Privacy Policy

Effective Date: September 12, 2026

Introduction and Organizational Info

We, at Healing Phoenix Psychology, are dedicated to serving our clients and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website amcdonald.flywheelsites.com.

Our primary goals in processing this information include:

1. Enhancing the user experience by understanding client needs and preferences.

2. Providing timely support and responding to inquiries or service requests.

3. Improving our products and services to meet evolving client needs.

4. Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations to ensure data is protected against unauthorized access, disclosure, alteration, and destruction.

We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. Contact us at admin@healingphoenixpsychology.com or 801-441-0555.

HIPAA and Protected Health Information

Healing Phoenix Psychology is a healthcare provider. When you receive clinical services from us, such as Individual Therapy, Group Therapy, Psychological Evaluations, or Online Therapy, your protected health information (PHI) is handled in accordance with the Health Insurance Portability and Accountability Act (HIPAA), separately from this website Privacy Policy.

Our HIPAA Notice of Privacy Practices describes in detail how we use and disclose PHI, and your rights regarding your health records, including the right to request access to and copies of your records.

This Privacy Policy governs information collected through our website and general business operations. Where this policy and the HIPAA Notice of Privacy Practices overlap, the HIPAA Notice of Privacy Practices governs the handling of your clinical and health records.

Scope and Application

This policy protects the personal information of all stakeholders, including website visitors, registered users, and clients, interacting with amcdonald.flywheelsites.com. It outlines our practices and your rights related to personal information collected outside of the PHI covered under our HIPAA Notice of Privacy Practices.

Data Collection and Processing

We gather personal data through various interactions, including when you use services such as Individual Therapy, Psychological Evaluations, Trauma & PTSD treatment, or when you directly provide information to us.

Types of personal information we may process:

1. First and last name

2. Browsing history

3. IP-based approximate location

4. Device ID

5. Health and treatment-related information you provide, such as through intake forms or when scheduling services

6. Insurance and billing information

7. Appointment and scheduling information

8. Emergency contact information, if provided

How we use your data:

1. Authentication and security

2. Analytics and performance tracking

3. Customer support

4. Displaying videos

5. Scheduling and delivering clinical services

6. Billing and insurance processing

7. Compliance with legal obligations, including HIPAA

Data Storage and Protection

Data Storage

Personal information is stored on secure servers located in the United States. International data transfers comply with all applicable laws and maintain equivalent data protection standards.

Data Protection Measures

1. Encryption: Robust encryption technologies protect data during transfer and at rest.

2. Access Control: Access is strictly limited to authorized personnel with a legitimate business need.

3. Security Audits & Monitoring: Regular audits identify vulnerabilities; systems are monitored for unusual activity.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to meet legal, accounting, licensing, and reporting requirements.

Data Processing Agreements

When sharing data with third-party providers, we use Data Processing Agreements (DPAs) to ensure compliance with GDPR and other applicable laws.

Legal Basis for Processing

Where applicable data protection law (such as the GDPR) requires a legal basis for processing, we rely on one or more of the following: your consent, the necessity of processing to provide services you have requested, our legitimate business interests, and compliance with our legal obligations. Because health information is treated as a special category of data, we process it only with your explicit consent or as otherwise permitted for healthcare purposes.

Transparency and Control

You will always be informed about significant changes to our sharing practices. For questions, contact admin@healingphoenixpsychology.com or 801-441-0555.

User Rights and Choices

In accordance with GDPR and applicable data protection laws, you have the following rights:

Your Rights

1. Right of Access (Art. 15 GDPR): Request access to your personal information.

2. Right to Rectification (Art. 16 GDPR): Request correction of inaccurate data.

3. Right to Erasure (Art. 17 GDPR): Request deletion of your data.

4. Right to Restriction of Processing (Art. 18 GDPR): Request restricted processing.

5. Right to Data Portability (Art. 20 GDPR): Receive your data in a machine-readable format.

6. Right to Object (Art. 21 GDPR): Object to processing, including direct marketing.

7. Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time.

8. Right to Lodge a Complaint (Art. 77 GDPR): File a complaint with a supervisory authority.

Exercising Your Rights

To exercise any of these rights, contact admin@healingphoenixpsychology.com or 801-441-0555.

Cookies and Tracking Technologies

Understanding Cookies and Tracking Technologies

Cookies are small data files placed on your device that enable us to remember your preferences and collect information about your website usage.

How We Use These Technologies

1. Essential Cookies: Required for functionality (authentication, security). No consent needed.

2. Performance & Analytics Cookies: Track page visits and errors to improve the website.

3. Functional Cookies: Enable personalization and enhanced features.

4. Advertising & Targeting Cookies: Deliver relevant ads and measure campaign effectiveness. If third-party ad/targeting cookies are used, this may count as a “share” of personal information under CCPA/CPRA — see the Right to Opt-Out section below, which has been updated accordingly.

Your Choices and Consent

Upon your first visit, you may:

1. Accept all cookies

2. Reject non-essential cookies

3. Customize your preferences

International Data Transfers

We may transfer personal information outside your country of residence. Where such transfers occur, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms, to ensure your data receives an equivalent level of protection.

Compliance with United States Privacy Laws

To appeal a decision, contact us within 60 days via:

• Email: admin@healingphoenixpsychology.com

• Phone: 801-441-0555

A. Individual Rights (California Residents — CCPA) Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the following rights:

B. Right to Know Request disclosure of personal information collected, used, shared, or sold, including categories, sources, purposes, and third parties involved.

C. Right to Delete Request deletion of your personal information.

D. Right to Correct Request correction of inaccurate information.

E. Right to Limit Restrict use of sensitive personal information to limited purposes.

F. Right to Opt-Out Healing Phoenix Psychology does not sell personal information. If applicable, you may opt out via the cookie preference tool on our website.

G. Right to Non-Discrimination You are protected from discrimination for exercising your rights.

H. Submitting Requests Email admin@healingphoenixpsychology.com or call 801-441-0555.

I. California Confidentiality of Medical Information Act (CMIA) As a business that may process medical information about California residents, we also comply with applicable requirements of the CMIA, including obtaining authorization before disclosing medical information except as permitted by law.

J. Sensitive & Biometric Data Processed only with prior consent for clearly disclosed purposes. Withdraw consent anytime via our website or by emailing admin@healingphoenixpsychology.com.

Minors and Parental Consent

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through our website without parental consent.

Data Breach Notification

In the event of a breach affecting your personal information, we will notify affected individuals and, where required, regulatory authorities in accordance with applicable law and within legally required timeframes.

Policy Updates and Changes

Notification of Changes

1. Notification Process: Significant changes will be communicated via email, website notifications, or other appropriate channels, with the effective date indicated at the top of the document.

2. Reviewing Changes: Continued use of our services after updates signifies acceptance of the updated terms.

Contact Us

For questions about policy updates, contact admin@healingphoenixpsychology.com or 801-441-0555.