Privacy policy.

*

Privacy policy. *

Effective Date: August 7, 2025

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Definitions
Scope of Policy
Information I Collect
How I Use Your Information
Legal Bases for Processing (GDPR/International)
Sharing Your Information
Your Rights and Choices (GDPR/CCPA/CPRA)
Cookies and Tracking Technologies
Data Retention and Disposal
Security of Your Information
Data Breach Notification
Children’s Privacy
Third-Party Links
Accessibility
Changes to This Policy
Contact Information
Additional California Privacy Rights (CCPA/CPRA)

1. Definitions

"I", "me", "my": Refers to Chelsea Arencibia, LMSW, and Counseling With Chelsea.
"You", "your": Refers to any person accessing this website, submitting inquiries, or using my therapy services.
"Personal Information": Any information that identifies, relates to, or can reasonably be associated with or linked to an individual, whether directly or indirectly (e.g., name, email, phone number, IP address).
"Protected Health Information (PHI)": Individually identifiable health information, including demographic data, that relates to your past, present, or future physical or mental health or condition, healthcare provided to you, or payment for healthcare, as defined under the U.S. Health Insurance Portability and Accountability Act (HIPAA).
"Business Associate": A person or entity that performs functions or activities on behalf of, or provides services to, a covered entity (such as a therapist) involving the use or disclosure of PHI, as defined by HIPAA.
"Cookies": Small text files placed on your device by a website to help the site function, analyze usage, or remember your preferences.
"Data Processing": Any operation or set of operations performed on personal information, whether or not by automated means, including collection, storage, use, sharing, or deletion.
"Data Controller": Under GDPR, the person or entity that determines the purposes and means of processing personal data (here, Chelsea Arencibia, LMSW).
"Data Processor": Under GDPR, a person or entity that processes personal data on behalf of the controller.
"CCPA/CPRA": The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), state laws that provide privacy rights and consumer protection for California residents.
"GDPR": The General Data Protection Regulation, the primary privacy law for residents of the European Economic Area (EEA), United Kingdom (UK GDPR), and Switzerland.
"Notice of Privacy Practices (NPP)": A separate required statement under HIPAA for therapy clients, detailing rights about PHI and how it is used and disclosed.

2. Scope of Policy

This Privacy Policy applies to all data collected through my website, telehealth sessions, email, contact forms, and any electronic or digital communications.

If you become a client, you will receive a separate, detailed Notice of Privacy Practices (NPP) as required by HIPAA, which governs the use and protection of your Protected Health Information (PHI).

3. Information I Collect

Voluntarily Provided Information: When you fill out contact forms, intake paperwork, or communicate by email or phone, I collect your name, email, phone number, and any details you provide.
Health Information (PHI): Collected only if you become a client, including mental health history, diagnoses, treatment notes, and other sensitive health information, all protected by HIPAA.
Automatically Collected Information: My website may automatically collect data such as your IP address, browser type, pages visited, device type, and session duration for analytics and security purposes.
Cookies and Tracking: See Section 8.

Important Security Note:
Email and contact form communications may not be completely secure. Please avoid sending sensitive or detailed health information through these channels.

4. How I Use Your Information

I use the data I collect to:

Respond to your inquiries and schedule appointments
Provide psychotherapy and telehealth services through HIPAA-compliant platforms
Communicate about appointments, services, changes, or emergencies
Process payments securely through HIPAA-compliant processors
Enhance the functionality, security, and user experience of my website
Maintain required records according to professional, legal, and ethical standards

5. Legal Bases for Processing (GDPR/International Visitors)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your rights are protected under GDPR. I process your personal data based on:

Your explicit consent (withdrawable at any time)
The necessity to perform a contract (providing therapy services)
Compliance with legal obligations
Legitimate interests, provided these do not override your rights

You will receive cookie consent options before non-essential cookies or trackers are placed on your device.

Your GDPR Rights Include:

Accessing, correcting, or erasing your personal data
Restricting or objecting to processing
Data portability
Withdrawing consent at any time without affecting prior processing
Lodging a complaint with your data protection authority

Please contact me at hello@counselingwithchelsea.com to exercise these rights.

6. Sharing Your Information

I do not sell, rent, or trade your personal information. I only share your information:

With your explicit written consent
With HIPAA-compliant business associates who assist in providing services (e.g., secure EHR, telehealth platform, scheduling systems)
When legally required to report abuse, prevent harm, or respond to legal orders
With payment processors adhering to HIPAA and relevant security laws
When necessary to protect legal rights or respond to legal claims

All third parties are vetted for compliance with applicable privacy and security laws.

7. Your Rights and Choices (GDPR/CCPA/CPRA)

You have the right to:

Access and obtain copies of your personal data
Request corrections or deletion of inaccurate data
Withdraw consent where processing is based on consent
File complaints with your state licensing board, the U.S. Department of Health and Human Services (for HIPAA-related issues), or your data protection authority

For California Residents (CCPA/CPRA):

Right to know what personal data is collected, used, or shared
Right to request access, correction, or deletion of your data (with exceptions)
Right to opt out of the sale or sharing of your data (note: I do NOT sell your data)
Right to limit the use/disclosure of sensitive personal information
Right to be free from discrimination for exercising your privacy rights

To exercise any of these rights, please contact me at hello@counselingwithchelsea.com. Verification is required before processing requests.

8. Cookies and Tracking Technologies

What Are Cookies?
Cookies are small files stored on your device to enable website functionality, analyze usage, and remember preferences.

Types of Cookies Used:

Strictly Necessary: Essential for website security and accessibility
Performance: Collect anonymized data (e.g., Google Analytics) to improve the website
Functionality: Remember your preferences such as language or region

Third-Party Trackers:
Third-party services like Google Analytics or Facebook Pixel may collect device or browsing data for analytics and advertising purposes.

User Consent:
Visitors from the EU, UK, or California are presented with cookie consent banners/pop-ups and can manage preferences before non-essential cookies are placed.

You can adjust or disable cookies in your browser, but this may affect site functionality.

9. Data Retention and Disposal

Personal and health information is retained only as long as necessary to provide services and meet legal, ethical, and professional record-keeping requirements.
Therapy client records are retained for at least seven (7) years as required by Florida law.
Upon expiration of the retention period, physical records are securely shredded, and electronic files are permanently deleted.

10. Security of Your Information

I employ physical, administrative, and technical safeguards to protect your data, such as:
- Encrypted devices and secure file storage
- HIPAA-compliant platforms for telehealth, electronic health records, and scheduling
- Access controls limiting staff exposure to your information

Despite all safeguards, no internet or electronic transmission is 100% secure. Absolute security cannot be guaranteed.

11. Data Breach Notification

In the event of a data breach involving your personal or health information, I will notify you as required by federal and state law, including HIPAA and Florida statutes.

12. Children’s Privacy

My website and services are not directed toward children under 13 years old. I do not knowingly collect personal information from children without parental consent. If I learn that a child under 13 has provided personal info, I will delete it immediately.

13. Third-Party Links

My website may contain links to other third-party sites or resources. I am not responsible for their content or privacy practices. Please review their privacy policies before submitting any personal information.

14. Accessibility

If you require this policy in an alternative format (such as large print or audio), please contact me at hello@counselingwithchelsea.com or 786-505-7391 for assistance.

15. Changes to This Policy

I may update this Privacy Policy from time to time to reflect legal or operational changes. The updated policy will be posted here with a revised effective date. Please review this page periodically.

16. Contact Information

If you have questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

Lizbeth Chelsea Arencibia, RCSW
Counseling With Chelsea
Email: hello@counselingwithchelsea.com
Phone: 786-505-7391
Mailing Address:

LCA Therapy LLC

12145 NW 99th Ave.

Unit 5

Hialeah Gardens, FL 33018

17. Additional California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA and CPRA:

Right to Know: Request detailed information about personal data collected, sources, use, and sharing categories.
Right to Delete: Request deletion of your personal data, subject to exceptions for clinical and legal obligations.
Right to Opt-Out: While I do not sell personal information, if that changes, you will be informed and given the opportunity to opt out.
Right to Correct: Request correction of inaccurate personal information.
Right to Limit Use: Limit the use and disclosure of sensitive personal information.
Right to Non-Discrimination: You cannot be discriminated against for exercising your privacy rights.

18. How can I contact you about this policy?

To submit a request or for help with these rights, contact me at hello@counselingwithchelsea.com, by phone at 786-505-7391, or by post:

LCA Therapy LLC