Notice of privacy practices
Last updated: October 18th 2026
Theresa L. Leri, Licensed Marriage and Family Therapist (LMFT #165544). (“I,” “me,” or “my”), is committed to protecting the privacy of visitors to this website and ensuring the security of any personal information collected. This Privacy Policy describes how information is collected, used, and safeguarded in accordance with applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA).
Information I collect
Information may be collected through the website’s contact form, including:
- Full name
- Date of birth
- Phone number
- Email address
- Insurance details (if applicable)
- Parent/guardian information for minors
- Reason for seeking therapy
Purpose of data collection
This information is used to:
- Respond to inquiries and determine whether my services are a good fit
- Initiate the process of setting up new client appointments
- Verify insurance eligibility when applicable
Data sharing
I do not sell or rent personal information. Data may be shared only with:
- Authorized administrative staff for scheduling or billing purposes
- Insurance providers for eligibility verification (if applicable)
All parties with access to personal information are required to maintain confidentiality and comply with HIPAA standards.
Legal compliance
I comply with all applicable HIPAA regulations to safeguard your Protected Health Information (PHI), including:
- Privacy Rule: Limiting use and disclosure of PHI to purposes allowed by law (treatment, payment, healthcare operations).
- Security Rule: Maintaining administrative, physical, and technical safeguards to protect electronic PHI.
- Breach Notification Rule: In the event of a data breach involving unsecured PHI, affected individuals and relevant authorities will be notified within 60 days as required.
I also comply with the California Online Privacy Protection Act (CalOPPA) and the California Privacy Rights Act (CCPA). These laws ensure transparency in how your data is used and allow you to request access to or corrections of your personal information.
Security measures
To help protect your data, I implement:
- Restricted access to authorized personnel only
- Encryption for data transmission and storage
- Password protection and secure authentication for all electronic records
Cookies and tracking technology
This website may use cookies to improve functionality and analyze traffic. No PHI is shared with third-party analytics tools. You can manage or disable cookies in your browser settings.
Parental consent for minors
If a client is under 18, parental or guardian consent is required for collecting and processing their information.
Your rights
Under HIPAA and CCPA, you have the right to:
- Access or obtain a copy of your personal health information
- Request corrections or amendments to your records
- Request limits on how your information is used or shared
- Receive confidential communications through alternative means
- Obtain an accounting of certain disclosures
- File a complaint if you believe your privacy rights have been violated
I do not sell or share personal information. To exercise your rights, please contact me at theresa@carelationaltherapy.com
or by mail at:
Theresa L. Leri, LMFT #165544
1101 D Street, Marysville, CA 95901
Data retention
Records are retained as required by law, generally for seven (7) years after the last date of service, and then securely destroyed in compliance with HIPAA.
Complaint process
If you believe your privacy rights have been violated, you may file a complaint with me at theresa@carelationaltherapy.com or directly with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints/. You will not face retaliation for filing a complaint.
Accessibility
This privacy policy is designed to be accessible and meets WCAG 2.1 guidelines. If you experience any difficulty accessing it or need it in another format, please contact me at theresa@carelationaltherapy.com.
Updates to this policy
This policy may be updated periodically to reflect changes in law or practice. Updates will appear on this page with a revised “Last Updated” date.
By using this website, you consent to this Privacy Policy.