Privacy Policy
Privacy Policy | Effective Date: 9/14/26
Tiffany Totah, MFT (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information may be collected when you visit www.tiffanytotahmft.com, contact us, schedule or register for a service, make a purchase, or otherwise interact with our website and online services; how that information may be used; and the choices available to you.
1. Information We Collect
Depending on how you interact with the website, we may collect:
Your name, email address, telephone number, and other contact information you provide.
Information you submit through contact, inquiry, registration, or other website forms.
Information associated with scheduling a consultation, workshop, support group, appointment, or other service.
Information associated with purchases or registrations. Payment information may be processed directly by third-party payment providers rather than by us.
Information you provide through advertising or lead-generation forms, including forms available through platforms such as Facebook or Instagram.
Technical and website-usage information such as IP address, browser or device information, approximate location, referring website or traffic source, pages viewed, and interactions with website content.
Please do not submit confidential clinical information, therapy records, diagnoses, medical information, emergency information, or other sensitive health information through general website, marketing, advertising, or contact forms.
2. Cookies, Analytics, and Advertising Technologies
This website may use cookies, pixels, analytics tools, and similar technologies to operate the website, understand website activity, improve the user experience, and measure advertising and marketing performance.
These tools may include:
Squarespace and website-platform analytics
Google Analytics or other analytics services
Meta Pixel and related Meta advertising technologies
Acuity Scheduling or other scheduling technologies
These technologies may receive information such as your IP address, browser or device information, approximate location, pages viewed, referring source, and interactions with website content, buttons, or scheduling links.
Third-party analytics and advertising providers may also collect information about online activity over time and across different websites or services in accordance with their own privacy practices.
These general website technologies are not intended to collect therapy notes, diagnoses, treatment records, or other confidential clinical information. Please do not enter sensitive clinical or medical information into general website or marketing forms.
Browser Privacy Signals and Cookies
You may control or block certain cookies through your browser settings and through any cookie or privacy controls made available on the website.
Some browsers offer privacy signals such as “Do Not Track” or Global Privacy Control. This website may not respond to all browser-based privacy signals except where required by applicable law and supported by the website’s technology.
3. How We Use Information
We may use information collected through the website to:
Respond to questions, inquiries, or requests.
Provide information about therapy services, consultations, workshops, support groups, educational resources, or other offerings.
Support appointment scheduling, registration, and booking requests.
Process purchases or registrations.
Communicate with you when you request information or follow-up.
Send marketing or informational communications when appropriate.
Operate, maintain, secure, and improve the website.
Understand website usage and marketing or advertising performance.
Comply with applicable legal, regulatory, professional, or security requirements.
You may unsubscribe from marketing emails at any time using the unsubscribe option included in those communications.
4. Scheduling, Registration, and Purchases
This website may link to or integrate with third-party platforms such as Acuity Scheduling, Squarespace, payment processors, or other service providers.
When you schedule an appointment, register for a workshop or group, purchase a product, or request another service, those providers may collect information needed to complete your request. This may include:
Name and contact information
Service or appointment selected
Appointment date and time
Registration information
Payment or transaction information, when applicable
Information collected directly by those providers may also be governed by their own privacy policies and terms.
5. How Information May Be Shared
We may disclose limited information to service providers that help operate the website and our business, including providers of:
Website hosting and website-platform services
Appointment scheduling and registration
Payment processing
Email and communications
Analytics and website-performance measurement
Advertising and marketing measurement
Website security and technical support
Examples may include Squarespace, Acuity Scheduling, Google, Meta/Facebook/Instagram, payment providers, and other technology providers used to operate or promote our services.
These third parties maintain their own privacy practices and may process information in accordance with their agreements, policies, and applicable law.
We may also disclose information when reasonably necessary to comply with legal obligations, protect legal rights, prevent fraud or misuse, or respond to lawful governmental requests.
We do not sell personal information in exchange for money.
Advertising and analytics technologies may involve disclosures of certain website or device information to third-party platforms for analytics, measurement, or advertising purposes as described above.
6. Clinical Confidentiality and Therapy Information
This Website Privacy Policy applies to general website and online marketing activity. It does not replace the confidentiality protections, professional obligations, informed-consent documents, or privacy practices that apply to an established psychotherapy relationship.
Information created or maintained as part of professional mental health services may be protected under additional federal and California privacy and confidentiality laws.
Where applicable, additional information about the handling of protected health information is provided in Tiffany Totah’s Notice of Privacy Practices.
Submitting a website form, sending an email, scheduling a consultation, purchasing a product, or registering for a general educational offering does not by itself establish a therapist-client relationship.
A therapist-client relationship is established only through the appropriate intake, consent, and professional-service process.
Emergencies
Website forms and general email should not be used for urgent or emergency communications and may not be monitored continuously.
If you are experiencing a medical or mental health emergency, call 911, call or text 988 in the United States, or go to the nearest emergency department.
7. Your Privacy Choices and Requests
You may contact us if you would like to:
Ask what personal information you have provided through the website.
Request correction of inaccurate information.
Request deletion of information where appropriate.
Ask questions about website privacy or tracking.
Opt out of marketing communications.
Certain information may need to be retained because of legal, professional, clinical, accounting, security, or recordkeeping requirements.
Requests involving psychotherapy or clinical records may be subject to separate legal and professional requirements.
Privacy requests may be sent to:
light2light@illuminatebytotah.com
We may need to verify your identity before completing certain requests.
8. Security
We use reasonable administrative and technical measures intended to protect personal information collected through the website.
These measures may include secure website connections, password-protected accounts, limited access to information, and security protections provided by our technology and website-service providers.
However, no website, email system, internet transmission, or online platform can be guaranteed to be completely secure.
For confidential clinical communications, please use the secure communication methods provided by the practice rather than general website forms or standard email.
9. Data Retention
We retain personal information for as long as reasonably necessary to:
Respond to inquiries.
Provide requested services or information.
Process registrations or purchases.
Support scheduling and communications.
Maintain appropriate business, legal, professional, or financial records.
Meet applicable legal, licensing, ethical, or regulatory obligations.
Protect website security and prevent misuse.
Information may be deleted, anonymized, or securely retained when it is no longer needed, as appropriate.
10. Children’s Privacy
This website is not directed to children under 13, and we do not knowingly use the general website or advertising forms to collect personal information directly from children under 13.
If professional services are provided to minors, information relating to those services is handled separately in accordance with applicable consent, confidentiality, and professional requirements.
11. Third-Party Websites and Services
This website may contain links to independently operated websites, social media platforms, scheduling services, payment services, videos, or other third-party resources.
We are not responsible for the privacy, security, content, or practices of independently operated third-party websites or services.
We encourage you to review the privacy policies of those services when providing information directly to them.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, website technology, privacy practices, or applicable requirements.
When material changes are made, the updated policy will be posted on this page and the effective date above will be revised. Where appropriate, additional notice may also be provided.
13. Contact
For questions about this Privacy Policy or privacy requests, please contact:
Tiffany Totah, MFT
Email: light2light@illuminatebytotah.com
Website: www.tiffanytotahmft.com