Privacy Policy

Last Updated: October 2025

Notice at Collection

Crescent Moon Therapy (“I,” “me,” or “my”) collects limited personal information such as your name, email address, phone number, and any details you voluntarily share through contact forms or email. This information is used solely to respond to inquiries, schedule consultations, and provide therapy services. I do not sell, rent, or share your personal information for advertising purposes.

1. Introduction

I respect your privacy and the sensitive nature of the information you share with me. This Privacy Policy explains how I collect, use, and protect your personal information when you visit cmoontherapy.com, request services, or engage in therapy sessions.

Because this practice provides mental health services, I comply with:

  • The Health Insurance Portability and Accountability Act (HIPAA)
  • The Washington My Health My Data Act (RCW 19.375)
  • The Federal Trade Commission (FTC) Act regarding truthful and transparent data use
  • Relevant consumer-protection and privacy laws of the United States

2. Information I Collect

I may collect the following categories of information:

  • Identifiers — Name, email address, phone number, and location details you provide.
  • Electronic Information — Browser type, IP address, and pages visited (through Google Analytics).
  • Health Information — Only if shared within therapy sessions or intake forms.
  • Communication Records — Emails, contact form submissions, or phone messages voluntarily sent to me.

I do not collect financial information, social-security numbers, or biometric data.

3. Sources of Information

Information is collected:

  • Directly from you through website forms, email, or phone.
  • Automatically via cookies and analytics tools when you visit my site.
  • During telehealth sessions through secure, HIPAA-compliant software.

4. Purpose of Collection

Your information is used to:

  • Respond to your inquiries or requests for consultation.
  • Provide therapy sessions and clinical services.
  • Maintain accurate client and business records.
  • Improve the website and monitor security.
  • Comply with ethical, legal, and professional obligations.

I do not use your personal data for automated decision-making or profiling.

5. Communication and Email

Email and website contact forms are not secure or confidential forms of communication. Submitting a message through this site or via email does not establish a therapist-client relationship or constitute therapy.

A professional relationship begins only after an intake consultation, mutual agreement to work together, and signed consent forms. Please avoid sending sensitive clinical details via unencrypted email or forms.

6. Cookies and Tracking Technologies

This website uses cookies and similar technologies to improve functionality and analyze how visitors interact with the site. A cookie consent banner allows you to choose your preferences.

Cookies are categorized as:

  • Essential Cookies — Needed for the website to function.
  • Analytics Cookies — Help measure site use and improve content (e.g., Google Analytics).

You may adjust or disable cookies through your browser settings. For more on Google Analytics privacy practices, visit Google’s Privacy & Terms.

7. Data Security

I take reasonable administrative, physical, and technical precautions to safeguard your data, including:

  • SSL encryption on this website.
  • Password-protected devices and HIPAA-secure platforms.
  • Limited access to records to authorized personnel only (just myself).

However, no online method is 100% secure. By using this site, you acknowledge this inherent risk.

8. HIPAA and Health Information

All clinical information shared within therapy sessions is considered Protected Health Information (PHI) under HIPAA and is handled according to federal and state confidentiality requirements.

I do not disclose PHI without your written consent except when required by law — such as to prevent imminent harm, report abuse, or comply with court orders.

9. Data Retention

I retain client records for the minimum duration required by Washington State licensing laws and HIPAA record-retention standards. Non-client communications (such as form submissions or emails) may be deleted once resolved or within one year.

10. Your Rights

Under federal and Washington State law, you have the right to:

  • Request access to your information.
  • Request correction of inaccurate data.
  • Request deletion of non-clinical personal data (subject to legal exceptions).
  • Withdraw consent for non-essential data processing (like analytics cookies).

Requests can be sent to laura@cmoontherapy.com. I may need to verify your identity before fulfilling requests.

11. Service Providers and Data Sharing

I may use trusted third-party service providers, such as:

  • HIPAA-compliant telehealth platforms
  • Secure email hosting
  • Website hosting and analytics providers

These vendors only access data necessary to perform their functions and are contractually obligated to maintain confidentiality and security. I do not sell or share your information for marketing or retargeted advertising.

12. Disclosure Required by Law

I may disclose information when required by:

  • Court order, subpoena, or legal mandate
  • Ethical obligations (e.g., if there is imminent risk of harm)
  • Professional licensing boards or regulatory agencies

13. Children’s Privacy

This website and services are directed toward adults. I do not knowingly collect information from children under age 13.

14. Business Transfers

If ownership of Crescent Moon Therapy ever changes (e.g., through merger or transfer), your data would remain protected under this same Privacy Policy or a policy with equal or stronger protections.

15. Consent and Updates

By using this website, you consent to this Privacy Policy. I may update it periodically; the “Last Updated” date at the top reflects the most recent version. Your continued use of the website after updates constitutes acceptance of the revised policy.

16. Governing Law and Venue

This Privacy Policy is governed by the laws of the State of Washington and applicable U.S. federal law. Any disputes that cannot be resolved informally shall be brought in the appropriate courts of Washington State.

17. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact:

Crescent Moon Therapy
Email: laura@cmoontherapy.com
Website: https://www.cmoontherapy.com

18. Short Summary

  • I only collect what’s needed to provide therapy and operate my site.
  • I do not sell or share your data for marketing.
  • All therapy information is protected under HIPAA.
  • Contact forms and email are not confidential.
  • You have rights to access, correct, or delete non-clinical data.

Notice of Privacy Practices (HIPAA)

Effective Date: September 1, 2024

This notice describes how health information may be used and disclosed and how you can get access to this information. Please review it carefully.

I. My Pledge Regarding Health Information

I understand that health information about you and your care is personal, and I am committed to protecting it. I maintain records of the care and services you receive, which are necessary to provide quality care and comply with the law. This notice applies to all records of your care generated by Crescent Moon Therapy.

II. How I May Use and Disclose Health Information About You

I may use and disclose your information for treatment, payment, and health care operations as permitted by HIPAA. This includes coordinating care, consultations with other licensed health professionals, billing, and maintaining practice operations. I may also disclose your information when required by law, such as to prevent harm, report abuse, or comply with legal orders.

III. Uses and Disclosures Requiring Authorization

I will not use or disclose psychotherapy notes, share PHI for marketing purposes, or sell your PHI without your explicit authorization.

IV. Uses and Disclosures That Do Not Require Authorization

Certain disclosures are allowed by law without authorization, such as:

  • Reporting suspected abuse or neglect.
  • Complying with public health or legal obligations.
  • Cooperating with health oversight activities or law enforcement when required.
  • Responding to court orders or subpoenas.

V. Your Rights Under HIPAA

  • Access: You may request to review or obtain a copy of your health records.
  • Amendment: You may request corrections to your health information.
  • Restrictions: You may request limits on how your information is used or shared.
  • Confidential Communications: You may request alternative methods or locations for contact.
  • Accounting of Disclosures: You may request a list of certain disclosures made.
  • Copy of This Notice: You may request a paper or digital copy at any time.

Requests may be made in writing to laura@cmoontherapy.com.

VI. Acknowledgment of Receipt

By engaging in services, you acknowledge receipt of this HIPAA Notice of Privacy Practices and agree to its terms.

← Back to Home