PRIVACY NOTICE

Last updated November 09, 2025

This Privacy Notice for HARRISON TRACT PSYCHOTHERAPY SERVICES, L.C.S.W., PLLC (doing business as APEX MINDS PSYCHOTHERAPY) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

Visit our website at apexmindspsychotherapy.com or any website of ours that links to this Privacy Notice.
Use Apex Minds Psychotherapy. Apex Minds Psychotherapy offers licensed psychotherapy and counseling services for adults, couples, and groups, both in person and via Telehealth across New York.
Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns?
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at harrison.m.tract@outlook.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any topic in the sections below.

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact, the choices you make, and the features you use.
Do we process sensitive personal information?
Some information may be considered "sensitive" in certain jurisdictions (e.g., racial or ethnic origins, sexual orientation, religious beliefs). We do not process sensitive personal information.
Do we collect information from third parties?
No. We do not collect information from third parties.
How do we process your information?
We process information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may process information for other purposes with your consent. We process information only when we have a valid legal reason to do so.
When and with whom do we share personal information?
We may share information in specific situations and with specific third parties — see the “When and With Whom” section below.
How do we keep your information safe?
We maintain organizational and technical safeguards, but no system is 100% secure.
What are your rights?
Depending on your location, applicable privacy laws may give you certain rights. See the “What Are Your Privacy Rights?” section.
How do you exercise your rights?
The easiest way is to submit a data subject access request or contact us. We will act in accordance with applicable data protection laws.

WHAT INFORMATION DO WE COLLECT?
HOW DO WE PROCESS YOUR INFORMATION?
WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
HOW LONG DO WE KEEP YOUR INFORMATION?
HOW DO WE KEEP YOUR INFORMATION SAFE?
DO WE COLLECT INFORMATION FROM MINORS?
WHAT ARE YOUR PRIVACY RIGHTS?
CONTROLS FOR DO-NOT-TRACK FEATURES
DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
CONFIDENTIALITY & HIPAA COMPLIANCE
THIRD-PARTY SERVICES / HOSTING
NEWSLETTER / EMAIL MARKETING (FOR THE DEEP END)
COOKIES & ANALYTICS
CONTACT FORM / COMMUNICATIONS
DO WE MAKE UPDATES TO THIS NOTICE?
HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you express interest in obtaining information about us or our Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You — The personal information we collect depends on the context of your interactions and may include:

Names
Email addresses
Phone numbers
Contact preferences
Contact or authentication data

Sensitive Information. We do not process sensitive information.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information may include device and usage data (IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, info about how/when you use our Services). This information is primarily needed to maintain the security and operation of our Services, and for analytics and reporting.

The information we collect includes:

Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect (e.g., IP address, device info, browser type and settings, activity such as date/time stamps, pages viewed, searches, error reports).
Device Data. Info about your computer, phone, tablet, or other device (IP address or proxy, device and app IDs, location, browser type, hardware model, ISP/mobile carrier, OS, system configuration).
Location Data. May be precise or imprecise depending on device settings; can include GPS or IP-based location. You can opt out by disabling location settings on your device, but that may affect certain features.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process information for other purposes with your consent.

We process personal information for a variety of reasons depending on your interactions, including:

To deliver and facilitate delivery of services to you.
To identify usage trends and improve our Services.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described below.

We may need to share personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes in this Privacy Notice unless otherwise required by law.

We will only keep your personal information as long as necessary for the purposes set out in this Notice, unless a longer retention period is required by law (e.g., tax, accounting). When we have no ongoing legitimate business need, we will delete or anonymize your information; if not possible, we will securely store it and isolate it from further processing until deletion is possible.

5. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through technical and organizational security measures.

We have implemented appropriate and reasonable technical and organizational measures designed to protect personal information. However, despite safeguards, no electronic transmission over the Internet or storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk. Access our Services within secure environments.

6. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent/guardian of such a minor and consent to such minor’s use. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at Harrison.m.tract@outlook.com.

7. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent. If we are relying on your consent to process personal information, you have the right to withdraw consent at any time by contacting us (see “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?”). Withdrawal does not affect the lawfulness of prior processing.

If you have questions about your privacy rights, email harrison.m.tract@outlook.com.

8. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile OS/apps include a Do-Not-Track (DNT) feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or other mechanisms that automatically communicate a choice not to be tracked. If a standard is adopted that we must follow, we will inform you in a revised notice.

California law requires disclosure about DNT signals; because no industry or legal standard exists, we do not respond to them at this time.

9. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of certain U.S. states (e.g., California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you may have rights to request access to or deletion of personal information, correct inaccuracies, and more. These rights may be limited by law.

Categories of Personal Information We Collect (past 12 months)

Below are illustrative categories and whether they were collected.

A. Identifiers — Contact details (real name, alias, postal address, telephone, online identifier, IP address, email, account name) — COLLECTED
B. Personal information as defined in the California Customer Records statute — Name, contact info, education, employment, employment history, financial info — NO
C. Protected classification characteristics — Gender, age, DOB, race/ethnicity, national origin, marital status — NO
D. Commercial information — Transaction info, purchase history, payment info — NO
E. Biometric information — Fingerprints, voiceprints — NO
F. Internet or similar network activity — Browsing history, search history, online behavior, interactions — NO
G. Geolocation data — Device location — NO
H. Audio, electronic, sensory, or similar information — Images, audio/video recordings — NO
I. Professional or employment-related information — Business contact details, job title — NO
J. Education information — Student records — NO
K. Inferences drawn from collected personal information — Profiles or summaries of preferences — NO
L. Sensitive personal information — NO

We may also collect other personal information when you interact with us in person, online, or by phone/mail (e.g., customer support, surveys, or to facilitate Services).

Sources of Personal Information — See “WHAT INFORMATION DO WE COLLECT?”

How We Use and Share Personal Information — See “HOW DO WE PROCESS YOUR INFORMATION?”

Will your information be shared? — We may disclose personal information to service providers under written contracts. We may also use info for internal research; this is not considered a “sale.” We have not disclosed, sold, or shared personal information for commercial purposes in the preceding 12 months. We will not sell or share personal information in the future.

Your Rights — Rights include (where applicable): right to know, access, correct, delete, obtain a copy, non-discrimination for exercising rights, opt out of processing for targeted advertising/sale/profiling, and additional rights depending on state law (e.g., lists of categories, third-party disclosures, profiling info). These rights may be limited by law.

How to Exercise These Rights

To exercise these rights, you can:

Submit a data subject access request; or
Email Harrison.m.tract@outlook.com; or
Refer to the contact details at the bottom of this notice.

Under certain US state laws, you may designate an authorized agent to make a request. We may deny a request from an agent that does not provide valid proof of authorization.

Request Verification

Upon receiving your request, we will verify your identity to confirm you are the person about whom we have the information. We will use personal information provided in your request only to verify identity or authority. If we cannot verify identity from existing information, we may request additional information for verification and security purposes.

If an authorized agent submits the request, we may require additional verification and a written, signed permission from you authorizing the agent.

Appeals

Under certain state laws, if we decline to act on your request, you may appeal by emailing harrison.m.tract@outlook.com. We will inform you in writing of any action taken or not taken, including reasons. If appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 (“Shine The Light”) permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing and the names/addresses of such third parties during the prior calendar year. To make such a request, submit it in writing to the contact details below.

10. CONFIDENTIALITY & HIPAA COMPLIANCE

We maintain strict confidentiality and follow applicable privacy and security standards under HIPAA and professional ethical guidelines. Personal health information is collected and stored only for therapeutic purposes and is never shared without consent, except when required by law.

11. THIRD-PARTY SERVICES / HOSTING

We may use trusted third-party platforms (e.g., SimplePractice, Zoom, Google Workspace) to provide secure video sessions, scheduling, billing, and communication. These providers comply with privacy and security standards to protect your information.

12. NEWSLETTER / EMAIL MARKETING (FOR THE DEEP END)

By subscribing to our newsletter, you consent to receive occasional emails from us. You may unsubscribe at any time by clicking the “unsubscribe” link at the bottom of each email. We never share or sell subscriber information.

13. COOKIES & ANALYTICS

Our website may use cookies and analytics tools to improve user experience and track site performance. You can disable cookies in your browser settings.

14. CONTACT FORM / COMMUNICATIONS

Information submitted through contact forms is used solely for responding to inquiries or scheduling services. Do not include confidential clinical information in form submissions.

15. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes — we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date. If we make material changes, we may notify you by posting a notice of the changes or by directly sending a notification. We encourage you to review the Privacy Notice frequently.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may:

Email: Harrison.m.tract@outlook.com
Or contact us by post at:

HARRISON TRACT PSYCHOTHERAPY SERVICES, L.C.S.W., PLLC
177 Wheatley Rd
Brookville, NY 11545
United States

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.