Privacy Policy

Effective Date: May 8, 2026

Tethered Heights Psychotherapy, we are committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, and protect information in compliance with applicable federal laws, including HIPAA, and Colorado state laws governing mental health practice.

1. Scope of This Policy

This Privacy Policy applies to all services provided by Tethered Heights Psychotherapy, including in-person therapy, telehealth services, website use, and client portal interactions.

2. Information We Collect

We collect the following categories of information:

A. Personal Information

When you engage with our services, we may collect:

  • Name

  • Email address

  • Phone number

  • Mailing address

  • Billing and payment information

  • Insurance information (if applicable)

  • Emergency contact information

B. Protected Health Information (PHI)

As a licensed mental health provider in Colorado, we may collect and maintain protected health information, including:

  • Intake and assessment information

  • Diagnostic information

  • Treatment plans and clinical notes

  • Session attendance and scheduling information

This information is protected under the federal Health Insurance Portability and Accountability Act (HIPAA) and applicable Colorado privacy and mental health confidentiality laws.

C. Website and Technical Information

When you visit our website, we may automatically collect:

  • IP address

  • Browser type and device information

  • Pages visited and time spent on the site

  • Cookies or similar tracking technologies

3. How We Use Your Information

We use your information to:

  • Provide psychotherapy and mental health services

  • Schedule and manage appointments

  • Process payments and insurance claims

  • Communicate with you regarding treatment and administrative matters

  • Maintain clinical records as required by law and professional standards in Colorado

  • Improve our website and service delivery

  • Comply with legal, ethical, and regulatory obligations

4. Confidentiality and HIPAA Compliance

We are required by law to maintain the privacy and confidentiality of your Protected Health Information (PHI). We comply with HIPAA as well as applicable Colorado regulations governing licensed mental health professionals.

Your clinical information is kept confidential and is only accessed or disclosed as permitted by law or with your written authorization.

5. Legal Exceptions to Confidentiality (Colorado Law)

Under Colorado law and professional ethical standards, confidentiality may be limited in the following circumstances:

  • Duty to report child abuse or neglect

  • Duty to report elder or at-risk adult abuse

  • Duty to warn or protect if there is a credible threat of serious harm to yourself or others

  • Court orders or legal subpoenas requiring disclosure of records

  • Supervision or consultation with other licensed professionals (without identifying information whenever possible)

We will make reasonable efforts to inform you if such disclosures are required.

6. How We Share Information

We do not sell your personal or health information.

We may share information only under the following conditions:

  • With your written consent

  • With other healthcare providers involved in your treatment

  • With insurance companies for billing and reimbursement

  • With third-party service providers (e.g., electronic health record systems, scheduling platforms, payment processors) who are bound by confidentiality agreements

  • When required by law or professional obligation

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information in accordance with HIPAA and Colorado privacy standards. However, no system is completely secure, and we cannot guarantee absolute security of electronic transmissions.

8. Your Rights

Under HIPAA and applicable Colorado law, you may have the right to:

  • Access and obtain copies of your clinical records

  • Request corrections to your records

  • Request restrictions on certain uses or disclosures

  • Receive an accounting of disclosures where applicable

Requests regarding clinical records will be handled in accordance with legal and professional requirements.

9. Telehealth Services

If you engage in telehealth services, please be aware that electronic communication carries inherent privacy risks. We use secure, HIPAA-compliant platforms, but cannot guarantee absolute confidentiality of internet-based communication.

10. Cookies and Website Tracking

Our website may use cookies or similar technologies to improve user experience and analyze website traffic. You may disable cookies in your browser settings, though some features of the website may not function properly.

11. Third-Party Services

We may use third-party vendors to support clinical and administrative operations, including scheduling systems, billing services, telehealth platforms, and analytics tools. These vendors are required to maintain confidentiality and comply with applicable privacy laws.

12. Children and Minors

We may provide services to minors with appropriate parental or guardian consent, as required under Colorado law. We do not knowingly collect personal information from children without appropriate authorization.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in laws, regulations, or practice procedures. Updates will be posted on this page with a revised effective date.

14. Contact Information

If you have questions about this Privacy Policy or your information, please contact us.