Website Privacy Policy

State Privacy Rights and Requests

Depending on where you reside and whether a particular privacy law applies to Rubber Duck Therapy or to the information at issue, you may have rights concerning access, correction, deletion, portability, restriction, or opt-out of certain processing. Rubber Duck Therapy provides a Privacy Choices & Opt-Out page for privacy requests and preferences.

Rubber Duck Therapy does not currently sell personal information or share it for cross-context behavioral advertising and does not use the public website for targeted advertising or profiling that produces legal or similarly significant effects.

Service Providers and Third Parties

Allia — Practice and Case Management

Rubber Duck Therapy uses Allia for practice and case management. Allia may maintain protected health information (PHI) on behalf of the practice, including information used for clinical and administrative functions. PHI maintained through Allia is handled as part of the practice's health-information environment and is subject to applicable health-privacy requirements and contractual safeguards, including a Business Associate Agreement where required.

Calendly — Scheduling

Rubber Duck Therapy may provide links to Calendly for scheduling an introductory discussion. If you choose to use Calendly, information you enter there is processed through Calendly's service and may be subject to Calendly's privacy practices. Please do not include sensitive clinical, diagnostic, sexual-health, or other protected health information in a Calendly scheduling request. Scheduling an introductory discussion does not by itself establish a therapist-client relationship.

Stripe — Payment Processing

Rubber Duck Therapy uses Stripe for payment processing. Stripe is used for financial and payment-related information and is not used by Rubber Duck Therapy as a repository for psychotherapy records, clinical notes, diagnoses, treatment details, or other clinical PHI. Information provided to Stripe may include financial/payment information and provider-identifying information such as the National Provider Identifier (NPI), as applicable to payment processing and related financial functions.

Rubber Duck Therapy seeks to minimize information transmitted to payment processors and does not intentionally place clinical details, diagnosis information, session content, relationship concerns, or psychotherapy notes into Stripe transaction descriptions or payment metadata.

Health Insurance, Claims, and Payment

If Rubber Duck Therapy participates with, bills, or otherwise works with a health plan, insurer, managed-care organization, clearinghouse, or other payer, the practice may use or disclose selected protected health information (PHI) as permitted or required for payment and related health-care operations. Depending on the payer and the claim, this may include identifying and demographic information, insurance/member information, provider information, dates and types of service, diagnosis or other coding, authorization or referral information, amounts billed or paid, and other information reasonably necessary to submit, process, review, appeal, coordinate, or audit a claim.

Rubber Duck Therapy seeks to limit payer disclosures to information reasonably necessary for the applicable payment, authorization, utilization-review, coordination-of-benefits, audit, appeal, or legal purpose. Psychotherapy notes receive special protection under HIPAA and are not treated as ordinary claim documentation.

Health plans and insurers that receive information for their own payment and health-plan functions may have their own privacy notices and legal obligations governing information in their possession.

Privacy Choices and Your Rights

Depending on the law applicable to you and the information involved, you may have rights to request access, correction, deletion, or other action concerning personal information. You may also communicate a preference that personal information not be sold, shared for cross-context behavioral advertising, or used for targeted advertising. Rubber Duck Therapy does not currently sell personal information or share personal information for cross-context behavioral advertising.

To submit a privacy request, email with the subject “Privacy Request.” We will not discriminate against an individual for exercising an applicable privacy right.

Health Information and the Notice of Privacy Practices

Clinical information and protected health information are governed by additional federal and Texas health-privacy requirements. This Privacy Policy incorporates the website's privacy information and provides access to the practice's formal Notice of Privacy Practices, which remains available as the legally distinct HIPAA notice. Requests involving clinical records are handled through the Client Rights, Records & Complaints process.

Global Privacy Control and Opt-Out Signals

The public website does not currently use advertising pixels, cross-site behavioral advertising, or technology intended to sell personal information. If applicable sale, sharing, or targeted-advertising processing is introduced in the future, legally required browser-based opt-out preference signals, including Global Privacy Control where applicable, will be honored before such processing is deployed.