Privacy Policy

Ingrid Johnston Therapy ingridjohnstontherapy.com

Last updated: February 10, 2026

Overview

Ingrid Johnston Therapy ("we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, ingridjohnstontherapy.com ("the Site"), and of clients who receive therapeutic services. This Privacy Policy describes how we collect, use, disclose, and protect information gathered through the Site.

This Privacy Policy applies to information collected through the Site. It does not apply to Protected Health Information (PHI) collected as part of therapy services, which is governed by the Health Insurance Portability and Accountability Act (HIPAA) and Washington State law (RCW Chapter 70.02). Our HIPAA Notice of Privacy Practices is provided to all clients during the intake process and is available upon request.

Information We Collect

Information you provide directly: When you submit a contact form, schedule an appointment, or send us an email, you may provide us with your name, email address, phone number, and a brief description of what brings you to therapy. We collect this information to respond to your inquiry and, if applicable, to begin the intake process.

Information collected automatically: When you visit the Site, certain information may be collected automatically through cookies, analytics tools, or similar technologies. This may include your IP address, browser type, operating system, referring URLs, pages viewed on the Site, date and time of your visit, and general geographic location (city/region level, not precise location). We use this information to understand how visitors use the Site and to improve its content and functionality.

How We Use Your Information

We use the information collected through the Site for the following purposes: to respond to your inquiries and contact form submissions, to schedule and manage appointments, to improve the content, functionality, and user experience of the Site, and to comply with legal obligations.

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

Third-Party Services

The Site may use third-party services for website hosting, analytics, scheduling, and email communication. These third-party services may collect and process certain data on our behalf. We use commercially reasonable efforts to work with third-party providers who maintain appropriate privacy and security practices. Current third-party services that may process data through the Site include our website hosting provider (Squarespace), analytics tools, and any scheduling or contact form software integrated into the Site. Each of these providers has its own privacy policy governing how it handles your data.

Cookies and Tracking Technologies

The Site may use cookies and similar tracking technologies to enhance your browsing experience and to collect analytics data. Cookies are small text files placed on your device that allow us to recognize your browser and capture certain information. You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect the functionality of certain features on the Site.

Communications Security

Information submitted through contact forms, email, or scheduling tools on this Site may not be fully encrypted or secure. We recommend that you do not include sensitive personal health information in any communication through the website. Once a formal therapeutic relationship has been established, communication of health information is governed by HIPAA and our Notice of Privacy Practices.

Data Retention

Information collected through the Site (such as contact form submissions and email inquiries) is retained for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. If you become a client, information related to your treatment is retained in accordance with Washington State record retention requirements and HIPAA.

Your Rights

You have the right to request access to, correction of, or deletion of personal information we have collected from you through the Site. To make such a request, please contact us at ingrid@ingridjohnstontherapy.com or (206) 658-7831. We will respond to your request within a reasonable timeframe.

If you are a client, your rights regarding Protected Health Information are described in our HIPAA Notice of Privacy Practices.

Washington State My Health My Data Act

Ingrid Johnston Therapy is a HIPAA-covered entity. Protected Health Information (PHI) collected in the course of providing therapy services is governed by HIPAA and is exempt from the Washington My Health My Data Act (RCW 19.373). However, certain information collected through this website that is not PHI, such as information submitted before a therapeutic relationship is established, may be subject to the My Health My Data Act.

To the extent applicable, we comply with the My Health My Data Act's requirements regarding the collection, use, and sharing of consumer health data. We do not sell consumer health data. If you have questions about how your information is handled, or if you wish to exercise any rights under the My Health My Data Act, including the right to access or delete your consumer health data, please contact us at ingrid@ingridjohnstontherapy.com or (206) 658-7831.

Note for Ingrid's attorney: The Washington AG has stated that regulated entities must maintain a separate, standalone Consumer Health Data Privacy Policy linked on the homepage if they process consumer health data subject to the My Health My Data Act. Because Ingrid is a HIPAA-covered entity, her PHI is exempt. However, the pre-intake contact form data and website analytics could potentially fall under the Act. Her attorney should determine whether a separate Consumer Health Data Privacy Policy is required in addition to this general Privacy Policy, or whether this section provides adequate coverage given the narrow scope of non-PHI data collected through the website.

Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 through the Site. If you believe that a child under 13 has submitted personal information through the Site, please contact us and we will take steps to delete that information.

Under Washington State law, individuals aged 13 and older may independently consent to outpatient mental health treatment. Privacy practices related to minor clients are discussed during the intake and consent process.

Links to Third-Party Websites

The Site may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information collected through the Site. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The most current version will always be available on this page, with the "Last Updated" date at the top. Your continued use of the Site following any changes constitutes your acceptance of the updated Privacy Policy.

Contact

If you have questions about this Privacy Policy or your personal information, please contact:

Ingrid Johnston Therapy Ingrid Johnston, MS, LMFT, MDFT Email: ingrid@ingridjohnstontherapy.com Phone: (206) 658-7831