Last updated: 10/12/2026
Information we collect
- Contact and identifying information you provide: name, email address, phone number, mailing address, date of birth, and emergency contact information when you request appointments or contact us.
- Intake and clinical information: when you become a client, we collect clinical records and health information necessary for evaluation and treatment (e.g., symptoms, personal and family histories, diagnosis, treatment notes, medication). This information is highly sensitive and is treated as protected health information (PHI).
- Payment and billing information: billing address, and payment method information (credit card) necessary to process payments.
- Website usage information: cookies, log files, analytics data (e.g., IP address, device type, browser, pages visited, referring URLs, and time/date stamps) collected automatically to improve the site and understand usage patterns.
- Communications: records of emails, online messages, appointment requests, and forms you submit through the site.
Legal basis for processing (if applicable)
For clients in jurisdictions that require it: we process personal data as necessary to provide contractually agreed services, comply with legal obligations, protect vital interests, and pursue our legitimate interests (such as maintaining client records, improving services, and ensuring website security). For sensitive health data, we rely on explicit consent and necessity for treatment and healthcare operations where required.
How we use your information
- To provide and coordinate psychological services, including evaluation, diagnosis, treatment planning, and clinical documentation.
- To communicate with you about appointments, scheduling, billing, and clinically related matters.
- To process payments.
- To operate, maintain, and improve our website, including analytics, debugging, and security.
- To comply with legal and professional obligations (e.g., recordkeeping, mandated reporting, subpoenas).
- To send administrative messages and (with your consent where required) practice updates.
Sharing and disclosure of information
- Within the practice: We share client information among our clinicians and staff as needed for treatment, billing, and practice operations.
- With third-party service providers: We use trusted vendors for website hosting, analytics, and secure email/telehealth platforms. These vendors process data on our behalf.
- With your consent: We will share information with other healthcare providers, family members, or other third parties when (1) you explicitly authorize us to do so and (2) doing so complies with other parameters outlined in this notice.
- Legal and safety exceptions: We may disclose information without your consent when required or permitted by law, including but not limited to:
- To prevent a serious threat to health or safety (duty to warn/protect).
- Mandatory reporting of abuse or neglect of children, elder persons or other vulnerable individuals.
- Compliance with court orders, subpoenas, or other legal processes.
- To respond to law enforcement requests as required by law.
- In the event of sale/transfer: If the practice is sold or merged, client records may be transferred as part of the transaction; we will notify you in advance of any such occurrence. (We have no plans to do so as of the date of this notice.)
Security of your information
- We use administrative, technical, and physical safeguards to protect personal data, including encryption for stored and transmitted sensitive information, secure telehealth platforms, access controls, password protection, regular security assessments, and training.
- No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Retention of records
Clinical and billing records are retained in accordance with applicable professional, state, and federal laws and ethical guidelines. Typical retention periods vary by jurisdiction (commonly 7–10 years for adult records; longer for minors). If you have questions about record retention, contact us.
Your rights and choices
- Access and correction: You may request access to, or a copy of, your records, and request corrections to inaccurate information, subject to applicable legal and ethical limits.
- Confidential communications: You may request that we communicate with you via a specific phone number, email, or address. We will accommodate reasonable requests when possible.
- Restricting disclosures: You may request restrictions on certain disclosures (e.g., to insurers). We will evaluate requests; some disclosures (e.g., required by law) cannot be restricted.
- Revocation of consent: You may revoke authorizations to share information (except where we have already acted on the authorization or when doing so violates the law or ethical and professional standards).
- Data portability and deletion (where law applies): Depending on your jurisdiction, you may have rights to obtain certain personal data portability or to request deletion. Requests are subject to legal and professional requirements and may be limited with respect to clinical records.
Minors and parental access
For clients who are minors, parents/guardians generally have rights to access records, but state laws and ethical guidelines may limit access to protect the minor’s confidentiality in certain circumstances (e.g., reproductive health, substance use, or when disclosure would harm the minor). We will explain applicable limits if they arise and handle requests according to the law and relevant ethical and professional standards.
Cookies and third-party links
- Cookies: Our website uses cookies and similar technologies to remember preferences and analyze site usage. You can manage cookie preferences in your browser settings; disabling some cookies may affect site functionality.
- Third-party links: Our site may include links to third-party websites. We are not responsible for their privacy practices.
Telehealth and electronic communications
- Telehealth: We use secure, HIPAA-compliant telehealth platforms for remote sessions. Telehealth carries specific confidentiality considerations (e.g., potential interception, privacy of local environment). Please ensure you are in a private location and use a secure network for telehealth sessions. You also agree to inform us where you are located for any telehealth work so that we can ensure compliance with appropriate laws and regulations for that location (e.g., there are locations that we would not be empowered to provide telehealth services).
- Email and messaging: Email/internet communications are not fully secure. Do not use unencrypted email to share highly sensitive information. By communicating electronically, you acknowledge and accept this risk.
International transfers
If you are accessing our services from outside the United States your information may be transferred to and processed in our country of operation and by our service providers. We will take steps required by applicable law to protect cross-border transfers.
How to exercise your rights or file a complaint
To make requests regarding your data, ask questions, or file a complaint about our privacy practices, contact: Dr. David Palmiter, (570) 815-6720, david.palmiter@therapyemail.com.
If you believe your privacy rights have been violated, you can also file a complaint with either the Psychology Boards in Maryland or Pennsylvania or the U.S. Department of Health and Human Services’ OCR for HIPAA issues.
Changes to this notice
We may update this privacy notice periodically. The “Last updated” date above shows when this notice was last revised. Significant changes will be posted on our website and, where appropriate, notified to clients.
Additional notices
- HIPAA Notice of Privacy Practices: If you are a client covered by HIPAA, you will receive a separate Notice of Privacy Practices that explains your rights under HIPAA and how we may use and disclose PHI for treatment, payment, and healthcare operations.
- State-specific disclosures: Certain states require additional disclosures (e.g., contact information for the state licensing board, mandatory reporting rules). Please request state-specific information if relevant.
Acknowledgement
By using our website or engaging our services, you acknowledge that you have read and understood this privacy notice.
Drs. David Palmiter and Lia Richards-Palmiter
www.helpingfamilies.com
6320 Democracy Boulevard
Bethesda, MD 20817