Privacy Policy

Effective Date: 10/21/2025

Last Updated: 10/21/2025

1. Introduction

Goldfinch Counseling PLLC (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website goldfinchllc.com.

This Privacy Policy applies only to information collected through our website and does not apply to protected health information collected during the therapeutic relationship, which is governed by HIPAA and our Notice of Privacy Practices.

By using our website, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

Submit a consultation request form
Contact us via email or phone
Subscribe to our newsletter (if applicable)

This information may include:

First and last name
Email address
Phone number
State and county of residence
Information about your counseling needs

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

IP address
Browser type and version
Operating system
Pages viewed and time spent on pages
Referring website addresses
Date and time of access
Device information
Cookies and similar tracking technologies

2.3 Cookies and Tracking Technologies

We use the following technologies:

Essential Cookies: Required for website functionality

Analytics Cookies:

Google Analytics to understand how visitors use our site
FullStory for session recording and user experience analysis

Third-Party Services:

Google Fonts for typography
Google Maps for location display
Google reCAPTCHA for form spam protection
YouTube for embedded videos (if applicable)

You can manage cookie preferences through the cookie consent banner on our website or through your browser settings.

3. How We Use Your Information

We use the information we collect to:

Respond to consultation requests and inquiries
Schedule appointments and provide information about our services
Improve our website functionality and user experience
Analyze website traffic and usage patterns
Comply with legal obligations
Prevent fraud and enhance security
Send service-related communications

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the specific information and context:

Consent: When you provide explicit consent (e.g., cookie consent)
Legitimate Interests: For website analytics and improvement
Legal Obligation: When required by law

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties.

We may share your information with:

Service Providers: Third-party vendors who assist with:

Website hosting
Analytics (Google Analytics, FullStory)
Email communications
Payment processing (if applicable)

Legal Requirements: When required to comply with:

Court orders or legal processes
Legal obligations
Protection of our rights, safety, or property
Emergency situations

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

6. Your Privacy Rights

6.1 California Residents (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose
Request deletion of your personal information
Opt-out of the sale of personal information (we do not sell information)
Non-discrimination for exercising your rights

To exercise these rights, contact us at ellery@goldfinchllc.com or 214-997-0944.

6.2 European Residents (GDPR)

If you are located in the EEA, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure of your data
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise these rights, contact us at ellery@goldfinchllc.com.

6.3 All Users

You may:

Opt-out of email communications by clicking “unsubscribe”
Manage cookie preferences through our cookie consent banner
Request access to or deletion of your information
Update or correct your information

7. HIPAA and Protected Health Information

Important Distinction:

This Privacy Policy covers information collected through our website only. It does not govern Protected Health Information (PHI) collected during the course of therapy.

Protected Health Information is governed by:

HIPAA (Health Insurance Portability and Accountability Act)
Our Notice of Privacy Practices (provided during intake)
Informed consent documents

Website contact forms and consultation requests are not considered confidential therapeutic communications and are not protected by HIPAA.

8. Data Security

We implement reasonable security measures to protect your information, including:

Secure Socket Layer (SSL) encryption
Secure servers and hosting
Access controls and authentication
Regular security assessments

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as necessary to:

Fulfill the purposes described in this Privacy Policy
Comply with legal obligations
Resolve disputes
Enforce our agreements

Website analytics data is retained according to Google Analytics and FullStory retention policies (typically 14-26 months).

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our website, you consent to this transfer.

13. Do Not Track Signals

Some browsers have “Do Not Track” features. Currently, our website does not respond to Do Not Track signals. You can manage tracking preferences through our cookie consent banner.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting to the website with an updated “Last Updated” date.

We encourage you to review this Privacy Policy periodically. Your continued use of the website after changes constitutes acceptance of the revised policy.

15. Your Consent

By using our website, you consent to this Privacy Policy and our collection and use of information as described.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Goldfinch Counseling PLLC
Ellery Wren, LPC (License #95184)
8105 Rasor Blvd, Suite 225
Plano, TX 75024

Phone: 214-997-0944
Email: ellery@goldfinchllc.com
Website: https://goldfinchllc.com

For HIPAA-related privacy questions regarding your therapeutic treatment, please refer to our Notice of Privacy Practices provided during your intake process.

17. Cookie Policy Summary

We use the following types of cookies:

Cookie Type	Purpose	Duration
Essential	Website functionality	Session
Analytics	Google Analytics	24 months
Session Recording	FullStory	14 months
Functional	Google Fonts, Maps, reCAPTCHA	Varies

You can manage your cookie preferences at any time by clicking “Manage Consent” in the footer of our website.

Acknowledgment: By continuing to use this website, you acknowledge that you have read and understood this Privacy Policy.