Website Privacy Policy

Dr. Amber Ufford is committed to safeguarding your privacy, especially with regard to any Protected Health Information (PHI) that you may reveal on this website.

Purpose

This website privacy policy describes the details of information collected on my website and how I am ensuring the privacy of that information. There is a separate document, a Notice of Privacy Practices, that describes how my practice ensures the privacy of your clinical information, which meets established HIPAA standards. My Notice of Privacy Practices is also distributed to every patient upon intake.

Contact me if you have any questions or problems regarding the use of your Personal Data and I will gladly assist you.

By using this website, you consent to the Processing of your Personal Data as described in this Privacy Policy.

Definitions

For the purposes of this privacy policy, these terms are used as defined below.

Personal Data – any information relating to an identified or identifiable natural person.
Protected Health Information (PHI) – any individually identifiable information relating to health (more information on this is available in the Notice of Privacy Policies I send to all patients).
Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data subject – a natural person whose Personal Data is being Processed.
Child – a natural person under 18 years of age.
I/Me/My Practice (either capitalized or not) – Amber Ufford, Ph.D.

Cookies – Small files that are placed on your computer, mobile device or any other device by a website. Cookies contain the details of your browsing history on that website. This site uses cookies from Wix and Google to deliver its services and to analyze traffic. Information about your use of this site is shared with Google. By using this site, you agree to its use of cookies. The purpose of cookies is to provide you with a more personalized experience, and to make it unnecessary for you to re-enter your preferences and login credentials every time you use a website.

Types of Data Collected

Personal Data

While using this service, I may ask you to provide personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

First name and last name
Email address
Phone number
Website
Question/Concern
Consent
Usage Data

Other applications embedded on this website, such as forms or embedded video applications, may collect additional information as specified by their terms of service.

Forms/Questionnaires

This practice uses web-based forms to collect information from you. The contact form native to Wix can be used for initial contact, but please note that it is not HIPAA-compliant and should not be used to enter personal health information. You may email me directly at hello@dramberufford.com for HIPAA-secure privacy.

Usage Data

Usage data is collected automatically when using the service. Usage data may include information such as your device's internet protocol address (IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the service by or through a mobile device, my practice may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

My practice may also collect information that your browser sends whenever you visit my service or when you access the service by or through a mobile device.

Payment Information

Payment information is collected through SimplePractice, an Electronic Health Record (EHR) system. You may access the privacy policies of SimplePractice here. SimplePractice is HIPAA-compliant.

Tracking Technologies and Cookies

This site uses cookies and similar tracking technologies to track your activity on our service and store certain information. Tracking technologies may include beacons, tags, and scripts to collect and track information and to improve and analyze the service. You can set your browser not to accept cookies, but please note that some website features may not function as a result.

When you visit this website Google Analytics will provide usage information automatically and limit access and terms of usage of that information . You can prevent Google Analytics from recording any data by installing the Google Analytics Opt-out Browser Add-on. You can also control the security settings for your Google account using their privacy tools.

Use of Your Personal Data

My practice does not sell, rent, or lease personal information.

The company may use and share personal data for the following purposes and situations:

To provide and maintain my service, including to monitor the usage of our service.
To manage your account: to manage your registration as a user of the service. The personal data You provide can give you access to different functionalities of the service that are available to you as a registered user.
For the implementation of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services you have purchased or of any other contract with my practice through the service.
To contact you: To contact you by email messaging, telephone calls, text messaging, video conferencing, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
With your consent: My practice may disclose your personal and protected health information with your consent as indicated by you on the form for authorization for disclosure and release of confidential information found in the patient portal.
For continuity of care: My practice may provide your information to government bodies or licensure boards for HIPAA-compliancy audit per the limitations and guidelines outlined in HIPAA law and detailed in my HIPAA notice of policy practices; to third-party applications and business partners that provide services and products under the required HIPAA-compliant business associate agreement to protect your privacy; or to a records custodian in the event of my incapacitation or death.
To manage your requests: To attend and manage your requests to my practice.
To provide you with news, general information, and special offers about other goods, services and events which I offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
For business transfers: My practice may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of my assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by my practice about my service users is among the assets transferred.
To facilitate video conferencing with other users under the conditions of your informed consent agreement for group therapy.
To comply with law enforcement: To protect and defend the rights or property of the company; prevent or investigate possible wrongdoing in connection with the service; protect the personal safety of users of the service or the public; or protect against legal liability.
When you voluntarily choose to interact in public areas with other users, directly or indirectly, such as on social media sites associated with this company and embedded on this website. Your voluntary sharing and distribution of your identity and information on public sites is beyond my control. You may refer to the social media policy in my practice documents.
For other purposes: My practice may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our service, products, services, marketing and your experience.

Retention of Your Personal Data

My practice will retain your personal data collected through this website only for as long as is necessary for the purposes set out in this privacy policy. I will retain and use your personal data to the extent necessary to comply with my legal obligations (for example, ifI am required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Therapy patient data containing protected health information will be retained per New York State's guidelines for the professional practice of psychology.

My practice will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or I am legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including personal data collected through the company website, is processed at the practice's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Your use of this site represents your agreement and consent to that transfer.

My practice will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that I assist in deleting the personal data that I have collected about you except where retention is required by law.

Security of Your Personal Data

The security of your personal data is important to me, but remember that no method of transmission over the internet, and no method of electronic storage is 100% secure. While I strive to use commercially acceptable means to protect your personal data, I cannot guarantee its absolute security. In the event of a breach, I will notify you of the breach. If such breach involves protected health information, I will comply with the breach notification rule to notify you and the Department of Health and Human Services Secretary that a breach has occurred.

Children's Privacy

My practice does not intend to collect or knowingly collect information from children. While I offer services for children, I do not target children themselves with my services. However, this is a public website. Parents and guardians are responsible for the use of this public website by their minor children.

Links to Other Websites

This service may contain links to other websites that are operated by those companies. Please view the privacy policies and terms of service of each site you visit. I have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

I may update this privacy policy periodically. You are advised to review this policy regularly for any changes. The date of the most recent version is noted in the footer of this policy. Changes to this policy are effective per the date indicated at the top of the page.

Contact Me

If you have any questions about this website privacy policy, you can contact me by visiting the contact page on this website or by emailing me at hello@dramberufford.com. Please note that I cannot troubleshoot privacy issues for third-party sites and applications; you will need to contact them directly.