Privacy Policy

Privacy Policy | Effective Date: 9/14/26

Tiffany Totah, MFT (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information may be collected when you visit www.tiffanytotahmft.com, contact us, schedule or register for a service, make a purchase, or otherwise interact with our website and online services; how that information may be used; and the choices available to you.

1. Information We Collect

Depending on how you interact with the website, we may collect:

  • Your name, email address, telephone number, and other contact information you provide.

  • Information you submit through contact, inquiry, registration, or other website forms.

  • Information associated with scheduling a consultation, workshop, support group, appointment, or other service.

  • Information associated with purchases or registrations. Payment information may be processed directly by third-party payment providers rather than by us.

  • Information you provide through advertising or lead-generation forms, including forms available through platforms such as Facebook or Instagram.

  • Technical and website-usage information such as IP address, browser or device information, approximate location, referring website or traffic source, pages viewed, and interactions with website content.

Please do not submit confidential clinical information, therapy records, diagnoses, medical information, emergency information, or other sensitive health information through general website, marketing, advertising, or contact forms.

2. Cookies, Analytics, and Advertising Technologies

This website may use cookies, pixels, analytics tools, and similar technologies to operate the website, understand website activity, improve the user experience, and measure advertising and marketing performance.

These tools may include:

  • Squarespace and website-platform analytics

  • Google Analytics or other analytics services

  • Meta Pixel and related Meta advertising technologies

  • Acuity Scheduling or other scheduling technologies

These technologies may receive information such as your IP address, browser or device information, approximate location, pages viewed, referring source, and interactions with website content, buttons, or scheduling links.

Third-party analytics and advertising providers may also collect information about online activity over time and across different websites or services in accordance with their own privacy practices.

These general website technologies are not intended to collect therapy notes, diagnoses, treatment records, or other confidential clinical information. Please do not enter sensitive clinical or medical information into general website or marketing forms.

Browser Privacy Signals and Cookies

You may control or block certain cookies through your browser settings and through any cookie or privacy controls made available on the website.

Some browsers offer privacy signals such as “Do Not Track” or Global Privacy Control. This website may not respond to all browser-based privacy signals except where required by applicable law and supported by the website’s technology.

3. How We Use Information

We may use information collected through the website to:

  • Respond to questions, inquiries, or requests.

  • Provide information about therapy services, consultations, workshops, support groups, educational resources, or other offerings.

  • Support appointment scheduling, registration, and booking requests.

  • Process purchases or registrations.

  • Communicate with you when you request information or follow-up.

  • Send marketing or informational communications when appropriate.

  • Operate, maintain, secure, and improve the website.

  • Understand website usage and marketing or advertising performance.

  • Comply with applicable legal, regulatory, professional, or security requirements.

You may unsubscribe from marketing emails at any time using the unsubscribe option included in those communications.

4. Scheduling, Registration, and Purchases

This website may link to or integrate with third-party platforms such as Acuity Scheduling, Squarespace, payment processors, or other service providers.

When you schedule an appointment, register for a workshop or group, purchase a product, or request another service, those providers may collect information needed to complete your request. This may include:

  • Name and contact information

  • Service or appointment selected

  • Appointment date and time

  • Registration information

  • Payment or transaction information, when applicable

Information collected directly by those providers may also be governed by their own privacy policies and terms.

5. How Information May Be Shared

We may disclose limited information to service providers that help operate the website and our business, including providers of:

  • Website hosting and website-platform services

  • Appointment scheduling and registration

  • Payment processing

  • Email and communications

  • Analytics and website-performance measurement

  • Advertising and marketing measurement

  • Website security and technical support

Examples may include Squarespace, Acuity Scheduling, Google, Meta/Facebook/Instagram, payment providers, and other technology providers used to operate or promote our services.

These third parties maintain their own privacy practices and may process information in accordance with their agreements, policies, and applicable law.

We may also disclose information when reasonably necessary to comply with legal obligations, protect legal rights, prevent fraud or misuse, or respond to lawful governmental requests.

We do not sell personal information in exchange for money.

Advertising and analytics technologies may involve disclosures of certain website or device information to third-party platforms for analytics, measurement, or advertising purposes as described above.

6. Clinical Confidentiality and Therapy Information

This Website Privacy Policy applies to general website and online marketing activity. It does not replace the confidentiality protections, professional obligations, informed-consent documents, or privacy practices that apply to an established psychotherapy relationship.

Information created or maintained as part of professional mental health services may be protected under additional federal and California privacy and confidentiality laws.

Where applicable, additional information about the handling of protected health information is provided in Tiffany Totah’s Notice of Privacy Practices.

Submitting a website form, sending an email, scheduling a consultation, purchasing a product, or registering for a general educational offering does not by itself establish a therapist-client relationship.

A therapist-client relationship is established only through the appropriate intake, consent, and professional-service process.

Emergencies

Website forms and general email should not be used for urgent or emergency communications and may not be monitored continuously.

If you are experiencing a medical or mental health emergency, call 911, call or text 988 in the United States, or go to the nearest emergency department.

7. Your Privacy Choices and Requests

You may contact us if you would like to:

  • Ask what personal information you have provided through the website.

  • Request correction of inaccurate information.

  • Request deletion of information where appropriate.

  • Ask questions about website privacy or tracking.

  • Opt out of marketing communications.

Certain information may need to be retained because of legal, professional, clinical, accounting, security, or recordkeeping requirements.

Requests involving psychotherapy or clinical records may be subject to separate legal and professional requirements.

Privacy requests may be sent to:

light2light@illuminatebytotah.com

We may need to verify your identity before completing certain requests.

8. Security

We use reasonable administrative and technical measures intended to protect personal information collected through the website.

These measures may include secure website connections, password-protected accounts, limited access to information, and security protections provided by our technology and website-service providers.

However, no website, email system, internet transmission, or online platform can be guaranteed to be completely secure.

For confidential clinical communications, please use the secure communication methods provided by the practice rather than general website forms or standard email.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Respond to inquiries.

  • Provide requested services or information.

  • Process registrations or purchases.

  • Support scheduling and communications.

  • Maintain appropriate business, legal, professional, or financial records.

  • Meet applicable legal, licensing, ethical, or regulatory obligations.

  • Protect website security and prevent misuse.

Information may be deleted, anonymized, or securely retained when it is no longer needed, as appropriate.

10. Children’s Privacy

This website is not directed to children under 13, and we do not knowingly use the general website or advertising forms to collect personal information directly from children under 13.

If professional services are provided to minors, information relating to those services is handled separately in accordance with applicable consent, confidentiality, and professional requirements.

11. Third-Party Websites and Services

This website may contain links to independently operated websites, social media platforms, scheduling services, payment services, videos, or other third-party resources.

We are not responsible for the privacy, security, content, or practices of independently operated third-party websites or services.

We encourage you to review the privacy policies of those services when providing information directly to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, website technology, privacy practices, or applicable requirements.

When material changes are made, the updated policy will be posted on this page and the effective date above will be revised. Where appropriate, additional notice may also be provided.

13. Contact

For questions about this Privacy Policy or privacy requests, please contact:

Tiffany Totah, MFT
Email: light2light@illuminatebytotah.com
Website: www.tiffanytotahmft.com