1. Introduction

Begin with a concise statement about MPACS’s commitment to protecting user privacy:

“At MPACS (“we,” “our,” “us”), your privacy is a priority. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website or engage with our services.”

2. Scope of the Policy

Clarify where and when the policy applies:

• Applies to information collected when visiting the website, using forms (e.g. booking consultation), or engaging with teletherapy services.

3. Information We Collect

Break down what types of data you collect:

a. Personal Information (Identifying Information):

• Name, email, phone number (e.g., via contact forms or request forms) Fortmindz.

• Location (for appointment matching by state licensing).

• Session-related data and health-related information if client consents.

b. Usage and Technical Data:

• Website usage events (pages visited, buttons clicked, form submissions).

• Device and browser data, IP addresses, referral sources, analytics (e.g., through Google Analytics or similar tools).

c. Cookies & Tracking:

• Types of cookies (strictly necessary, preferences, analytics, marketing) and user choices regarding them.

4. How We Use Your Information

Explain why you collect user data:

• To respond to consultation requests and inquiries.

• To assess licensing eligibility based on client’s location (state).

• To provide teletherapy services.

• To improve and personalize the website experience.

• For internal research, quality improvement, or aggregate reporting.

• To comply with legal and regulatory obligations (e.g., HIPAA, licensing authorities).

5. Legal Basis for Processing (for U.S. Users)

• Processing may be necessary to perform services (e.g., clinical intake).

• Consent-based processing for marketing communications.

• Legal obligations (HIPAA compliance, licensing).

6. How We Share Your Information

Detail when data may be shared and how:

• With Service Providers: HIPAA-compliant third-party vendors (e.g. secure hosting, analytics, payment processors).

• Clinicians: To match clients with appropriate therapists licensed in their state.

• Legal or Regulatory Authorities: When required to comply with law or respond to legal processes.

• Business Transfers: If MPACS undergoes merger, acquisition, or sale, with prior notification to users.

Assure users that:

• Personal data will not be sold or shared for marketing purposes without explicit consent.

7. Data Retention

Explain how long data is kept:

• Retained only as long as necessary to provide services, fulfill legal obligations (e.g., recordkeeping mandated by licensing boards or HIPAA), or resolve disputes.

• Once no longer needed, data is securely deleted or anonymized.

8. Your Rights

Outline user rights under applicable laws:

• The right to access, correct, or delete personal information.

• Right to withdraw consent or object to processing (where applicable).

• Right to lodge complaints with a supervisory authority.

• How to exercise these rights (provide contact email, mailing address).

9. Security Measures

Highlight the steps taken to secure user data:

• Use of encryption (e.g., SSL/TLS on the website, encrypted storage).

• HIPAA-compliant policies and practices for telehealth services.

• Restricted access protocols internally.

• Regular audits and staff training on data protection.

10. International Transfers

If data is processed or stored outside the U.S., explain:

• Measures in place (e.g., standard contractual clauses, adequacy decisions).

• Assurance of equivalent protection.

11. Children’s Privacy

State the minimum age for consent (commonly 16 or 18 in different jurisdictions) and:

• “We do not knowingly collect personal information from children under [age]. If you’re a parent or guardian and believe we have information from a child, please contact us.”

12. Updates to This Policy

Explain how changes are handled:

• “We may update this Privacy Policy from time to time. We’ll post the updated version here with the revision date. Significant changes may be communicated via email or prominent notice on the site.”

13. Contact Information

Provide clear contact details for privacy inquiries:

“If you have questions about this policy or your data, please contact us at:
Email: [email protected] (replace with actual address)
Mailing address: [Your mailing address here].”