Privacy Policy

When you interact with my website or practice, I may collect the following types of information:

Information you provide directly:

• Contact information — your name, email address, and phone number when you submit the contact form or reach out to schedule an appointment
• Insurance details — your insurance provider and related information needed to verify coverage and process claims
• Health information — any details about your mental health concerns, symptoms, or treatment history that you share through the contact form or during the course of care

Information collected automatically:

• Website usage data — pages visited, time spent on the site, and general browsing behavior collected through cookies and analytics (see the Cookies section below for details)

I only use the information I collect for purposes directly related to your care and my practice. Specifically:

• To respond to your inquiries — when you fill out the contact form or reach out by phone or email, I use your information to get back to you
• To schedule and manage appointments — your contact details and insurance information help me set up and coordinate your care
• To provide psychiatric care — health information you share is used to assess, diagnose, and treat your mental health needs
• To process insurance claims — I share necessary information with your insurance provider to obtain authorization and process payment for services
• To improve this website — anonymous analytics data helps me understand how visitors find and use the site so I can make it more helpful

I will never sell your personal information to third parties, and I will never use your health information for marketing purposes.

As a healthcare provider, I am required by law to protect your health information under the Health Insurance Portability and Accountability Act (HIPAA). I take this responsibility seriously, and I want you to know exactly how your protected health information (PHI) is safeguarded.

Because my practice is entirely telehealth-based, I take additional steps to protect your information during virtual sessions. The video platform I use (Doxy.me) is specifically designed for healthcare and meets all HIPAA security requirements, including encrypted video transmission and no recording of sessions.

My website and practice rely on a small number of trusted third-party services. I want to be transparent about what they are and how they interact with your information:

• FormSubmit — The contact form on my website uses FormSubmit to deliver your message to me. When you submit the form, your name, email, phone number, and message content are transmitted through their service. FormSubmit does not store your submissions long-term. You can review their privacy practices at formsubmit.co/privacy.
• Doxy.me — I use Doxy.me as my telehealth platform for all video appointments. Doxy.me is a HIPAA-compliant service that encrypts video sessions and does not record or store session content. You can review their privacy policy at doxy.me/privacy-policy.
• Google Analytics (GA4) — I use Google Analytics to understand how visitors use this website, such as which pages are most visited and how people find the site. This data is collected anonymously and does not include any personal health information. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

This website uses cookies — small text files stored on your device — to help me understand how visitors use the site. Here is what you should know:

Under HIPAA and Massachusetts law, you have important rights regarding your health information. I want you to feel empowered to exercise them:

• Access your records — you have the right to request a copy of your medical records at any time. I will provide them within 30 days of your request.
• Request corrections — if you believe any information in your records is inaccurate or incomplete, you can request an amendment. I will review your request and respond in writing.
• Request restrictions — you may ask me to limit how I use or share your information in certain situations. While I may not be able to agree to every request, I will always consider it carefully.
• Receive an accounting of disclosures — you can ask for a list of instances where I have shared your health information with others (outside of treatment, payment, and routine operations).
• File a complaint — if you believe your privacy rights have been violated, you have the right to file a complaint with me directly or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights. You will not be penalized for filing a complaint. You can reach HHS at hhs.gov/ocr/complaints or by calling 1-800-368-1019.

If you have any questions about this privacy policy or how your information is handled, I genuinely want to hear from you. Your comfort and trust are important to me, and I am always happy to talk through any concerns.

I may update this privacy policy from time to time to reflect changes in my practice or legal requirements. When I do, I will update the "last updated" date at the top of this page. I encourage you to check back periodically. If I make significant changes that affect how your information is used, I will make reasonable efforts to notify you.