Privacy Policy

When you book a session or complete your intake, I collect your full legal name, preferred name and pronouns (optional), date of birth, physical address, phone number, email address, and emergency contact details.

The intake questionnaire collects your reason for seeking therapy or coaching, your goals, whether you have worked with a therapist or coach before, and a brief medical and mental health history, including any current diagnoses, medications, and holistic practices you choose to share. I also record your acknowledgment of the informed consent, cancellation, and privacy terms, along with your electronic signature.

The service type you select, your chosen plan (single session or monthly), and your appointment dates and times.

Payments are processed by Stripe, a secure third-party payment provider. You enter your card details directly on Stripe's checkout page, so the practice never sees or stores your full card number. I receive confirmation of your payment, the amount, and a receipt or invoice reference.

This website does not use advertising trackers or analytics tools, and it does not set its own tracking cookies. However:

• Our website hosting provider may automatically log basic technical information, such as your IP address, browser type, and the pages requested, to keep the site secure and reliable.
• While you complete a booking, your appointment details and intake answers are held temporarily in your browser's session storage, on your own device. They are cleared when your booking is confirmed or when you close the browser tab.
• Stripe's checkout and billing pages use their own cookies to process payments securely and prevent fraud, as described in Stripe's privacy policy.

If analytics are added in the future, this policy will be updated first.

I do not sell, rent, or trade your personal information to anyone, for marketing or any other purpose.

A small number of trusted providers help run the practice. Each receives only the information it needs to perform its function:

• Google Workspace (Gmail & Google Calendar): your intake is delivered to the practice's email account, and your appointment is added to the practice calendar. The calendar entry contains your name, contact details, session type, and payment reference, but not your clinical history.
• Stripe: processes payments, subscriptions, receipts, and billing management. Stripe receives your name, email, phone number, and the appointment you are paying for.
• Google Cloud (Cloud Run): hosts this website and processes requests sent through it.

Detailed clinical information from your intake is never sent to the calendar or payment providers.

What you share in sessions and in your intake is confidential. As with all counseling relationships, there are limited exceptions where I may be required by law or professional ethics to disclose information:

• An imminent risk of serious harm to yourself or to others.
• Suspected abuse or neglect of a child, elder, or dependent adult.
• A valid court order or subpoena, or as otherwise required by law.

Whenever it is possible and appropriate, I will discuss the situation with you before any disclosure is made.

• All connections to this website are encrypted with SSL/TLS (HTTPS).
• Intake and booking information is sent over encrypted connections, and emails are transmitted using encrypted mail protocols.
• Card payments are handled entirely by Stripe, a PCI DSS Level 1 certified payment provider.
• Bookings are confirmed only after the payment is verified directly with Stripe, and private member links are cryptographically signed so they cannot be guessed or altered.
• Administrative access to client information is restricted to the practitioner.

Clinical intake information is treated with a higher standard of care. It is shared on a minimum-necessary basis, it is never stored in the calendar or payment systems, and the website itself does not keep a database of your clinical information. I handle health information in alignment with HIPAA privacy and security principles and with applicable Oregon, state, and international privacy laws.

If you access the website from outside the United States, please note that your information is processed in the United States and in other countries where our service providers operate.

No method of transmission or storage is completely secure. While I take strong measures to protect your information, I cannot guarantee absolute security.

You may request a copy of your clinical records, or ask me to correct inaccurate demographic or contact information, at any time. I will respond within the timeframe required by law.

You may request deletion of your non-clinical personal data. Clinical records must be kept for the period required by Oregon law and professional licensing rules, after which they are securely destroyed. Payment records are kept as required for tax and accounting purposes.

The practice does not send marketing emails. You will only receive messages related to your appointments, payments, and care. You may ask me to stop any non-essential communication at any time. Monthly plan clients can update their payment details or cancel their subscription at any time through the “Manage subscription” link in their confirmation email.