Privacy Policy

§ 01Who we are

Helen DeLovely LCSW PLLC is a Utah Domestic Professional Limited Liability Company owned and operated by Helen DeLovely, LCSW. The practice operates publicly under the name "The Healing Haven." Our contact information is at the end of this policy.

§ 02What we collect

Information you provide voluntarily:

• Through the consult form: your name, email, phone number, preferred contact method, SMS consent choice, and the optional message you share.
• Through direct email, phone, or text: whatever information you choose to share with us.

Information collected automatically when you visit:

• IP address, approximate location, device type, browser, operating system.
• Pages viewed and time spent on each page.
• Referring URL — how you found us.
• Cookie identifiers and tracking pixels (see Section 6).

We do not collect through this website: Social Security numbers, financial account numbers, government IDs, or detailed clinical/health information. Please do not submit those in the contact form.

§ 03How we use your information

• To respond to your consult request or general inquiry.
• To schedule, confirm, and prepare for appointments.
• To send you intake paperwork when appropriate.
• To send text messages about appointment scheduling, consult follow-up, intake/admin reminders, and client communications if you opt in.
• To operate, maintain, and improve the site.
• To comply with legal obligations.

Text messaging (SMS). If you opt in, we use SMS to send non-marketing customer care messages about appointment confirmations and reminders, scheduling follow-up, consult follow-up, intake/admin reminders, and direct responses to service inquiries. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. SMS consent is optional and not required to receive services.

§ 04How we share your information

We do not sell, rent, or trade your personal information. We do not share mobile phone numbers or SMS opt-in/consent data with third parties for their marketing or promotional purposes.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We share information only with:

• Service providers who help us operate the site and the practice — for example our hosting/CRM platform, scheduling software, and email service. These providers process information on our behalf and are contractually limited in their use of it.
• Legal authorities when required by law, subpoena, or to protect rights, property, or safety.
• You, in response to your direct request.

§ 05How long we keep it

Consult-form submissions and general inquiries are retained for up to twenty-four (24) months in our CRM unless you become a client — in which case clinical records are governed by HIPAA and Utah retention rules. You may ask us to delete your inquiry at any time (see Section 8).

§ 06Cookies and tracking

We use cookies and similar technologies to:

• Keep the site running properly.
• Remember your cookie preferences.
• Understand traffic patterns (e.g., Google Analytics or equivalent).
• Measure the performance of marketing (e.g., advertising pixels from Meta or Google, when those campaigns are active).

When you first visit, the cookie banner gives you the option to accept or reject non-essential cookies. You can also clear or disable cookies in your browser settings at any time.

§ 07Third-party services

The site uses or may use:

• Hosting / CRM: GoHighLevel
• Analytics: Google Analytics (when enabled)
• Advertising pixels: Meta (Facebook/Instagram) and Google Ads, when active campaigns are running
• Linked third parties: Psychology Today, 988 Lifeline, and (post-intake) the practice's telehealth platform

Each third party has its own privacy policy. We recommend reviewing the ones relevant to you.

§ 08Your rights

Depending on where you live, you may have rights regarding your personal information, including:

• Access — request a copy of what we have about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your information, subject to legal retention requirements.
• Opt out of sale — we do not sell personal information; if we ever change that, you may opt out.
• Opt out of marketing — unsubscribe from any marketing email at any time using the link at the bottom.

To exercise any of these rights, email [email protected]. We will respond within thirty (30) days.

Utah residents: under the Utah Consumer Privacy Act, you have the rights listed above where applicable. The UCPA generally applies to businesses meeting specific revenue and data thresholds; we voluntarily honor these rights even where not strictly required by statute.

§ 09Children's privacy

The site is intended for adults 18 and older. By opting into our SMS services, you represent that you are at least 18 years of age. We do not knowingly collect personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child has submitted information to us, please contact us so we can remove it.

§ 10Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information — including SSL/TLS-encrypted transmission of form submissions, access controls on our CRM, and routine review of who can access stored data. No system is perfectly secure, however, and we cannot guarantee that information transmitted over the internet cannot be intercepted.

If you become a client, Protected Health Information is held to higher HIPAA security standards, separate from this website policy.

§ 11International visitors

The site is operated in the United States. If you visit from outside the U.S., please understand that any information you submit will be processed in the U.S. under U.S. law.

§ 12Changes to this policy

We may revise this Privacy Policy from time to time. The "Effective Date" at the top reflects the most recent change. Material changes will be highlighted on the site for thirty (30) days before taking effect.

§ 13Contact

To ask a question, request your data, or report a concern: