# Privacy Policy
Effective Date: May 18, 2026
This privacy policy describes how Focus Integrated Psychotherapy, PLLC ("we," "us," or "our") collects, uses, and protects information when you visit focusintegratedtx.com (the "Website").
Questions or concerns? Please contact Lindy Noll, LCSW.
---
## Summary of Key Points
This summary highlights the main points of our privacy policy. For full details on any topic, see the corresponding numbered section below or use the table of contents.
Does this policy cover my therapy records? No. This policy covers only information collected through our Website. Your clinical information is protected separately under HIPAA. See [Section 1](#section-1).
What information do we collect? Name, email, phone, and the message you write when you submit our contact form. We also collect basic technical information automatically (IP address, browser type, etc.). See [Section 2](#section-2).
Do we collect sensitive information? No. Please don't share detailed health information through our contact form — it's not an encrypted channel. See [Section 3](#section-3).
How do we use your information? To respond to inquiries, schedule appointments, improve our Website, and comply with our legal obligations as a licensed healthcare provider. We do not use your information for advertising or marketing. See [Section 4](#section-4).
Do we share or sell your information? We do not sell your information. We share only with essential service providers (Squarespace, TherapyNotes), or when legally required. See [Section 5](#section-5).
How long do we keep your information? Only as long as necessary for the purposes described in this policy, or as required by law. See [Section 7](#section-7).
What are your rights? Depending on where you live, you may have rights to access, correct, or delete your personal information. See [Section 9](#section-9).
How do you contact us? Email Lindy Noll, LCSW
---
## Table of Contents
1. [Health Information and HIPAA](#section-1)
2. [Information We Collect](#section-2)
3. [Email and Contact Form Disclaimer](#section-3)
4. [How We Use Information](#section-4)
5. [How We Share Information](#section-5)
6. [Cookies and Tracking Technologies](#section-6)
7. [How Long We Keep Information](#section-7)
8. [How We Protect Information](#section-8)
9. [Your Privacy Rights](#section-9)
10. [Global Privacy Control](#section-10)
11. [Children's Privacy](#section-11)
12. [Third-Party Links](#section-12)
13. [Changes to This Policy](#section-13)
14. [Contact Us](#section-14)
---
## 1. Health Information and HIPAA {#section-1}
In Short: This policy covers only our Website. Your therapy records are protected separately under HIPAA.
This privacy policy applies only to information collected through this Website. It does not cover the protected health information (PHI) you share when you become a client of Focus Integrated Psychotherapy, PLLC. Information shared during therapy sessions, intake forms, the TherapyNotes patient portal, or any clinical communication is governed by the Health Insurance Portability and Accountability Act (HIPAA) and is covered separately by our Notice of Privacy Practices, which you receive before beginning services.
If you have questions about how your clinical information is handled, please refer to the Notice of Privacy Practices you received at intake or contact Lindy Noll, LCSW directly.
## 2. Information We Collect {#section-2}
In Short: We collect what you submit through our contact form, plus basic technical information that's collected automatically.
Information you provide directly. When you submit our contact form, we collect:
- Your name
- Email address
- Phone number
- The contents of your message
Information collected automatically. Like most websites, we automatically collect certain technical information when you visit, including:
- IP address
- Browser type and settings
- Device type and operating system
- Referring URL (the page you came from)
- Pages viewed and time spent on pages
- Approximate geographic location based on IP address
This information is collected through Squarespace's built-in analytics and standard server logs. It is used to maintain Website security, understand how visitors use the Website, and improve our content.
## 3. Email and Contact Form Disclaimer {#section-3}
In Short: Don't share detailed health information through email or our contact form — it's not encrypted. Use TherapyNotes after becoming a client.
Email and Website contact form messages are not encrypted end-to-end and are not appropriate channels for sharing detailed personal health information. Please limit Website contact form messages to a brief description of why you're reaching out. For confidential clinical communication, please use the secure TherapyNotes patient portal once you become a client.
## 4. How We Use Information {#section-4}
In Short: To respond to you, run our practice, improve our Website, and comply with the law.
We use the information we collect to:
- Respond to your inquiries and provide information about our services
- Schedule and coordinate appointments
- Send administrative communications (appointment confirmations, scheduling logistics)
- Understand how our Website is used so we can improve it
- Protect the security and integrity of our Website
- Comply with our legal obligations as a licensed healthcare provider, including mandatory reporting requirements under Texas law
We do not use your information for advertising, profiling, automated decision-making, or marketing communications.
## 5. How We Share Information {#section-5}
In Short: We don't sell your data. We share only with essential service providers or when legally required.
We do not sell, rent, or trade your personal information. We share information only in limited circumstances:
- Service providers. We use Squarespace to host our Website and TherapyNotes as our clinical patient portal. These providers process information on our behalf and are bound by their own privacy and security obligations.
- Legal requirements. We may disclose information if required by law, court order, subpoena, or to comply with our legal and professional obligations as licensed clinicians (including mandatory reporting under Texas law).
- Business transfers. In the unlikely event of a merger, sale, or transfer of the practice, information may be transferred as part of that transaction.
## 6. Cookies and Tracking Technologies {#section-6}
In Short: We use basic cookies to keep the Website working and understand how it's used.
Our Website uses cookies and similar technologies for two purposes:
- Essential functions — keeping the Website working as you navigate between pages
- Basic analytics — helping us understand how visitors use the Website (through Squarespace's built-in analytics)
You can disable cookies through your browser settings, though some Website features may not work properly without them. We do not use advertising or marketing cookies.
## 7. How Long We Keep Information {#section-7}
In Short: Only as long as we need it, or as required by law.
We retain personal information only as long as necessary to fulfill the purposes described in this policy or as required by law. Website contact form messages are retained until they are no longer needed for follow-up or recordkeeping.
Clinical records (which are separate from Website data and covered under HIPAA) are retained according to HIPAA requirements and Texas Board of Social Worker Examiners rules, which currently require retention for at least seven years after the last date of service for adult clients.
## 8. How We Protect Information {#section-8}
In Short: We use reasonable security measures, but no system is 100% secure. Don't send sensitive information through email or our contact form.
We use reasonable administrative, technical, and physical safeguards to protect the information we collect. These include:
- Encrypted Website connections (HTTPS)
- Secure password practices
- Two-factor authentication on systems that handle sensitive information
- Limiting access to information to those who need it for legitimate business purposes
While we work to protect your information, no system can guarantee complete security against all possible threats. Please do not share sensitive personal or health information through unencrypted channels like email or our Website contact form.
## 9. Your Privacy Rights {#section-9}
In Short: Depending on where you live, you may have rights to access, correct, or delete your information. Contact us to exercise them.
Depending on where you live, you may have rights regarding your personal information, including:
- The right to know what personal information we have collected
- The right to request a copy of your personal information
- The right to request correction of inaccurate information
- The right to request deletion of your information
- The right to opt out of the sale or sharing of your information (note: we do not sell or share personal information for advertising purposes)
- The right not to be discriminated against for exercising these rights
To exercise any of these rights, contact us. We will respond within the timeframe required by applicable law.
For Texas residents. The Texas Data Privacy and Security Act provides Texas residents with privacy rights similar to those listed above.
For California residents. California residents have additional rights under the California Consumer Privacy Act (CCPA). California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about personal information we disclose to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
For EU/UK residents. While our Website is intended for users in Texas and the United States, EU and UK residents have rights under the GDPR including access, rectification, erasure, restriction, and portability. To exercise these rights, contact us at the email above.
## 10. Global Privacy Control {#section-10}
In Short: We don't currently respond to GPC signals, but we don't sell your data anyway.
Our Website does not currently respond to Global Privacy Control (GPC) signals or other automated do-not-track signals. We do not sell personal information or share it for cross-context behavioral advertising, so this signal has limited applicability to our practices.
## 11. Children's Privacy {#section-11}
In Short: Our services are for adults only.
This Website and the services described on it are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
## 12. Third-Party Links {#section-12}
In Short: We link to external sites. Their privacy practices are their own.
Our Website may contain links to third-party websites (such as cms.gov for No Surprises Act information). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing any information.
## 13. Changes to This Policy {#section-13}
In Short: We may update this policy. Check back periodically.
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Effective Date" at the top of this policy. We encourage you to review this policy periodically.
## 14. Contact Us {#section-14}
If you have questions or concerns about this privacy policy or our information practices, please contact:
Lindy Noll, LCSW
Focus Integrated Psychotherapy, PLLC