Privacy Policy
Effective Date: August 5, 2026
Last Updated: September 8, 2026
Your privacy is important to us. It is Alexandra P. Nataloni, LMHC's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, www.apnatlmhc.com, and other sites we own and operate.
Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.
In the event our site contains links to third-party sites and services — including our secure client portal, scheduling system, and payment processor — please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.
A note on health information: This Privacy Policy covers general use of our public website. It does not govern protected health information (PHI) collected in the course of clinical treatment (such as intake forms, session notes, or billing records). That information is protected separately under the Health Insurance Portability and Accountability Act (HIPAA) and is described in our Notice of Privacy Practices, which is provided directly to clients at intake.
Information We Collect
Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.
"Voluntarily provided" information refers to any information you knowingly and actively provide us when using or participating in any of our services, forms, or promotions.
"Automatically collected" information refers to any information automatically sent by your devices in the course of accessing our website.
Log Data
When you visit our website, our servers may automatically log standard data provided by your web browser. This may include your device's IP address, browser type and version, the pages you visit, the time and date of your visit, time spent on each page, and other details about your visit.
If you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding it. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem.
While this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual visitors.
Device Data
When you visit our website, we may automatically collect data about your device, such as:
Device type
Operating system
Unique device identifiers
Approximate geo-location data
Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.
Personal Information
We may ask for personal information — for example, when you submit a contact or consultation request form — which may include:
Name
Email address
Phone number
Areas of concern or services requested
Any other information you choose to include in a message to us
Please do not include sensitive clinical details, crisis information, or protected health information in a website contact form. These forms are not a secure or monitored channel for urgent matters. If you are in crisis, call or text 988 (Suicide & Crisis Lifeline), call 911, or go to your nearest emergency room.
Legitimate Reasons for Processing Your Personal Information
We only collect and use your personal information when we have a legitimate reason for doing so, and we only collect information that is reasonably necessary to provide our services to you.
Collection and Use of Information
We may collect personal information from you when you:
Use a browser or mobile device to access our content
Submit a contact form or request a consultation
Contact us via email, phone, or social media
Mention us on social media
We may collect, hold, use, and disclose information for the following purposes:
To respond to inquiries and schedule consultations
To provide and improve the content and functionality of our website
To communicate with you about our services
For marketing purposes, including sharing information about our services that may be of interest to you
For internal record-keeping and administrative purposes
To comply with our legal obligations
For security and fraud prevention
We may combine voluntarily provided and automatically collected information with general research or analytics data to improve our site and your experience of it
Security of Your Personal Information
We protect the personal information you provide within commercially acceptable means to prevent loss, theft, unauthorized access, disclosure, copying, use, or modification.
No method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. If you use our client portal, your information there is additionally protected under HIPAA safeguards specific to that platform.
How Long We Keep Your Personal Information
We keep personal information only as long as we need it for the purpose it was collected — for example, retaining an inquiry for as long as it remains open, or as needed for our own records to handle similar inquiries in future. When it's no longer needed, we delete it or anonymize it.
We may retain information longer where required for legal, accounting, licensing/regulatory, or record-keeping obligations (including obligations related to the practice of mental health counseling in Massachusetts).
Children's Privacy
Our website and general marketing content are not directed at children under the age of 13, and we do not knowingly collect personal information about children under 13 through the website. (This does not apply to clinical intake information for minor clients seen in treatment, which is governed separately under our HIPAA Notice of Privacy Practices and applicable consent procedures.)
Disclosure of Personal Information to Third Parties
We may disclose personal information to:
Third-party service providers who help us operate our website and practice, including web hosting, IT services, our secure client portal / EHR provider, analytics providers, email and calendar tools, and payment processors
Our employees, contractors, and business associates, where applicable
Courts, tribunals, regulatory authorities, licensing boards, or law enforcement, where required by law or to establish, exercise, or defend legal rights
An entity that acquires our practice or substantially all of its assets
Third-party tools we currently use include:
Google Analytics
Meta (Facebook/Instagram) advertising pixel
A HIPAA-compliant client portal / practice management system for scheduling, intake, and secure messaging
We do not sell your personal information.
Your Rights and Controlling Your Personal Information
Your choice: You do not have to provide personal information to us, though this may affect your ability to use certain parts of our website (such as the contact form).
Access & correction: You may request details of the personal information we hold about you, and request correction of anything inaccurate or outdated.
Marketing permission: You may opt out of marketing communications at any time by contacting us or using the unsubscribe link in any email.
Non-discrimination: We will not deny you services or treat you differently for exercising your privacy rights.
Complaints: If you believe we have breached applicable data protection law, please contact us with details of the alleged breach. You also have the right to contact a relevant regulatory authority.
Use of Cookies
We use cookies to collect information about your activity across our site, which helps us understand how visitors use the site and improve your experience. You may decline cookies through your browser settings; this may limit some site functionality.
Business Transfers
If our practice is acquired, restructured, or transferred, your personal information may be included among the assets transferred. Any acquiring party would be required to handle that information consistent with this policy.
Limits of Our Policy
Our website may link to external sites we do not operate, including our client portal, payment processor, and social media platforms. We have no control over their content or privacy practices and are not responsible for them.
Changes to This Policy
We may update this policy to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Updates will be posted here with a revised "Last Updated" date. Where required by law, we will seek your consent for any new use of your personal information.
Additional Disclosures for U.S. State Privacy Law Compliance
The following section addresses rights available to residents of certain states with comprehensive privacy laws (including California, Colorado, Connecticut, Virginia, and Utah). References to a specific state apply only to residents of that state.
Do Not Track
Some browsers offer a "Do Not Track" signal. At this time, we do not respond to Do Not Track signals.
Contact Us
For any questions or concerns regarding this Privacy Policy, please contact:
Alexandra P. Nataloni, LMHC
Email: ali@apnatlmhc.com
Phone: 508-784-1372