Privacy Policy
Last updated February 21, 2026
INTRODUCTION - Shana Pallotta, LMFT ("I," "me," or "my") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website (shanatherapy.com).
Please read this Privacy Policy carefully. By using this website, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the website.
SCOPE OF THIS POLICY - This Privacy Policy applies only to information collected through this website. It does not apply to:
Information collected during therapy sessions (covered by HIPAA and informed consent)
Information collected through my secure client portal (covered by separate agreements)
Information collected offline or through other channels
INFORMATION I COLLECT
1. Information You Provide Voluntarily - I collect information that you voluntarily provide when you:
Fill out a contact form
Schedule a consultation
Subscribe to email updates or newsletters
Send me an email
This may include:
Name
Email address
Phone number
Message content
Any other information you choose to provide
2. Automatically Collected Information
When you visit my website, certain information may be automatically collected, through cookies, web beacons, and similar technologies, including:
IP address
Browser type and version
Device type
Operating system
Pages visited and time spent on pages
Referring website
Date and time of visit
Clickstream data
3. Information I Do NOT Collect Through This Website
I do not collect:
Social Security numbers
Credit card information (payment processing is handled by secure third-party processors)
Protected health information (PHI) through this website
Sensitive personal information through unsecured means
HOW I USE YOUR INFORMATION
I use the information I collect to:
Respond to your inquiries and consultation requests
Schedule appointments
Send you requested information or resources
Improve my website and services
Analyze website usage and trends
Comply with legal obligations
Protect against fraudulent or illegal activity
I will never sell, rent, or share your personal information with third parties for their marketing purposes.
COOKIES AND TRACKING TECHNOLOGIES
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit.
How I Use Cookies:
Essential Cookies Required for the website to function properly (e.g., contact form submission)
Analytics Cookies: Help me understand how visitors use my website (e.g., Google Analytics)
Preference Cookies: Remember your settings and preferences
Third-Party Cookies:
This website may use third-party services that set cookies:
Google Analytics (website traffic analysis)
Scheduling software such as SimplePractice or Calendly
Email service
Your Cookie Choices:
You can control cookies through your browser settings. However, disabling cookies may affect website functionality.
To opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
THIRD-PARTY SERVICE PROVIDERS
I may share your information with trusted third-party service providers who assist in operating my website and conducting my business, including:
Website Hosting: Squarespace
Email Services
Scheduling Software: SimplePractice, Calendly
Analytics: Google Analytics
These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
IMPORTANT: Once you become a client, protected health information (PHI) is handled in accordance with HIPAA regulations and is covered by separate agreements, not this Privacy Policy.
HOW I PROTECT YOUR INFORMATION
I implement reasonable security measures to protect your information, including:
Secure server hosting
SSL encryption for data transmission
Regular security updates
Limited access to personal information
-Secure password protection
However, no method of transmission over the internet or electronic storage is 100% secure. While I strive to protect your information, I cannot guarantee its absolute security.
IMPORTANT: Email and website contact forms are NOT secure methods of communication. Do not include sensitive personal information, mental health details, or emergency information in emails or contact forms.
DATA RETENTION
I retain information you provide through this website for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Contact form submissions: Retained for up to [2 years] or until you request deletion
Email communications: Retained according to standard business practices
Analytics data: Anonymized data may be retained indefinitely
YOUR PRIVACY RIGHTS
California Residents (CCPA Rights):
Under the California Consumer Privacy Act (CCPA), California residents have the right to:
Know: Request information about the personal data I collect, use, and disclose
Access: Request a copy of your personal information
Delete: Request deletion of your personal information (with certain exceptions)
Opt-Out: Opt out of the sale of personal information (Note: I do not sell personal information)
Non-Discrimination: Not be discriminated against for exercising your privacy rights
To exercise these rights, please contact me using the information below.
All Users:
You have the right to:
Request access to your personal information
Request correction of inaccurate information
Request deletion of your information (subject to legal and business requirements)
Opt out of marketing communications
Disable cookies through your browser settings
CHILDREN'S PRIVACY
This website is not intended for children under 18. I do not knowingly collect personal information from children under 18. If you believe I have collected information from a child under 18, please contact me immediately.
LINKS TO OTHER WEBSITES
This website may contain links to third-party websites (e.g., crisis resources, professional organizations, external resources). I am not responsible for the privacy practices of these websites. I encourage you to review the privacy policies of any third-party sites you visit.
DO NOT TRACK SIGNALS
Some browsers have a "Do Not Track" feature. This website does not currently respond to Do Not Track signals.
HIPAA AND THERAPY CLIENTS
Important Distinction:
This Privacy Policy applies to information collected through this public website only.
If you become a therapy client:
Your protected health information (PHI) is covered by HIPAA regulations
You will receive a separate Notice of Privacy Practices
Your information will be handled through HIPAA-compliant systems
Different privacy protections and procedures apply
The use of this website does not create a therapist-client relationship or trigger HIPAA protections. HIPAA protections begin only when you become an established client.
CHANGES TO THIS PRIVACY POLICY
I reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to this website. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the website after changes are posted constitutes your acceptance of the revised Privacy Policy. I encourage you to review this Privacy Policy periodically.
CONTACT ME If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact me: Shana Pallotta, LMFT California License #111988 [shana@shanatherapy.com] [323.999.5660] Pasadena, California
For California residents: You may also contact me to request information about the categories and specific pieces of personal information I have collected about you in the past 12 months.
COMPLAINTS If you believe your privacy rights have been violated, you may file a complaint with: California Board of Behavioral Sciences, 1625 N. Market Blvd., Suite S-200 Sacramento, CA 95834 Phone: (916) 574-7830 Website: www.bbs.ca.gov You may also file a complaint with the California Attorney General's Office regarding CCPA violations.
CONSENT By using this website, you consent to this Privacy Policy and agree to its terms.