Palette and Play Therapy Center, PLLC, doing business as Palette and Play Therapy Center or PPTC (“we,” “our,” or
“the Practice”), respects your privacy and is committed to protecting the
personal information you provide when using our website,
Palette and Play Therapy Center.

This Privacy Policy explains what information may be collected through our
website, how it may be used, and the choices available to you. This policy
applies only to information collected through this public website. It does
not replace our HIPAA Notice of Privacy Practices, which explains how we
use and disclose protected health information in connection with treatment,
payment, and health care operations.

1. This Website Is Not a Patient Portal

This website is intended to provide general information about our Practice,
therapists, services, and methods of contacting us.

Please do not use this website, its general contact forms, comments, or
standard email links to submit sensitive medical or mental health
information. This includes diagnoses, symptoms, treatment history,
insurance information, Social Security numbers, crisis information, or
other protected health information.

Submitting a website inquiry does not create a therapist-client
relationship. A therapist-client relationship begins only after the
Practice and prospective client have completed the intake and consent process and the Practice has agreed to
provide services.

For appointments, intake forms, clinical messages, billing matters, or
records requests, please use our designated secure platform at
palette-playtc.sessionhealth.com
or contact us at (210) 245-9175.

2. Information We May Collect

We may collect limited information that you voluntarily provide through
the website, such as:

• Your name
• Telephone number
• Email address
• General service interest
• Preferred method of contact
• Other nonclinical information you choose to provide

We may also automatically receive limited technical information when you
visit the website, including:

• Internet Protocol address
• Browser and device type
• General geographic region
• Pages visited
• Date and time of access
• Referring website
• Website performance and security information

We do not intend to collect protected health information through this
public website.

3. How We Use Website Information

We may use information collected through the website to:

• Respond to general questions
• Provide information about our services
• Direct you to an appropriate therapist, service, or secure intake process
• Maintain and improve the website
• Protect the security and integrity of the website
• Prevent fraud, spam, misuse, or unauthorized access
• Comply with applicable legal obligations

We will not use information submitted through the website to diagnose or
treat a health condition.

4. Protected Health Information and HIPAA

Once you become a client, certain information created, received,
maintained, or transmitted by the Practice may be protected health
information under the Health Insurance Portability and Accountability Act,
commonly known as HIPAA, and other applicable privacy laws.

Our use and disclosure of protected health information is governed by our
HIPAA Notice of Privacy Practices rather than this Website Privacy Policy.

The Practice maintains administrative, physical, and technical safeguards
designed to protect protected health information as required by applicable
law. However, no public website, email system, or internet transmission can
be guaranteed to be completely secure.

5. Contact Forms and Email

Messages sent through ordinary website forms or standard email may not be
encrypted or appropriate for confidential clinical communication.

Please limit website and email messages to basic administrative matters,
such as requesting general information or asking how to begin the intake
process. Do not include detailed information about your mental health,
medical history, family circumstances, treatment, or other sensitive
matters.

When appropriate, we may redirect your communication to a secure platform.

6. Appointment and Patient Portal Services

We may provide links to third-party scheduling, telehealth, billing,
electronic health record, or patient portal services. These platforms
operate under their own privacy policies, terms, and security practices.

When those vendors handle protected health information on behalf of the
Practice, we select services intended for health care use and enter into
appropriate contractual arrangements when required.

Information submitted directly through a third-party portal is governed by
the privacy terms applicable to that service and by our HIPAA Notice of
Privacy Practices where applicable.

7. Cookies and Analytics

Our website may use cookies or similar technologies that help the website
function, remember preferences, measure website performance, and identify
technical or security issues.

We do not intentionally use advertising or analytics tools to collect
clinical information or information submitted through secure patient
services.

You may be able to disable cookies through your browser settings.
Disabling cookies may affect the functionality of some website features.

No Marketing Analytics

We do not use third-party advertising pixels or behavior-based marketing
trackers on pages related to scheduling, intake, patient portals, or health
care services.

8. Online Advertising and Tracking Technologies

We do not knowingly disclose protected health information to advertising
platforms.

We evaluate website plugins, analytics tools, embedded content, chat tools,
scheduling widgets, and tracking technologies before using them. We do not
authorize third parties to use information obtained through our website to
infer a person’s diagnosis, treatment status, or reason for seeking
therapy.

9. How We Share Website Information

We may share limited website information with service providers that
assist us with functions such as:

• Website hosting
• Website maintenance
• Cybersecurity
• Spam detection
• Scheduling
• Secure communications
• Business administration

We may also disclose information when reasonably necessary to:

• Comply with applicable law or legal process
• Protect the rights, safety, or property of the Practice or others
• Investigate fraud, security incidents, or misuse
• Enforce our website terms

We do not sell protected health information.

We do not sell website visitors’ personal information for monetary
payment.

10. Data Retention

We retain website inquiries only for as long as reasonably necessary to
respond, document administrative communications, maintain security, meet
legal obligations, or support legitimate business operations.

Clinical records and protected health information are retained according
to applicable federal and Texas record-retention requirements and the
Practice’s records policies.

11. Data Security

We use reasonable safeguards intended to protect website information
against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Secure website connections
• Account access controls
• Strong passwords and multifactor authentication
• Security updates
• Malware and spam protections
• Limited workforce access
• Vendor review
• Backup and incident-response procedures

No website or electronic transmission method is completely secure. For
this reason, sensitive clinical information should be submitted only
through secure methods approved by the Practice.

12. Children’s Privacy

Our services may include therapy for children and adolescents, but this
public website is directed toward parents, guardians, adults, and
individuals seeking general information about the Practice.

We do not knowingly request that children submit personal or clinical
information directly through the public website without involvement from a
parent, guardian, or other legally authorized person.

Parents and guardians should contact the Practice directly regarding
services for a minor.

13. Links to Other Websites

Our website may contain links to third-party websites or services. We are
not responsible for the privacy, security, content, or availability of
websites we do not control.

Visiting an external website is subject to that website’s privacy policy
and terms.

14. Your Privacy Choices

Depending on the type of information involved and applicable law, you may
contact us to:

• Ask what personal information you submitted through the website
• Request correction of inaccurate website contact information
• Request deletion of a nonclinical website inquiry
• Opt out of nonessential marketing communications
• Request information about our privacy practices

Requests involving clinical records or protected health information will
be handled under our HIPAA Notice of Privacy Practices and applicable law.

15. HIPAA Privacy Rights

Clients may have rights regarding their protected health information,
including the right to:

• Request access to or copies of certain health records
• Request corrections to certain health records
• Request confidential communications
• Request certain restrictions
• Receive an accounting of certain disclosures
• Obtain a paper or electronic copy of our Notice of Privacy Practices
• File a privacy complaint without retaliation

These rights may be subject to legal limitations. Instructions for
exercising HIPAA rights are included in our Notice of Privacy Practices.

16. Complaints

You may submit questions or complaints regarding the Practice’s privacy
practices to:

You will not be retaliated against for submitting a good-faith privacy
complaint.

You may also file a complaint with the U.S. Department of Health and Human
Services Office for Civil Rights. Additional information is available
through the

HHS Office for Civil Rights complaint process
.

17. Emergencies and Crisis Communications

This website, its contact forms, email addresses, and social media accounts
are not monitored continuously and should not be used for emergencies or
crisis support.

If you believe you or another person is in immediate danger, call
911 or go to the nearest emergency room. In the
United States, you may also call or text
988 to reach the Suicide & Crisis Lifeline.

18. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our
website, services, vendors, security practices, or legal obligations.

The updated policy will be posted on this page with a revised “Last
Updated” date.

19. Contact Us