Graceful Health Privacy Policy

Who we are

Graceful Health Behavioral and Wellness PLLC is a behavioral health practice associated with the website gracefulhealthbehavioralwellness.com. The practice is located at 21 Mazzeo Drive, Randolph, Massachusetts 02368.

This Privacy Policy is intended to explain website-related information practices. It should be reviewed alongside any clinical privacy notices that apply to patient care.

Scope of this policy

This policy relates to information provided by website visitors and technical information processed when people access or interact with the site.

Depending on the functionality enabled on the website, this may include:

• General contact and appointment inquiries.
• Website usage and technical data.
• Form submissions and visitor communications.
• Cookie and similar technology information.
• Information processed by integrated external services.

Information we may collect

Information you provide

When submitting a website form or contacting the practice, visitors may provide details such as their name, telephone number, email address and the subject of their inquiry. The exact fields depend on the form being used.

Information collected technically

Hosting systems and website technologies may process technical information, which can include IP addresses, browser type, device characteristics, timestamps, requested pages and security logs.

How information may be used

Website information may be processed for legitimate operational purposes, depending on the website's configuration and the services used.

• Responding to visitor inquiries and contact requests.
• Supporting website operation and maintenance.
• Protecting systems against misuse or security threats.
• Understanding or improving website performance, where analytics are enabled.
• Meeting applicable legal and recordkeeping obligations.
• Supporting appointment inquiries where an approved workflow is in place.

These descriptions do not authorize uses of protected health information beyond those permitted by applicable law.

Cookies, analytics and similar technologies

Websites may use cookies and related technologies to support functionality, security, visitor preferences or analytics.

Your browser may offer controls for cookies. The practice must identify the actual cookies, analytics tools, advertising technologies and any applicable consent requirements before this section is finalized.

How information may be shared

Depending on the services in use, website information may be processed by hosting, security, form-delivery, technical support or other service providers acting on the practice's behalf.

Information may also be disclosed when authorized or required by applicable law. The practice should identify its relevant vendors and establish appropriate safeguards and contractual protections, including business associate agreements where required.

Health information and clinical privacy

Website privacy and the privacy of clinical records are not necessarily governed by identical processes.

Where applicable, protected health information is subject to federal and state healthcare privacy requirements, including the HIPAA Privacy Rule and related rules.

Data security

The practice should use reasonable technical and organizational safeguards appropriate to the information it processes and the requirements applicable to its operations.

No internet-based system can be guaranteed completely secure. Visitors should avoid sending sensitive medical information through general website forms unless the practice expressly identifies a secure, appropriate method.

Data retention

Retention periods may depend on the type of information, its purpose, applicable legal obligations, vendor settings and relevant practice policies.

Before publication, the practice should confirm how long website form submissions, emails, technical logs and other site-related records are retained and when they are deleted or archived.

Your choices and privacy rights

Depending on the type of information and applicable law, individuals may have rights to request access, corrections, information about processing or other privacy-related action.

• Contact the practice with general website privacy questions.
• Review and adjust browser cookie preferences.
• Ask about correcting contact details submitted through the website.
• Use applicable patient-record privacy procedures for clinical records.
• Submit other requests available under applicable law.

Some records must be retained under applicable law and may not be eligible for immediate deletion.

Third-party websites, portals and services

External websites and portals linked from Graceful Health may operate under their own privacy policies and security practices.

Before submitting information on an external service, review the privacy information and terms provided by that service.

Children's privacy

The public website is intended to provide general practice information. It is not designed as a service through which children should independently submit sensitive personal or medical information.

Parents and guardians should contact the practice to ask about services for minors, eligibility, consent and appropriate communication procedures.

Changes to this Privacy Policy

This policy may be revised as website functionality, business practices or applicable legal requirements change.

The final published policy should display an accurate effective or last-updated date, reflecting when the practice approved the applicable version.

Contact information

For general questions about the website's privacy practices, please contact Graceful Health Behavioral and Wellness PLLC.