Privacy policy
Your privacy is important. Generally, any information collected on this site will not be sold or shared with third parties. This site collects no personally identifying information (such as name and email address) through its website except when you specifically and knowingly provide the information (for example, sending an email to contact us or scheduling a session). Any information you provide is used solely for the stated purpose unless you agree in advance to additional use.
Protected Health Information (HIPAA Notice)
If you engage in therapy services, your protected health information (PHI) is governed by applicable healthcare privacy laws, including HIPAA, and not solely by this website privacy policy.
Information submitted through this website (such as contact forms or emails) is not considered secure or protected health information. We take precautions to safeguard your personal information, but there may be risks with electronic communication. If you prefer, you may use a secure email service provided by a third party, called MailHippo, for email encryption and communication (not managed by this site): to contact Merissa, use https://sendsafe.to/merissa@brightlotuscounseling.com
Information We Collect
We may collect:
1. Information You Provide
Name
Email address
Phone number
Any information voluntarily submitted through forms or email
2. Automatically Collected Information
IP address
Browser type
Device information
Time Zone
Pages visited and time spent on the site
Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information”.
We collect Device Information using the following technologies:
“Cookies” are data fi les that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
“Log fi les” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons”, “tags”, and “pixels” are electronic fi les used to record information about how you browse the Site.
How We Use Your Information
We may use your information to:
Respond to inquiries
Schedule appointments through third-party platforms
Improve website functionality and user experience
Communicate with you
Cookies and Tracking
This website may use cookies and similar technologies to improve your browsing experience and analyze website traffic. You can disable cookies through your browser settings.
Third-Party Services
We may use third-party platforms for services such as:
Scheduling
Payment processing
Email communication
Website analytics
These providers have their own privacy policies and are not controlled by us.
Electronic Communication Risks
Please be aware that communication via email, contact forms, or text messaging may not be fully secure. While reasonable efforts are made to protect your information, confidentiality cannot be guaranteed.
In the event of a data breach involving your personal information, reasonable steps will be taken to notify affected individuals and comply with applicable legal requirements.
By communicating through this website, you acknowledge and accept these risks.
How We Share Information
We do not sell your personal information.
We may share information only when:
Required by law
Necessary to protect safety (e.g., risk of harm)
Required for service delivery through third-party platforms
We may share your Personal Information with third parties to help us use your Personal Information. For example, we may use Google Analytics to help us understand how our visitors use the Site - you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Of course, no computer network or data transmission on the internet can be guaranteed to be 100% secure and so you submit your information at your own risk.
Third Party Websites
Our privacy policy applies only to our website. We are not responsible for the data collection, privacy practices or policies of any third-party site to which we may provide a link or that may link to our site. We encourage you to read the privacy statement and terms of use of other sites.
Changes
We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. It is your responsibility to read this policy each time you visit the website to learn if there have been any changes.
Your Rights
Depending on your location, you may have rights to:
Access your personal data
Request correction or deletion
Opt out of certain data uses
To make a request, contact us using the information below.
European Residents
You are entitled to certain rights in this section if you are located in the European Union (“EU”) or the United Kingdom (“UK”).
If you are a European resident, you have the right to access personal information we hold about you in a structured, commonly used, and machine-readable format.
You may ask that your personal information be corrected, updated, restricted, withdrawn, or deleted. Users have the right to request the restriction of processing their personal data in certain situations, such as when the accuracy of the data is contested or when the processing is unlawful. We may be able to store it in such situations but will not process it further.
Under certain conditions, you may also have the right to restrict or object to our processing of your data, and to request that we transfer your personal information to another organization. Users have the right to object to the processing of their personal data, including for direct marketing purposes or when the processing is based on legitimate interests. Requesting deletion may terminate your access to our Site.
Users have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects.
If you would like to exercise any of these rights, please contact us through the email address below.
You also have the right to complain to your local data protection supervisory authority. You can contact them at: https://edpb.europa.eu/about-edpb/board/members_en.
B. State Rights
As of 2023, California, Colorado, Connecticut, Virginia, and Utah residents have the right to confirm processing of personal information, access certain personal information, delete certain personal information, receive information in a machine-readable format, and opt-out of targeted advertising and sales. As of 2023, California, Colorado, Connecticut, and Virginia residents may also correct personal information and opt-out of profiling that may have a legal or similarly significant effect.
For Nevada residents, The Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) states that residents have the right to request that their personally identifiable information (PII) not be sold to third parties. PII refers to any data that can directly or indirectly identify an individual, such as their name, address, email address, social security number, or financial information. Therefore, Nevada residents can specifically request that their PII not be shared or sold to any external entities for marketing or other purposes by emailing us at the email address listed below with your name, email, and mailing address.
Pursuant to California Civil Code Section 1798.83, we do not disclose to third parties for direct marketing purposes. If you are a California resident and would like to know this, please contact us at the email address list below.
Children under 18 years of age may request removal of content or information posted on our website. To request removal, use the information below to contact us at the email address list below with a statement that you reside in California.
California residents have the following privacy rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know: You have the right to know the categories of personal information collected, the sources of that information, and the purposes for which it is used. This is explained above.
Right to Access: You have the right to access the specific pieces of personal information collected about you. You have the right to access personal information we hold about you in a structured, commonly used, and machine-readable format. We will strive to respond to such requests within 30 days if we are a business pursuant to the CCPA and/or CPRA.
Right to Correct/Restrict: You may ask that your personal information be corrected, or restricted.
Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions.
Right to Opt-Out: You have the right to opt-out of the sale of your personal information to third parties, if applicable. We are legally permitted to engage in the sale of personal information belonging to a child known to be under the age of 16 solely upon obtaining explicit authorization in the form of affirmative consent, commonly referred to as "opt-in," specifically for the purpose of selling the child's personal information. However, when dealing with children under the age of 13, such affirmative consent must originate from the child's parent or legal guardian in order to be considered valid and compliant with applicable regulations.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
You may opt-out of the sharing and selling of your personal information. If you exercise your right to opt-out, we will refrain from disclosing your personal information, unless you later provide clear authorization for the disclosure of your personal information. Please send an email to us if you do not want your information disclosed to third parties with your name and address. We will strive to respond to such requests within 30 days if we are a business pursuant to the CCPA and/or CPRA.
Please note that we are not required to retain any personal information about you that was collected for a one-time or single transaction if, in the ordinary course of business, such information is not retained; or provide again any data that, in the ordinary course of business, is not considered personal information; or provide this more than twice in a 12-month period.
Under the CCPA and the CPRA, the following categories of personal information may have been collected and disclosed for business purposes within the preceding 12 months:
1. Identifiers: This category includes but is not limited to names, aliases, postal addresses, email addresses, account names, Social Security numbers, driver's license numbers, passport numbers, or other similar identifiers. We do not collect this information from you.
2. Personal Records: This category encompasses information such as signatures, physical characteristics or description, telephone numbers, education, employment history, financial information, medical information, insurance information, or any other similar personal records.
3. Protected Classifications: This category may include characteristics such as race, ethnicity, religion, gender, or any other protected classifications under federal or state laws.
4. Commercial Information: This category includes records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
5. Biometric Information: This category consists of physiological, biological, or behavioral characteristics that can be used for unique identification, such as fingerprints, faceprints, voiceprints, iris or retina scans, keystroke patterns, or other similar biometric data. We do not collect this information from you.
6. Internet or Electronic Network Activity: This category includes browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
7. Geolocation Data: This category refers to precise location information derived from GPS signals, Wi-Fi networks, or other sources.
8. Audio, Visual, or Electronic Data: This category encompasses audio recordings, video recordings, photographs, or similar electronic data.
9. Professional or Employment-Related Information: This category includes information related to current or past employment, professional qualifications, or job history.
10. Education Information: This category refers to information directly related to a student maintained by an educational institution or party acting on its behalf. We do not collect this information from you.
11. Inferences Drawn from Personal Information: This category includes inferences or conclusions drawn from any of the above categories of personal information to create a profile about an individual's preferences, characteristics, behavior, abilities, or aptitudes.
It is important to note that this list provides an overview of the categories of personal information that may have been collected and disclosed for business purposes, and the specific information collected and disclosed will depend on the practices and operations of the Site.
Under the California Shine the Light Act, California residents have the right to request and obtain information about the personal information (if any) disclosed by a business to third parties for direct marketing purposes during the preceding calendar year. If you are a California resident and would like to make such a request, please contact us using the email address listed below. We will provide you with a list of the categories of personal information disclosed and the names and addresses of the third parties with whom we shared your information, if applicable. Please note that the Shine the Light Act only applies to certain types of personal information sharing and does not cover all categories of personal information.
Pursuant to California and Delaware law, we do not assess "Do Not Track" ("DNT") signals sent by your web browser. If you wish to enable the DNT signal, please refer to your browser's settings or preferences section for instructions on how to activate it. By enabling the DNT signal, you indicate your preference to opt-out of online tracking and the collection of your browsing data for targeted advertising purposes.
