Privacy Policy

The short version

This website is built to collect as little as possible. There are no advertising trackers, no social-media pixels, no session recording or heatmaps, and no behavioral retargeting. Nothing you type into the contact form is sent to an analytics service, and form contents are never written to server logs.

The one measurement in use is Cloudflare Web Analytics, which counts page views without cookies and without tracking you across other sites. It is described in full below.

Information collected through this website

Information you choose to send

If you use the inquiry form, you provide your name, email address, optionally a phone number, your preferred contact method, a general reason for contact, and optionally a short message. That information is transmitted over an encrypted connection and delivered to the practice so your inquiry can be answered. It is not stored in a database by this website, and it is not used for marketing.

The form asks you not to include confidential or detailed health information, and that request is deliberate. A website form is not a secure clinical communication channel.

Technical information

Like any website, this site is served by a hosting provider that may process standard technical request data — such as IP address, browser type and the page requested — to deliver pages and protect against abuse. The inquiry endpoint applies basic rate limiting to deter automated submissions; to do that it stores a short, irreversible hash of the requesting IP address in memory for a limited period. The IP address itself is not retained.

Cookies and analytics

This website sets no advertising or tracking cookies, and uses no advertising or social-media trackers.

If your browser is set to Spanish and you land on an English page, a small bar offers you the Spanish version. Dismissing it stores a single value in your browser’s local storage so it does not ask again. That value is the word “dismissed” and nothing else — it never leaves your device, is not sent anywhere, and identifies nothing about you. Clearing your browser data removes it.

It does use Cloudflare Web Analytics, which measures aggregate traffic — how many people visited, which pages they viewed, roughly where in the world they came from, and how quickly pages loaded. According to Cloudflare, it does this without cookies and without the client-side fingerprinting that conventional analytics rely on, and it does not follow visitors to other websites.

It is used to answer questions like “is anyone finding the Spanish-language page?” — not to build a profile of you. Nothing you type into the inquiry form is sent to it, and no information you provide is linked to your browsing.

Cloudflare also sits in front of this website as its content delivery and security provider, which means it processes connection information such as your IP address in order to route and protect traffic. That processing is governed by Cloudflare’s own privacy policy.

If any further measurement is ever added, this policy will be updated before it goes live, and form contents will remain excluded from it.

Third-party services

Scheduling is handled by third-party platforms. When you follow a scheduling link you leave this website and the destination platform’s own privacy policy and terms apply to the information you provide there. Those platforms are independent companies and their handling of your information is not governed by this policy.

Links to directory profiles and social media work the same way — once you follow the link, you are on someone else’s platform.

Clinical records are a separate matter

Nothing on this page describes how clinical information is handled. Protected health information created in the course of therapy is governed by HIPAA, by New York State law, and by professional ethical obligations. You will receive a Notice of Privacy Practices covering that before treatment begins, and it takes precedence over anything on this page.

Email and electronic communication

Ordinary email is not a secure medium. Messages can be intercepted, misdirected, forwarded, or read on a shared device. Please keep email and the inquiry form for logistics — scheduling, general questions — rather than clinical content.

Children

This website is not directed to children. The practice provides services to people aged 17 and older, and no information is knowingly collected from children under 13.

Your choices

You can use this website without submitting anything. If you have sent an inquiry and would like the practice to delete the correspondence, you are welcome to ask.

Changes to this policy

If this policy changes materially — particularly if any analytics or third-party script is introduced — the updated version will be posted here before the change takes effect.

Contact

Questions about this policy can be sent to [email protected].