Privacy Policy
Last Updated: May 28th, 2025
Introduction
Thriving Center of Psychology, along with its subsidiaries and affiliates (“Thriving Center,” “we,” “us,” or “our”), values your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our websites, mobile applications, patient portals, and other platforms where this policy is linked or referenced (“Services”).
This policy does not apply to employment data or other privacy notices that may apply depending on your relationship with us. If you are a patient, please also review our separate HIPAA Notice of Privacy Practices for details on how we manage your health information.
Scope
This Privacy Policy applies to:
- Online Services including websites and mobile applications
- Offline interaction in connection with clinical care of administrative support
- Digital marketing platforms and third-party integrations
- Electronic communications (e.g., forms, chat, email, SMS)
- Telehealth and Scheduling services
It does not apply to:
- Third-party websites not operated by Thriving Center
- Employment application platforms (governed by our HR Privacy Notice
Children Under the Age of 13
Our Website and other Channels is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13 without verification of parental or guardian consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at [email protected].
Information We Collect
A. Information You Provide
- Identifiers: Name, email, address, phone, date of birth
- Demographics: Age, gender, marital status
- Medical details: Mental health conditions, treatment records
- Communication content: Form submissions, support messages
B. Automatically Collected Data
- Device data: IP address, OS, browser type
- Usage data: Pages visited, session duration, referral links
- Location data: Approximate geolocation from IP
- Behavioral Tracking: Cookies, pixel tags, analytics events
C. From Third Parties
- Analytics services (e.g., Google Analytics)
- Health insurance and provider networks
How We Use Your Information
We use the information for purposes including:
- Clinical care and mental health services
- Appointment scheduling and patient communications
- Delivering and improving our services
- Scheduling and managing appointments
- Processing payments (via secure third-party processors)
- Communicating with you (e.g., service updates)
- Conducting analytics and performance evaluation
- Complying with legal, regulatory, and licensing obligations
We do not sell or share your personal or health data for cross-context behavioral advertising.
We do not use sensitive health data for marketing without your opt-in consent.
Sharing of Information
We may disclose data:
- Service Providers (e.g., hosting, analytics, telehealth platforms)
- Health Plans & Providers (with your consent or as permitted by law)
- Legal and Regulatory Bodies (as required by law)
- Affiliates/Subsidiaries (for shared business purposes)
- Business Transfers (in connection with a merger or sale)
- Authorized Individuals (e.g., your caregiver or legal representative)
State-Specific Privacy Rights
California (CCPA/CPRA)
California residents may:
- Access and request a copy of their data
- Request deletion or correction of data
- Opt-out of sharing (we do not “sell” data)
- Limit use of sensitive personal data
- Use a Global Privacy Control (GPC) signal to express opt-out preferences
Washington (My Health My Data Act)
We disclose:
- What health data is collected and why
- Whether it is shared or sold (we do not sell)
- How users can withdraw consent or request deletion
New York (SHIELD Act), NJ, MA
We maintain administrative, physical, and technical safeguards as required under each state’s law and promptly notify users in the event of a breach.
Cookies and Tracking Technologies
We use cookies and similar tools for:
- Authentication and session management
- Website functionality and performance analysis
- Limited marketing operations
Data Security
We implement measures including:
- Encryption (SSL/TLS)
- Access controls and authentication mechanisms
- Secure data storage and backups
- Staff training and audit logging
However, no online platform is entirely secure. Please use strong passwords and secure your devices.
Data Retention
We retain personal data only as long as necessary for the purposes disclosed in this policy or as required by law, including medical record retention periods defined by state and federal law, including:
- Medical Records: Typically retained for a minimum of 7 years
- Cookies: Subject to your browser or consent tool settings
- Marketing Consents: Retained until withdrawn
Your Rights
Federal HIPAA RIghts
- Right to access and receive copies of your PHI
- Right to request corrections
- Right to request limits on disclosure
- Right to receive a list of disclosures
- Right to file a privacy complaint
To exercise your rights, contact [email protected].
International Users
Our Services are intended for U.S. users. If you access our Services from outside the U.S., you consent to the transfer and processing of your information in the United States.
Do Not Track Signals
We recognize and respect Global Privacy Control (GPC) browser signals, where applicable. However, our website does not respond to older “Do Not Track” signals.
SMS and Email Marketing
SMS consent is not shared with third parties or affiliates for marketing purposes.
- Messaging frequency may vary.
- Message and data rates may apply.
- To opt out at any time, text STOP.
- For assistance, text HELP or visit our website at Thrivingcenterofpsychology.com.
- Visit https://dev.thrivingcenterofpsych.com/privacy-policy/ for privacy policy and Terms of Service Page for Terms of Service.
We Comply with:
- CAN-SPAM Act
- Telephone Consumer Protection Act (TCPA)
You will only receive marketing messages if you opt-in. You can unsubscribe at any time via:
- Email: Use the unsubscribe link
- SMS: Reply “STOP”
Updates to This Policy
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time without notice. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Contact Information
Written communication can be directed to:
Thriving Center of Psychology, Attn: Privacy Officer, 600 3rd Ave, FL 2 New York, NY 10016