static pages. It does not host forms that collect health information, and it does not ask you to create an account. If you email or call using the addresses listed here, that message reaches a standard email inbox or voicemail, which is why we ask you not to include sensitive clinical detail in it.
Analytics and tracking
The practice uses [privacy-focused analytics, e.g. Plausible or Fathom], which counts visits without cookies and without building a profile of you. Advertising trackers such as the Meta pixel are deliberately not used. Federal health regulators have warned that tracking technologies on health provider websites can disclose protected health information, and the simplest way to avoid that is not to run them.
Links out
Booking, intake, payment, and video sessions take place on third-party platforms ([SimplePractice] and [Headway]). Those platforms have their own privacy policies, and the practice maintains a business associate agreement with any vendor that handles your health information.
Part two: Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
How your information is used
- Treatment. To provide and coordinate your care, including consultation with other providers when you authorize it.
- Payment. To bill you or your insurer. Insurance billing requires sharing a diagnosis, dates of service, and service codes.
- Health care operations. Routine practice functions such as scheduling, record keeping, and clinical supervision or consultation.
When information may be disclosed without your authorization
These are the legal exceptions to confidentiality. They are narrow, and she will tell you whenever she can:
- Suspected abuse or neglect of a child, an older adult, or a vulnerable adult, which providers are legally required to report.
- A serious and imminent threat of harm to you or to an identifiable other person.
- A court order or a legally valid subpoena.
- Certain public health and health oversight activities required by law.
Psychotherapy notes, kept separately from the rest of your record, receive extra protection and are not released without your written authorization except in the narrow circumstances the law allows.
Couples and family therapy records
In couples and family work, the record covers the shared treatment. Releasing it generally requires written authorization from every adult who participated. What one partner shares in an individual session is handled according to the practice's policy on secrets, which[state her policy: no-secrets, or limited confidentiality] and which will be explained to you in writing before you begin.
Your rights
- Inspect and get a copy of your record, usually within 30 days of a written request.
- Request a correction to something you believe is inaccurate.
- Request confidential communication through a specific phone number or address.
- Request restrictions on uses and disclosures, and require that a service you paid for entirely out of pocket not be disclosed to your insurer.
- Receive an accounting of certain disclosures.
- Receive a paper copy of this notice at any time.
- Be notified if a breach of your unsecured health information occurs.
- File a complaint, with the practice or with the U.S. Department of Health and Human Services Office for Civil Rights, without any retaliation.
Telehealth
Online sessions use a HIPAA-compliant, encrypted video platform. Sessions are not recorded. You are responsible for your side of the call: use a private space, headphones where possible, and a network you trust. Because a therapist may only practice where they are licensed, you must be physically located in New York or Florida during your session, and she will ask you to confirm your location and an emergency contact at the start.
How to reach her about privacy
Annalis Garrido, LMFT is the privacy contact for this practice. Write to[hello@yourdomain.com] or call [(212) 000-0000]. To file a complaint with the federal government, contact the Office for Civil Rights at hhs.gov/ocr.
This notice may be updated. The current version always lives on this page, with the effective date at the top.