Privacy Policy

1. Notice of Privacy Practices (HIPAA)

We are required by law to maintain the privacy and security of your Protected Health Information (PHI) under federal and California state laws, including HIPAA, to provide you with this Notice, and to notify you if a breach of your unsecured PHI occurs. We can change the terms of this Notice, and such changes will apply to all information we have about you.

Uses and Disclosures of PHI (Treatment, Payment, and Health Care Operations):

  • Treatment: We may use and disclose your PHI to coordinate or manage your healthcare services, including disclosing PHI to another healthcare professional (e.g., physician or psychiatrist).

  • Payment: We may use and disclose your PHI to bill and collect payment for treatment and services, such as sending PHI to your insurance provider.

  • Healthcare Operations: We may use and disclose your PHI to support operational functions of our practice, such as contacting you or consulting with legal counsel.

  • Exceptions and Mandatory Disclosures: Disclosure without authorization is permitted or required for mandatory reporting (suspected child, elder, or dependent adult abuse), public health activities, health oversight/audits, judicial/administrative orders, law enforcement, coroners/medical examiners, research, specialized government functions, and workers' compensation.

  • Psychotherapy Notes & Authorizations: Specific written authorization is required for uses outside treatment/payment/operations, marketing, sale of PHI, or release of psychotherapy notes (except for internal treatment, training, defense in legal proceedings, or legal compliance).

  • Disclosures to Family/Friends: We may share PHI with family or friends involved in your care unless you object.

2. Website Information Collection

When you interact with our website, we may collect information you voluntarily provide through contact forms, scheduling requests, or email communications. Please note that standard email or web form transmissions are not completely secure; avoid transmitting highly sensitive information through unencrypted web forms.

3. Cookies and Similar Technologies

This website is hosted on Squarespace. Squarespace may use necessary cookies and similar technologies to operate and secure the website. Squarespace may also use analytics and performance cookies to help us understand general website traffic and improve the site.

The cookie banner allows visitors to manage their preferences for nonessential cookies. You can also manage cookies through your browser settings. Disabling certain cookies may affect some website features.

The website may also include third party services, including Kit and TidyCal, which may use their own cookies or similar technologies under their own privacy policies.

For more information, please review the Squarespace Cookie Policy.

4. Email Updates and Kit Forms

The website includes email signup forms provided by Kit. If you sign up for occasional updates, we may collect your name and email address and provide this information to Kit so it can manage your subscription and deliver emails on our behalf.

Submitting the form indicates your choice to receive these updates. Kit may process general information about email delivery and engagement.

You can unsubscribe from these emails at any time using the unsubscribe link included in each email.

For more information, please review the Kit Privacy Policy.

5. Scheduling, Contact, and Phone or Text Communications

When you contact us through a form, email, phone, text message, or scheduling tool, we may collect information you choose to provide, such as your name, email address, phone number, scheduling details, and the contents of your message.

We use this information to respond to inquiries, schedule appointments, provide requested information, and coordinate services.

If you provide a phone number, we may contact you by phone or text in connection with your inquiry, scheduling, or services. You may request a different communication method or ask us to stop text communications at any time.

Please do not send sensitive health information through website forms, email, or text messages.

Appointments may be scheduled through TidyCal. Information submitted through the scheduling tool is processed by TidyCal under its own privacy policy.

For more information, please review the TidyCal Privacy Policy.

6. Data Retention and Security

We may retain website inquiry, scheduling, and communication information for as long as reasonably necessary for the purposes described in this Privacy Policy, including responding to requests, providing services, maintaining appropriate business and clinical records, and meeting legal, professional, and business obligations.

Different types of information may be retained for different periods. Some information may remain in backups or records where retention is required or permitted by law.

We take reasonable steps to protect personal information. However, no method of electronic transmission or storage is completely secure.

7. Client Rights

Under HIPAA and state regulations, you have the right to:

  • Request restrictions or limits on certain uses and disclosures of your PHI (including restrictions for services paid out-of-pocket in full).

  • Inspect and receive a paper or electronic copy of your health records and this Notice.

  • Request corrections or updates to your medical records.

  • Receive an accounting of disclosures made over the last six years.

  • Choose how we communicate and send confidential information to you (e.g., specific phone number or address).

8. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:

Ruthie Ayzenberg, LMFT, LPCC

Mental Fitness Therapy

Email: ruthie@mentalfitnesstherapy.org

Phone: 650-419-7004

Last updated: November 12, 2026