Effective Date: June 1, 2025
Applies To: Love Light Mental Health Counseling Services, PLLC (“Love Light,” “we,” “our,” or “us”)

This Privacy Policy explains how we collect, use, and protect information obtained through our website (www.loveandlightpsychotherapy.com) and during the delivery of telehealth and in-person psychotherapy services.

1️⃣ Protected Health Information (PHI)

All clinical information you share with us in therapy is considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

We maintain a HIPAA-compliant electronic health record (Ensora Health) and follow all federal and New York State privacy laws governing mental-health records.

We may use or disclose your PHI only for:

• Treatment: to coordinate or provide clinical care.
• Payment: to process insurance claims or billing.
• Health Care Operations: for quality assurance, supervision, or compliance. We will obtain your written authorization for any other use or disclosure.

2️⃣ Non-Clinical Information Collected Online

When you visit our website, request an appointment, or complete a form, we may collect:

• Name, email address, and phone number (submitted voluntarily).
• Basic device or browser data (via Google Analytics or similar tools).
  This data is used only to respond to inquiries, schedule services, or improve site performance.

We do not sell or share your personal information for marketing purposes.

3️⃣ Telehealth Privacy and Security

All telehealth sessions are conducted through HIPAA-compliant, encrypted video platforms.
You are responsible for maintaining privacy on your end by using a secure internet connection and a private space during sessions.

4️⃣ Data Storage and Retention

Clinical records are stored securely within our HIPAA-compliant EHR system for at least six (6) years, as required by New York State Education Law § 29.2(a)(3) and related regulations.

Non-clinical form submissions (e.g., contact or referral forms) are retained only as long as necessary to fulfill their purpose.

5️⃣ Your Rights Under HIPAA

You have the right to:

• Access and request copies of your records.
• Request corrections to inaccurate information.
• Receive an accounting of certain disclosures.
• Request restrictions on how your information is used or shared.
• Request confidential communication methods.
• File a complaint if you believe your privacy rights have been violated.

Requests can be submitted in writing to:
Privacy Officer: Sherene Henry, LMHC-D, LPC
📧 [email protected]
📍 2005 Palmer Ave #606, Larchmont, NY 10538

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

6️⃣ Third-Party Service Providers

We use secure third-party services (Google Workspace, TheraNest, Forms.App, Square, etc.) under Business Associate Agreements (BAAs) where applicable.
Each provider is required to maintain HIPAA-compliant safeguards and confidentiality.

7️⃣ Email and Electronic Communication

Unencrypted email is not a secure medium.
By contacting us through email or online forms, you acknowledge this risk and consent to limited administrative communication (e.g., scheduling or forms).
Clinical conversations occur only within secure, encrypted systems.

8️⃣ Children’s Privacy

Our website is not directed toward children under 13.
Therapeutic services for minors are provided only with verified parental or guardian consent, in compliance with NY Public Health Law § 2504.

9️⃣ Cookies and Analytics

Our website may use cookies or tracking technologies to analyze site usage and improve accessibility.
You can disable cookies in your browser at any time.

🔟 Policy Updates

We may update this Privacy Policy periodically.
The latest version will always appear on our website with a revised effective date.

Questions or Concerns
If you have questions about this Privacy Policy or your privacy rights, contact us at:
📧 [email protected]