Privacy Policy

§ 01Who we are

Epiphany Coaching is a Utah sole proprietorship owned and operated by Helen De-Lovely, LCSW. The practice operates publicly under the name "The Healing Haven." Our contact information is at the end of this policy.

§ 02What we collect

Information you provide voluntarily:

• Through the consult form: your name, email, preferred contact method, and the optional message you share.
• Through direct email, phone, or text: whatever information you choose to share with us.

Information collected automatically when you visit:

• IP address, approximate location, device type, browser, operating system.
• Pages viewed and time spent on each page.
• Referring URL — how you found us.
• Cookie identifiers and tracking pixels (see Section 6).

We do not collect through this website: Social Security numbers, financial account numbers, government IDs, or detailed clinical/health information. Please do not submit those in the contact form.

§ 03How we use your information

• To respond to your consult request or general inquiry.
• To schedule, confirm, and prepare for appointments.
• To send you intake paperwork when appropriate.
• To operate, maintain, and improve the site.
• To comply with legal obligations.

§ 04How we share your information

We do not sell, rent, or trade your personal information. We share information only with:

• Service providers who help us operate the site and the practice — for example our hosting/CRM platform, scheduling software, and email service. These providers process information on our behalf and are contractually limited in their use of it.
• Legal authorities when required by law, subpoena, or to protect rights, property, or safety.
• You, in response to your direct request.

§ 05How long we keep it

Consult-form submissions and general inquiries are retained for up to twenty-four (24) months in our CRM unless you become a client — in which case clinical records are governed by HIPAA and Utah retention rules. You may ask us to delete your inquiry at any time (see Section 8).

§ 06Cookies and tracking

We use cookies and similar technologies to:

• Keep the site running properly.
• Remember your cookie preferences.
• Understand traffic patterns (e.g., Google Analytics or equivalent).
• Measure the performance of marketing (e.g., advertising pixels from Meta or Google, when those campaigns are active).

When you first visit, the cookie banner gives you the option to accept or reject non-essential cookies. You can also clear or disable cookies in your browser settings at any time.

§ 07Third-party services

The site uses or may use:

• Hosting / CRM: GoHighLevel
• Analytics: Google Analytics (when enabled)
• Advertising pixels: Meta (Facebook/Instagram) and Google Ads, when active campaigns are running
• Linked third parties: Psychology Today, 988 Lifeline, and (post-intake) the practice's telehealth platform

Each third party has its own privacy policy. We recommend reviewing the ones relevant to you.

§ 08Your rights

Depending on where you live, you may have rights regarding your personal information, including:

• Access — request a copy of what we have about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your information, subject to legal retention requirements.
• Opt out of sale — we do not sell personal information; if we ever change that, you may opt out.
• Opt out of marketing — unsubscribe from any marketing email at any time using the link at the bottom.

To exercise any of these rights, email [email protected]. We will respond within thirty (30) days.

Utah residents: under the Utah Consumer Privacy Act, you have the rights listed above where applicable. The UCPA generally applies to businesses meeting specific revenue and data thresholds; we voluntarily honor these rights even where not strictly required by statute.

§ 09Children's privacy

The site is intended for adults 18 and older. We do not knowingly collect personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child has submitted information to us, please contact us so we can remove it.

§ 10Security

We use commercially reasonable safeguards to protect the information you submit — including TLS-encrypted form transmission, access controls on our CRM, and routine review of who can access stored data. No system is perfectly secure, however, and we cannot guarantee that information transmitted over the internet cannot be intercepted.

If you become a client, Protected Health Information is held to higher HIPAA security standards, separate from this website policy.

§ 11International visitors

The site is operated in the United States. If you visit from outside the U.S., please understand that any information you submit will be processed in the U.S. under U.S. law.

§ 12Changes to this policy

We may revise this Privacy Policy from time to time. The "Effective Date" at the top reflects the most recent change. Material changes will be highlighted on the site for thirty (30) days before taking effect.

§ 13Contact

To ask a question, request your data, or report a concern: