Last Updated: December 7, 2020
This Privacy Policy describes how SimplePractice LLC (“SimplePractice” or “we” or “us” or “our”) uses and discloses the Personal Information you provide to us or that we collect when you use our websites, mobile applications, software, platforms and services (“Services”). Before using the Services or otherwise providing Personal Information to us, please review this Privacy Policy carefully.
Certain SimplePractice Services may use a different privacy policy to provide notice to you about how we us and disclose the Personal Information we collect in the context of that Service. To the extent that we post or reference a different privacy policy, that different privacy policy, not this Privacy Policy, will apply to your Personal Information collected in the context of that Service.
This Privacy Policy does not apply to the Personal Information we may collect about our customer’s patients and clients (“Clients”) in the context of providing the Services. Our treatment of Client Personal Information is governed by our agreements with our customers, including our Terms of Service and HIPAA Business Associate Agreement, as applicable (our “Agreement”). If any provision in our Agreement conflicts with any provision in this Privacy Policy, the provision in our Agreement will control to the extent of such conflict.
We do not have direct relationships with the Clients of our customers. If we receive any inquiries or requests from Clients about their Personal Information, we will direct those inquiries or requests to the relevant customer.
If you are a Client of one of our customers (e.g., a therapist or group practice providing you services), we may retain your Personal Information on behalf of that customer. If you have questions about how we process your Personal Information, we encourage you to reach out to the appropriate customer. We may send any inquiries that we receive directly from you about our use of your Personal Information to that customer.
“Personal Information” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household, such as your name, email address, IP address, telephone number, and broader categories of information such as your professional, educational or health information, commercial information and internet activity.
In the course of our business and in providing our Services to you, we may collect Personal Information directly from you and automatically through our use of cookies and other data collection technologies. We may also collect your Personal Information from third-party sources, such as our business partners, affiliates and social media platforms (if you interact with us through your social media account). We will treat Personal Information collected from third-party sources in accordance with this Privacy Policy but we are not responsible for the accuracy of information provided by third parties or for their policies or practices.
The categories of Personal Information we collect from you depend on your interactions with us. For example, we may collect:
In addition to the purposes for collection described above, we also collect your Personal Information for the following general purposes:
Referral Program: SimplePractice has a referral program that allows our existing customers to refer our Services to others. If you refer someone to SimplePractice, we will let that person know that you generated the referral. For those that receive a referral to our Services, we may collect your contact information in order to send you the referral content. Please visit our Refer-a-Colleague page for more information about the terms of our referral program.
We may share your Personal Information in the following circumstances:
Account Settings: If your Personal Information changes, or if you no longer desire our Services, you may modify or remove it by logging into your Account and making the changes in your Account settings.
Marketing Opt-out Preferences: You can opt out of receiving marketing emails by using the unsubscribe link contained in the email. We may still send you emails about your relationship with us and your transactions, including Account information and alerts, purchase confirmations, and updates to our products, services and policies.
Account Deletion: SimplePractice customers may cancel and delete their Accounts at any time. Before cancelling and deleting your account, please export your data using a private internet connection that is password protected. SimplePractice is not responsible for any lost or stolen data resulting from a customer’s lack of diligence or failure to follow reasonable security protocols during or after the data export process. Please note, if you do not export your data before deleting your account, there may be no way to retrieve the data.
After you have exported your data and stored it in a secure location, you may proceed to cancelling and deleting your account by navigating to “Billing Information” under “Settings.” You will see a link on the bottom left of the page that says “Want to cancel your account?” You may select this option, follow the prompts and proceed to cancel and delete your account.
If you would like a copy of our HIPAA Business Associate Agreement, please contact us at [email protected]. Please understand that we will not be able to provide you certain Services if you cancel and delete your account.
We use cookies and other tracking technologies (including from Google, Facebook and LinkedIn) to keep, and sometimes track, information about you on our Services. Cookies are small data files that are sent to your browser from a web server and stored on your computer’s hard drive. Cookies track where you travel on the Services and what you view. In doing so, a cookie may enable us to relate your use of the Services to your Personal Information.
We use information gathered from these tracking technologies so that we can analyze trends, administer the Services, track users’ movements around the Services, and gather demographic information about our user base as a whole. We may combine information we obtain through tracking technologies with other Personal Information that we have collected about you in order to make our Services, communications and advertisements more targeted to your interests.
Most web browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. If you reject cookies, you may still use our Services, but your ability to use some areas of our Services will be limited. You may also opt out of targeted advertisements by visiting the Network Advertising Initiative opt out page.
Do Not Track: Please note that the Services are not presently configured to respond to DNT or “do not track” signals from web browsers or mobile devices. As such, we do not recognize or respond to Do Not Track requests.
We will retain your Personal Information for as long as your Account is active, as needed to provide you Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We follow generally accepted standards to protect the Personal Information submitted to us, both during transmission and once we receive it. For example, when you enter sensitive information (such as your login credentials), we encrypt the transmission of that information using secure socket layer technology (SSL). However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
California residents have certain rights under the California Shine the Light law and the California Consumer Privacy Act (“CCPA”).
CCPA Disclosures: In general, within the preceding 12 months:
CCPA Privacy Rights: As of January 1, 2020, certain California residents are entitled to privacy rights under the CCPA. Customers who wish to exercise these rights should direct their requests to the customer who controls their Personal Information.
You may exercise your right to know and your right to deletion twice a year free of charge. To exercise your right to know or your right to deletion, please contact us at [email protected].
We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to verify you are the individual about whom we collected Personal Information. If you have an Account with us, we will use our existing Account authentication practices to verify your identity. If you do not have an Account with us, we may request additional information about you to verify your identity. We will only use the Personal Information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.
You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your Personal Information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.
Shine the Light: Our California customers are also entitled to request and obtain from SimplePractice once per calendar year information about any of your Personal Information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information please contact us at [email protected].
Information for Visitors from Outside of the United States: We are committed to complying with this Privacy Policy and the data protection laws that apply to our collection and use of your Personal Information. We are located in the United States, where the laws may be different and, in some cases, less protective than the laws of other countries. By providing us with your Personal Information and using the Services, you acknowledge that your Personal Information will be transferred to and processed in the United States and other countries where we and our vendors operate.
Social Media Widgets: Our Services may include social media features, such as the Facebook Like button, and widgets, such as the “Share this” button, or interactive mini-programs that run on our websites (collectively referred to as “Features”). These Features may collect your IP address, which page you are visiting, and may set a cookie to enable the Feature to function properly. The Features are either hosted by a third party or hosted directly on our Services. Your interactions with these Features on a third-party site are governed by the privacy policy of the company providing it.
Links to Other Sites: The Services may contain links to other sites that are not owned or controlled by SimplePractice. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage you to be aware when you leave our site and to read the privacy statements of each and every website that collects Personal Information. This Privacy Policy applies only to information collected by our Services
Children’s Privacy: Our Services are not directed to, and we do not knowingly collect any Personal Information from children under 13.
Changes to This Policy: We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes, we will notify you by email (sent to the email address specified in your Account) or by means of a notice on our websites prior to or upon the change becoming effective. We encourage you to review this page periodically for the latest information on our privacy practices.
For help with matters not related to exercising your rights under the aforementioned privacy laws, please contact us at SimplePractice Support.