Legal
Privacy Policy
How we handle information collected through this website. Clinical records are governed separately by HIPAA and our Notice of Privacy Practices.
Last updated .
About this policy
This Privacy Policy describes how Personal Injury Trauma Therapy(“we,” “us,” or “our”) collects, uses, discloses, and safeguards information gathered through our marketing website at personalinjurytraumatherapy.com(the “Site”). It applies to the Site only. It does not govern protected health information (“PHI”) created in the course of providing clinical services, which is handled through our secure, HIPAA-compliant records and client portal platform and governed by a separate Notice of Privacy Practices provided at the start of your care.
By using the Site, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the Site.
Who we are
Personal Injury Trauma Therapy is a telehealth mental-health practice based in College Park, Georgia. We provide trauma-focused therapy via telehealth to residents of Georgia, North Carolina, South Carolina, Indiana, Michigan, Kansas, Kentucky, Florida, and Washington, and we are a HIPAA-covered entity.
What this policy covers — and what it doesn't
This policy covers information collected through:
- The PITT marketing website and its subpages;
- Inquiry and contact forms embedded in or linked from the Site;
- Standard server and security logging by our hosting provider, and — only if you agree to it — the analytics tools described below.
It does not cover:
- PHI maintained in our electronic health records / client portal platform, which is governed by HIPAA and our Notice of Privacy Practices; or
- Information you submit inside the client portal, which is governed by that provider's own terms and privacy policy.
What's safe to send us
Our appointment request and referral forms run on a HIPAA-compliant platform, so it is safe to tell us what happened and what you're dealing with. You only ever need to share what you're comfortable sharing, and you never need a diagnosis or paperwork to get in touch.
Ordinary email is not encrypted, so please don't send medical records, Social Security numbers, or insurance and financial account numbers by email. Use the form or call us for anything sensitive.
Information we collect
Information you provide
When you submit a form, we collect what you voluntarily provide — typically your name, email, phone number, state of residence, a general (non-clinical) description of your inquiry, and whether you were referred by an attorney or provider. We also collect information if you contact us by email or phone.
Information collected automatically
When you visit the Site, our hosting provider records standard server and security information such as your IP address and general location, browser and device type, the pages requested, the referring URL, and the date and time of the request. This is used to serve the Site, keep it available, and protect it from abuse.
Cookies, analytics and tracking technologies
We ask your permission before any analytics run. Because the pages on this Site name specific conditions, simply viewing one can suggest something about your health. We therefore do not load analytics when you arrive. Nothing beyond the strictly necessary cookies that make the Site work is set unless you choose “Yes, that's fine” on the banner we show you.
If you agree, we use two tools:
- Google Analytics 4 — which pages are visited, how visitors move through the Site, and which pages lead to someone getting in touch. We enable IP anonymization and disable Google Signals and advertising personalization, so this data is not used to build advertising profiles. See the Google Privacy Policy.
- Microsoft Clarity — heatmaps and session replay showing where visitors click, scroll and get stuck, so we can fix confusing pages. See the Microsoft Privacy Statement.
We use these only to understand and improve the Site — never for clinical purposes, and never to make decisions about your care. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising or for profiling that produces legal or similarly significant effects. Declining has no effect on the care you receive.
Changing your mind, and browser controls
- Your choice is stored on your own device. To change it, clear this site's data in your browser and you will be asked again.
- We honor Global Privacy Control (GPC). If your browser sends that signal we treat it as a refusal and never load analytics, regardless of the banner.
- You can also set your browser to refuse cookies outright.
- We do not respond to “Do Not Track” because there is no uniform standard for it.
How we use information
We use information to respond to inquiries, determine telehealth eligibility based on your state, operate and improve the Site, analyze usage, protect the Site's security, and comply with law. We do not use Site information to make clinical decisions and do not combine it with PHI. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Service providers we share with
We share information only as necessary with providers bound by data processing or privacy commitments: Vercel (website hosting), Google (Analytics, Tag Manager, and sign-in), Microsoft (Clarity), GoHighLevel (forms/CRM), and SimplePractice (client portal and EHR, under a HIPAA Business Associate Agreement). We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer (with notice as required).
HIPAA and our Notice of Privacy Practices
Personal Injury Trauma Therapy is a HIPAA-covered entity. Treatment-related PHI is protected under HIPAA and applicable state law, and our Notice of Privacy Practices — provided at the start of care — is the governing document for that information. General inquiries submitted through this Site are not PHI, but we still handle them with care. To exercise HIPAA rights regarding clinical records, contact us directly rather than using a website form.
Data security
We use reasonable technical and organizational measures, including HTTPS/TLS encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately.
Data retention
We retain form submissions as long as needed to respond and for a reasonable period afterward. Analytics and session data follow the retention policies of the applicable platforms. Contact us to ask about retention or to request deletion.
Children's privacy
This Site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will promptly delete it.
Your privacy rights
As of 2026, twenty states have comprehensive consumer privacy laws in effect, and the rights they grant differ in their details. Rather than make you work out which law applies to you, we extend the following rights to every visitor, in every state, whether or not a statute requires it:
- Access — confirm whether we hold personal information about you and obtain a copy.
- Correct — have inaccurate information fixed.
- Delete — have information deleted, subject to the records we are legally and professionally required to retain.
- Portability — receive a copy in a usable format.
- Opt out — of any sale, targeted advertising, or profiling. We do none of these today.
- Withdraw consent — to our processing of sensitive or health-related information.
- Appeal — if we deny a request, reply to our response and a different person will review it.
We respond to verifiable requests within 45 days (extendable once where the law permits), will not charge you for a first request in a twelve-month period, and will not discriminate against you or deny you care for exercising these rights.
Consumer health data — Washington and Nevada
Washington's My Health My Data Act and Nevada's Consumer Health Data Privacy Law (SB 370) govern health-related information that HIPAA does not cover. Those laws require a separate policy, and we publish one: Consumer Health Data Privacy Policy. It explains what we treat as consumer health data, who we share it with, and how to exercise your rights, including the right to withdraw consent and to have the data deleted. We do not sell consumer health data.
States where we are licensed
Our clinicians are licensed in Georgia, North Carolina, South Carolina, Indiana, Michigan, Kansas, Kentucky, Florida, and Washington. Of those, Indiana and Kentucky brought comprehensive privacy laws into effect on January 1, 2026, Florida's Digital Bill of Rights applies to very large technology companies, and Washington is covered by the My Health My Data Act described above. Several of these statutes apply only to organizations above thresholds a practice of our size does not meet, and health information we hold as a healthcare provider is generally governed by HIPAA rather than by state consumer privacy law. We extend the rights listed above to you regardless.
How to submit a request
Email info@personalinjurytraumatherapy.com or call (470) 836-4878. Include your name, preferred contact method, state of residence, and a description of your request. We may verify your identity before responding.
Third-party links
The Site links to third-party services, including our appointment request and referral forms and, where offered, the SimplePractice client portal. This policy does not apply once you leave the Site. The SimplePractice client portal is governed by SimplePractice's own privacy policy, terms of service, and end user licence agreement, which are separate documents published by that vendor and are not this practice's website policies. Review the privacy policy of any third-party service before you use it.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated date and, where appropriate, a notice on the Site. Continued use after the effective date constitutes acceptance.
Contact us
Personal Injury Trauma Therapy, College Park, GA. Email info@personalinjurytraumatherapy.com or call (470) 836-4878.
