Privacy policy
What we collect, why we collect it, who sees it, and how to make us delete it. Written to be read, not skimmed past.
Effective September 2, 2026. This policy covers arizonaesaletter.org. Health information handled by our clinicians is additionally governed by our HIPAA compliance page.
What we collect
- Information you give us. Name, email address, phone number, mailing address, the details you enter on the screening form, and information shared during your consultation.
- Payment information. Processed by our payment provider. We receive a confirmation and the last four digits of your card. We never see or store the full number.
- Technical information. IP address, browser type, device type, pages visited and referring page, collected automatically to keep the site working and secure.
- Communications. Emails and support messages you send us, kept so we can help you and resolve disputes.
Why we collect it
- To schedule and deliver your consultation and issue your letter.
- To take payment and provide receipts.
- To answer your questions and provide support.
- To keep the site secure and detect fraud or abuse.
- To meet legal, tax and professional record-keeping obligations.
- To improve the service, using aggregated information that does not identify you.
What we will never do
We do not sell your personal information. We do not rent, trade or share it with data brokers. We do not share your health information for advertising. We do not contact your landlord, employer or university about you without your written authorization.
Who we share information with
Only with service providers who need it to run the service, each under a contract restricting their use of it: our hosting provider, our scheduling and video platform, our payment processor, and our email delivery service. Vendors that touch health information also sign business associate agreements. Beyond that, we share only where the law compels us, or where there is a serious and imminent threat to someone's safety.
Cookies and analytics
We use cookies that are necessary for the site to function, such as keeping you signed in during booking and protecting against fraud. Where we use analytics, it is configured to avoid collecting information that identifies you, and we do not use advertising cookies that track you across other websites. You can block cookies in your browser settings, though some booking features will stop working if you do.
Your choices and rights
- Access. Ask for a copy of the personal information we hold about you.
- Correction. Ask us to fix anything inaccurate.
- Deletion. Ask us to delete information we are not legally required to keep.
- Opt out of marketing. Unsubscribe from any email, or write to support. This does not stop transactional messages about your appointment or letter.
- Complain. To us, to the Arizona Attorney General's Consumer Protection unit, or to the HHS Office for Civil Rights for health privacy issues.
Email support@arizonaesaletter.org with the subject "Privacy request". We verify your identity before acting, and respond within 30 days.
Security
The site runs over TLS with 256-bit encryption. Stored data is encrypted at rest, access is restricted to staff who need it, and access is logged. No system is perfectly secure, and we will not pretend otherwise, but we treat this seriously and review our controls regularly.
Children
This service is intended for adults. We do not knowingly collect information from anyone under 18 without a parent or legal guardian involved. If a minor needs an evaluation, a parent or guardian must arrange and attend it. If you believe we hold information about a child collected without proper consent, contact us and we will delete it.
Changes to this policy
If we make a material change, we will update the effective date at the top and, where the change affects you meaningfully, notify you by email. Continuing to use the site after a change means you accept the updated policy.
Privacy questions
Do you sell my data?
No. Not to advertisers, not to data brokers, not to anyone. It is not a revenue line for us and it never will be.
Can I use the site without cookies?
You can browse and read everything with cookies blocked. Booking and payment need certain functional cookies to work, so those steps will fail without them.
How do I delete my account and data?
Email support with the subject 'Privacy request'. We delete what we are able to. Clinical records must be retained for a period set by Arizona law and professional standards, and we will tell you exactly what falls into that category.
Do you send marketing emails?
Rarely, and only if you opted in. Every one has an unsubscribe link. Appointment and letter emails are transactional and continue regardless.
Official sources for this page
Every legal statement on this page traces back to a primary source. Open any of them and read the original text for yourself.
- Federal Trade Commission — Privacy and Security guidanceThe federal standard for how companies should handle consumer data and describe their practices.
- HHS — HIPAA for IndividualsYour federal rights over health information, which apply alongside this policy.
- FTC Consumer Advice — Online privacy and securityPractical federal guidance on protecting your own information online.
- Arizona Attorney General — Consumer ProtectionWhere Arizona residents report privacy and data handling concerns about a business.
- FTC — Children's Online Privacy Protection RuleThe federal rule governing collection of information from children, which shapes our under-18 policy.
- CISA — Secure Our WorldFederal cybersecurity guidance on protecting your accounts and devices.
- HHS Office for Civil Rights — File a ComplaintThe federal route for health privacy complaints.