How We Handle Your Information (Third-Party Platforms)

To operate our private practice and manage your scheduling efficiently, we utilize secure, professional third-party digital platforms. Your information is segmented across these systems based on the nature of your interaction with our site:

1. Website Hosting and Analytics (Squarespace)
Our website is hosted by Squarespace. Squarespace collects standard, non-identifying data and uses cookies to analyze website traffic, optimize performance, and ensure site security. Squarespace does not collect, store, or have access to any medical or protected health information (PHI) through our standard website pages.

2. Online Appointment Scheduling (Acuity Scheduling)
When you book an appointment on our site, your information (including your name, contact details, and appointment time) is collected and processed through Acuity Scheduling. Acuity Scheduling is a subsidiary of Squarespace that operates under a signed Business Associate Agreement (BAA) with our practice. This ensures your scheduling data is encrypted and managed in accordance with federal HIPAA security standards.

3. Electronic Health Records (Sessions Health)
Once an appointment is booked and confirmed, your administrative details migrate to our secure Electronic Health Record (EHR) platform, Sessions Health. Sessions Health is fully HIPAA-compliant and operates under a signed Business Associate Agreement (BAA). Sessions Health stores all clinical data, including intake documentation, clinical notes, treatment plans, and billing records. This data is protected by industry-standard encryption, strict access controls, and administrative safeguards.

4. Data Separation and Security
We maintain a strict separation between general website data and your protected clinical data. Standard marketing cookies or website forms will never be linked to your secure records inside Sessions Health.