Privacy Policy

1. Who we are

Pasadena Clinical Group ("PCG," "we," "our," "us") is a California professional psychotherapy practice located at 301 N. Lake Ave, STE 600, Pasadena, CA 91101. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website at couplestherapy-lacounty.com or interact with our online services.

This policy covers our website. Information collected during clinical treatment is governed by HIPAA and our Notice of Privacy Practices (NPP). California's stricter Confidentiality of Medical Information Act (CMIA, Civil Code §56 et seq.) also applies to clinical PHI.

2. Categories of personal information we collect (CCPA/CPRA disclosures)

In the past 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"):

• Identifiers — name, email, phone, mailing address, IP address, cookie IDs.
• Customer records (Cal. Civ. Code §1798.80(e)) — name, contact information, financial information when paying out-of-pocket.
• Internet or electronic network activity — pages visited, time on site, referring URLs, device type (collected only with your consent for analytics).
• Geolocation data — coarse (city/region) IP-based location only; no precise location.
• Professional or employment information — for practicum applicants only (resume/CV, education, work history).
• Sensitive personal information (CPRA category) — health information collected through inquiry forms or intake. Treated under HIPAA and CMIA in addition to CPRA.

3. Sources of personal information

We collect personal information directly from you (forms, calls, email), from your device automatically (cookies, server logs), and occasionally from authorized third parties (e.g., insurers verifying coverage, referring providers).

4. Business and commercial purposes

We use personal information to: (a) provide and improve our website and services; (b) respond to inquiries; (c) provide healthcare and process payment for healthcare; (d) verify insurance and bill claims; (e) recruit practicum trainees; (f) maintain security; (g) comply with legal obligations.

5. Categories of third parties with whom we share information

• Service providers bound by Business Associate Agreements where applicable: HIPAA-compliant EHR vendor, secure email provider, telehealth platform, payment processor, IT and security providers, web hosting.
• Analytics providers only if you have consented to "Performance" cookies.
• Insurers and payers as authorized by you for billing and benefits verification.
• Legal and regulatory authorities when required by law (subpoena, court order, mandatory reporting).

We do not sell your personal information for monetary consideration. Whether certain limited disclosures (e.g., third-party analytics cookies) constitute "sharing" under CPRA is a question we treat conservatively — see Section 7 for your right to opt out.

6. Retention

We retain personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Clinical records are retained for at least 7 years from the last date of service for adult patients, or until 1 year past the age of majority for minors, whichever is later (consistent with California recordkeeping standards).

7. Your rights under CCPA/CPRA

If you are a California resident, you have the following rights:

• Right to know the specific personal information we have collected about you, the categories, the sources, the business purpose, and the third parties we share with.
• Right to delete personal information we have collected, subject to exceptions including HIPAA-protected information and records we are legally required to retain.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of personal information.
• Right to limit use of sensitive personal information to what is necessary to provide services.
• Right to non-discrimination — we will not deny services, charge different prices, or provide different levels of service because you exercised your rights.

How to exercise these rights: email privacy@pasadenaclinicalgroup.com or call (626) 354-6440. We will verify your identity by matching information you provide against our records (typically: name, email, phone, and date you last interacted with us). We respond within 45 days; complex requests within 90 days with notice.

Authorized agents: you may use an authorized agent to submit requests on your behalf. The agent must provide signed written permission and we may require you to verify your identity directly.

8. "Do Not Sell or Share My Personal Information"

To opt out of the "sale" or "sharing" of your personal information under CPRA — including disabling third-party analytics and any future advertising cookies — click the "Do Not Sell or Share My Personal Information" link in our footer (or use this button), or send a written request to privacy@pasadenaclinicalgroup.com. Your preference is stored in a first-party cookie and will be honored on this device until you change it.

We honor Global Privacy Control (GPC) signals where technically feasible.

9. Cookies and tracking technologies

We use first-party cookies for site functionality and (with your consent) third-party analytics. No advertising or marketing cookies are set without your express opt-in. See our Cookie Policy for the full list and how to manage preferences.

10. Sensitive Personal Information (CPRA)

Health information you provide via our forms is "Sensitive Personal Information" under CPRA. We use it only to: provide healthcare services you request, verify benefits, and respond to your inquiries. We do not use Sensitive Personal Information for cross-context behavioral advertising and we do not sell it.

11. Children's privacy

Our website is not directed to children under 16. We do not knowingly collect personal information from children under 16. California requires affirmative authorization for the sale or sharing of personal information of consumers between 13 and 16; we do not engage in such activity. If you believe a child has provided personal information to us, please contact us at privacy@pasadenaclinicalgroup.com and we will delete the information.

12. HIPAA + CMIA (clinical information)

Information collected during clinical treatment is Protected Health Information (PHI) under HIPAA and Medical Information under CMIA. CMIA imposes stricter standards than HIPAA in several areas — including authorization requirements for marketing communications and protections of mental-health records under Welfare and Institutions Code §5328 where applicable. Your rights regarding clinical PHI are described in our Notice of Privacy Practices.

13. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2+), access controls, audit logs, secure HIPAA-compliant cloud storage, and regular employee training. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

14. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated via a notice on this page or by email where appropriate.

15. Contact us

For privacy inquiries, requests, or to exercise rights under this policy:

Pasadena Clinical Group — Privacy Officer
301 N. Lake Ave, STE 600
Pasadena, CA 91101
Email: privacy@pasadenaclinicalgroup.com
Phone: (626) 354-6440