Privacy Policy
Last updated October 28, 2026
At Therapy by the Bluffs PLLC, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect information when you use our website. By using our website, you agree to the practices outlined in this policy.
Important distinctions:
This Privacy Policy applies to information collected through the Therapy by the Bluffs PLLC website.
It does not replace our HIPAA Notice of Privacy Practices (NPP) or the mandatory Colorado Disclosure Statement. Those documents govern the use and disclosure of protected health information (PHI) once a formal therapist-client relationship is established and are provided during the intake process.
Do not submit sensitive clinical or protected health information (symptoms, diagnoses, treatment details, etc.) through general website contact forms, email, or other non-secure channels.
1. Information We Collect
We may collect the following types of information when you interact with our website:
a. Personal Information
Contact Information: When you use our contact form, request an appointment, or otherwise reach out, we may collect your name, email address, phone number, and any message content you choose to provide.
Health Information: We do not collect or store protected health information (PHI) on the public website. Any health-related information shared once a formal therapeutic relationship has been established is securely managed on our HIPAA-compliant third-party platform, Sessions Health.
b. Non-Personal Information
Website Usage Data: We may collect basic technical information such as your IP address, browser type, device type, pages visited, and time spent on the site. This helps us improve website functionality and user experience.
2. How We Use Your Information
We use the information we collect for the following purposes:
To respond to inquiries and schedule sessions.
To communicate with you about appointments, reminders, or administrative matters related to services.
To improve our website and services based on usage patterns.
To comply with legal obligations.
3. How We Protect Your Information
We take reasonable measures to protect the information collected through our website.
General information submitted via website forms is transmitted using industry-standard encryption (SSL/TLS).
We do not store sensitive health data or PHI on the public website.
Once a formal therapeutic relationship is established, protected health information is securely stored and managed through Sessions Health, a HIPAA-compliant platform. We maintain a Business Associate Agreement with Sessions Health.
4. Third-Party Services
We use third-party services to support our website and practice operations, including:
Sessions Health: Our HIPAA-compliant platform for managing client information, scheduling, secure messaging, documentation, and telehealth (where offered). Health-related data associated with therapy services is stored and protected by Sessions Health. Please review Sessions Health’s privacy policy for additional details on their practices.
Payment Processors: If payments are processed through the website or client portal, payment details are handled by third-party processors. These services have their own privacy policies.
Website Analytics: We may use tools such as Google Analytics to understand website usage. This data is generally anonymized or aggregated and does not include protected health information.
We do not sell your personal information.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to improve website functionality and understand how visitors use the site. You can adjust your browser settings to manage or disable cookies, though doing so may affect certain website features.
6. Your Rights and Choices
Depending on applicable law, you may have rights regarding personal information we hold, such as:
Requesting access to personal information we have collected about you through the website.
Requesting correction of inaccurate information.
Requesting deletion of personal information, subject to legal retention obligations.
Opting out of non-essential communications by following unsubscribe instructions.
For health-related information maintained once you are a client, rights are governed by HIPAA and Colorado law and can be exercised through the processes described in our Notice of Privacy Practices and via the Sessions Health client portal (where available).
7. HIPAA Compliance
Therapy by the Bluffs PLLC complies with the Health Insurance Portability and Accountability Act (HIPAA) for the handling of protected health information in connection with therapy services. All sensitive health information is stored and managed on Sessions Health. We do not share protected health information with third parties except as permitted or required by law, or with your authorization.
This website Privacy Policy does not constitute our HIPAA Notice of Privacy Practices.
8. Data Retention
We retain website-related personal information for as long as needed to respond to inquiries, provide requested services, and meet legal obligations. Health-related data associated with therapy services is retained on Sessions Health in accordance with HIPAA, Colorado mental health record retention requirements, and Sessions Health’s policies.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Continued use of the website after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or the information collected through our website, please contact us at:
Email: zoe@therapybythebluffs.com
Phone: 719-357-9397
Address: 3725 Austin Bluffs Pkwy, The Redwood Room, Colorado Springs, CO 80918
11. Consent
By using our website, you consent to the collection, use, and sharing of information as described in this Privacy Policy.