This Privacy Policy describes how MalSLP (“we,” “us,” or “Mal”) collects, uses, and protects information you provide through this website and in the course of speech-language services. Please review it alongside any documents you sign when becoming a client (such as a Notice of Privacy Practices or service agreement), which take precedence for clinical care.

1. Information collected through this website

When you submit the contact form on /contact, we collect the information you choose to provide:

Name
Email address
Phone number
Who you are enquiring for (yourself, a child, or someone else)
The content of your message
Your preferred contact method

We use this information solely to respond to your inquiry and, if you become a client, to schedule and deliver services. We do not sell or rent this information.

2. Service providers we use

Contact-form submissions are processed by Web3Forms and delivered to Mal’s practice email. Form submissions are protected by hCaptcha, which evaluates whether you are a human visitor. Anonymized usage analytics for this website may be collected by PostHog to help us understand how visitors use the site. These providers are bound by their own privacy policies, linked above.

3. Cookies and similar technologies

This site uses cookies and similar technologies to support core functionality (such as the contact form), security (such as hCaptcha), and basic analytics. You can control or disable cookies through your browser settings; some site functionality may not work correctly without them.

4. Protected Health Information (PHI) & HIPAA

MalSLP is committed to protecting health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law. The website contact form is not a secure channel for transmitting Protected Health Information. Please do not include diagnoses, treatment records, or other sensitive clinical details when first contacting us. After we connect, we will use appropriate secure channels for any PHI exchange. Once you are an established client, the practice’s Notice of Privacy Practices (provided at intake) governs how your PHI is collected, used, and disclosed.

5. How we store and protect information

Inquiry information is stored in Mal’s email account and any practice-management software used for scheduling. Clinical records are stored in HIPAA-compliant practice-management systems and protected by administrative, physical, and technical safeguards appropriate to the sensitivity of the information.

6. How long we keep information

Inquiry messages are retained for as long as reasonably necessary to respond to you and, if you do not become a client, are typically deleted within 12 months. Clinical records are retained for the period required by California and Colorado state law and professional standards.

7. Your rights

You may request to access, correct, or delete the personal information you have provided through this website by emailing the practice through the contact page. Depending on where you reside, you may have additional rights under state law (for example, the California Consumer Privacy Act). Clinical records are subject to separate rights under HIPAA and state law, explained in the Notice of Privacy Practices.

8. Children’s privacy

This website is intended for use by adults seeking services for themselves, a child, or another person. We do not knowingly collect personal information directly from children under 13 through the website. Parents or guardians provide information on behalf of pediatric clients.

9. Not medical advice; not for emergencies

Information on this website is provided for general informational purposes and is not a substitute for evaluation or treatment by a qualified clinician. If you or someone in your care is experiencing a medical or psychiatric emergency, call 911. For mental-health crisis support in the United States, call or text 988 (the Suicide and Crisis Lifeline).

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the website after a change indicates acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or your information can be sent through the contact page.

This policy is provided as a starting point and is not legal advice. Please review it with a qualified attorney before relying on it, particularly for HIPAA, state-specific (California / Colorado), and accessibility-related obligations.