Privacy policy
Last updated October 2, 2026
Draft for attorney review. Not yet in effect.
Effective date: [EFFECTIVE DATE]
This policy explains what information we collect when you visit our website or use our online ADHD assessment service, how we use it, who we share it with, and the choices you have. It is written in plain language on purpose. If anything is unclear, contact us at [CONTACT EMAIL].
Who we are
Our service is operated by [COMPANY LEGAL NAME], a company organized under the laws of [STATE OF INCORPORATION], with its registered address at [REGISTERED ADDRESS]. In this policy, “we,” “us,” and “our” refer to that company.
Our service is for adults aged 18 and older located in the United States. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, email us and we will delete it.
Health information and HIPAA
Much of what you share with us during an evaluation is protected health information (PHI) under HIPAA. Our Notice of Privacy Practices explains how we use and protect PHI and the rights you have over it. Where this policy and the Notice overlap, the Notice controls for PHI.
This policy covers everything else: information collected through the website, cookies and analytics, payments, scheduling, and email.
Information we collect
Information you give us. Your name, email address, phone number, date of birth, and mailing address. Your responses to assessment questions and the information you share during your video consultation. Messages you send us.
Payment information. Payments are processed by Stripe. We receive confirmation of payment, the last four digits of your card, and billing details. We do not store full card numbers on our systems.
Scheduling information. Appointments are booked through Calendly. Calendly receives your name, email address, and the time slot you choose.
Automatically collected information. When you visit our site, we collect your IP address, browser and device type, pages viewed, referring page, and timestamps. We may use website analytics to understand how people use the site. Analytics data is aggregated where possible.
Resume links. If you start an assessment and stop, we may email you a link that lets you continue where you left off. That link is tied to your email address and the progress you saved.
Cookies and similar technologies
We use a small number of cookies and similar tools.
- Necessary cookies keep the site working, such as remembering your progress in the assessment.
- Analytics cookies help us see which pages are useful and where people get stuck.
You can block or delete cookies in your browser settings. Blocking necessary cookies may prevent the assessment from saving your progress. We do not use cookies for targeted advertising, and we do not sell personal information.
How we use information
- To deliver the assessment, clinician review, video consultation, written report, and superbill
- To process payments and send receipts
- To schedule and remind you about appointments
- To respond to your questions and support requests
- To keep the service secure and prevent fraud or misuse
- To improve the website and service, usually with aggregated data
- To meet legal and professional record-keeping obligations
We send transactional emails about your assessment, payment, and appointment. We will not send marketing emails unless you opt in, and you can unsubscribe at any time.
Who we share information with
We share information only as needed to run the service:
- Our clinicians, who are licensed clinical psychologists bound by confidentiality obligations and HIPAA
- Stripe, for payment processing
- Calendly, for appointment scheduling
- Our email provider, for sending transactional messages and resume links
- Our hosting and secure storage providers, which store website and assessment data
- Video platform providers, used for your consultation
Each vendor is limited to the information it needs, and vendors that handle PHI sign business associate agreements with us. We may also disclose information when required by law, to protect someone’s safety, or in connection with a merger or sale of the business, with notice to you where required.
We do not sell personal information and do not share it for cross-context behavioral advertising.
How long we keep information
Clinical records, including assessment responses and reports, are kept for as long as applicable state law and professional standards require, which is generally several years after your last service.
Payment records are kept as required for accounting and tax purposes. Website analytics data is kept in aggregated form. Incomplete assessments that are never submitted may be deleted after a period of inactivity.
Security
We use encryption in transit and at rest, access controls, and vendor agreements to protect your information. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.
Your rights
Depending on where you live, state privacy laws may give you the right to:
- Know what personal information we have collected about you
- Access a copy of that information
- Correct inaccurate information
- Delete information, subject to legal and clinical record-keeping requirements
- Opt out of any sale or sharing of personal information (we do not do either)
- Receive equal service regardless of whether you exercise these rights
To make a request, email [CONTACT EMAIL]. We will verify your identity before acting, usually by matching details you provide to our records. You may authorize someone else to make a request on your behalf. Rights over PHI are described in our Notice of Privacy Practices and may follow a different process.
Changes to this policy
We may update this policy from time to time. When we do, we will post the new version here with a new effective date. If a change is significant, we will tell you by email or a notice on the site.
Contact us
[COMPANY LEGAL NAME] [REGISTERED ADDRESS] Email: [CONTACT EMAIL] Privacy officer: [PRIVACY OFFICER NAME]