Privacy Policy

Protecting your private information is our priority. This Statement of Privacy applies to www.pothoshealth.com, and Pothos Health, PLLC and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to Pothos Health, PLLC include www.pothoshealth.com and Pothos Health. The Pothos Health website is a modern psychotherapy site. By using the Pothos Health website, you consent to the data practices described in this statement.

Collection of your Personal Information

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.

Sharing Information with Third Parties

Pothos Health does not sell, rent or lease its customer lists to third parties.

Pothos Health may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Pothos Health, and they are required to maintain the confidentiality of your information.

Pothos Health may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Pothos Health or the site; (b) protect and defend the rights or property of Pothos Health; and/or (c) act under exigent circumstances to protect the personal safety of users of Pothos Health, or the public.

Automatically Collected Information

Information about your computer hardware and software may be automatically collected by Pothos Health. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Pothos Health website.

Cookies and Cookie Consent

Our website uses cookies and similar technologies to enhance your browsing experience, serve personalized content, and analyze our traffic. Cookies are small text files that are placed on your device when you visit our website.

We use different types of cookies for different purposes:

Essential Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.
Analytics Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
Marketing Cookies: These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.

When you first visit our website, you will be presented with a cookie consent banner that allows you to choose which types of cookies you want to accept. You can change your cookie preferences at any time by clicking on the "Cookie Settings" link in the footer of our website.

For more detailed information about our use of cookies, please refer to our Cookie Policy.

Links

This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

Security of your Personal Information

Pothos Health secures your personal information from unauthorized access, use, or disclosure. Pothos Health uses the following methods for this purpose:

SSL Protocol

When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.

We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through this Site cannot be guaranteed.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

- Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
- Comply with an existing legal obligation; or
- Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Children Under Thirteen

Pothos Health does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.

Changes to this Statement

Pothos Health reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our website, and/or by updating any privacy information. Your continued use of the website and/or Services available after such modifications will constitute your: (a) acknowledgment of the modified Privacy Policy; and (b) agreement to abide and be bound by that Policy.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You have the right to know what personal information we collect, use, and disclose about you.
Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. Please note that Pothos Health does not sell or share your personal information.

To exercise these rights, please contact us using the information provided in the Contact Information section below.

Texas and Florida Digital Privacy Laws

We acknowledge and comply with applicable digital privacy laws in Texas and Florida. We are committed to protecting your privacy rights and maintaining transparency about our data practices across all jurisdictions where we operate.

Third-Party SaaS and Business Associate Agreements

We use secure, HIPAA-compliant third-party software-as-a-service (SaaS) providers to deliver our services. All such providers have signed Business Associate Agreements (BAAs) that require them to protect your health information in accordance with HIPAA standards. These agreements ensure that your protected health information remains secure and confidential.

Who This Policy Covers (Attorney Review Required)

This Privacy Policy applies to visitors to our public website, form submitters, PCL-5 assessment users, newsletter subscribers, retreat and work-with-us inquirers, invited Hub members, and authorized Admin staff.

Service Providers and Processors (Attorney Review Required)

We use trusted vendors to operate our services, which may include: Auth0 (authentication), database hosting providers, email delivery (such as SendGrid or Resend), SMS providers when enabled, Cloudflare Turnstile (spam protection), and analytics tools. Business associate agreements or equivalent protections apply where required for PHI.

Sensitive and Health Information (Attorney Review Required)

Form submissions and assessments may include sensitive health-related information. Protected health information (PHI) is also governed by our Notice of Privacy Practices when you are a patient or client receiving covered services.

When you confirm your age, accept terms, or provide marketing, SMS, or contact consent, we record the document version, timestamp, and source page to maintain an audit trail.

Privacy Requests (Attorney Review Required)

You may submit access, correction, deletion, export, or other privacy requests through our Privacy Request form. We may verify your identity before fulfilling requests. Some records must be retained for legal, billing, or clinical reasons.

State Privacy Rights (Attorney Review Required)

Residents of certain states may have additional rights. See our Privacy Rights page and submit a request if you wish to exercise applicable rights.

Contact Information

Pothos Health welcomes your questions or comments regarding this Statement of Privacy. If you believe that Pothos Health has not adhered to this Statement, please contact Pothos Health at:

Pothos Health, PLLC

3839 McKinney Avenue, Suite 155

Dallas, Texas 75204

Email Address:

contact@pothoshealth.com

Privacy Rights Contact: