Website Privacy Policy

This website is operated by Dragonfly Directions, LLC, doing business as Dragonfly Directions Behavioral Health. This Website Privacy Policy applies to the public website at dragonflydirectionsbehavioralhealth.com and is separate from the Notice of Privacy Practices that governs clinical health information within a treatment relationship.

Information Collected Through the Contact Form

The public contact form collects your full name, email address, telephone number, and a general-inquiry message.

The message field is intended only for general, non-sensitive inquiries. Visitors are instructed not to submit:

• Diagnoses or symptoms
• Treatment details or clinical history
• Trauma or substance-use information
• Medical or insurance information
• Financial information or Social Security numbers
• Clinical records or documents
• Other sensitive personal information

Current clients must use the secure SimplePractice Client Portal for ongoing communication and appointment management. Information submitted through the public form is treated as sensitive and protected accordingly.

How Contact-Form Information Is Handled

• Submitted inquiries are stored in the access-restricted website contact-request database.
• Only authorized administrators may read submitted messages.
• Submitted message content, names, telephone numbers, and other form content are not included in notification emails. Notification emails contain only a link to the secure administrative dashboard.
• The email address you submit is used as necessary to deliver a confirmation email acknowledging your inquiry.
• The website form is not the clinical system of record, a patient portal, secure clinical messaging, or an emergency service.
• The form is not continuously monitored, and submitting it does not establish a therapist-client relationship, schedule an appointment, or guarantee one.
• SimplePractice remains the system used for clinical records, portal communication, scheduling, forms, telehealth, consent, and billing, as applicable.

Purpose of Collection

The limited contact information is used only to:

• Respond to the request
• Contact the person regarding possible services
• Facilitate transfer to SimplePractice when appropriate
• Maintain basic nonclinical administrative status
• Protect website and form security
• Meet applicable legal obligations

Submitting the form:

• Does not establish a therapist-client relationship
• Does not guarantee acceptance as a client
• Does not confirm an appointment
• Is not appropriate for emergencies

Lovable Website System

The public website and the temporary contact-request dashboard are hosted through Lovable. Lovable is not used as the EHR, the clinical intake system, the treatment record, the telehealth platform, the secure clinical-message system, the billing record, or the document portal.

Only Daniel's authorized administrative account may access submitted contact information.

SimplePractice

Accepted clients complete all clinical activity through SimplePractice, including intake, consent, Notice acknowledgment, secure messaging, telehealth, clinical documentation, billing, superbills, and portal access. Please provide sensitive clinical information only through the secure SimplePractice system after receiving instructions from the practice.

Email and Telephone

The practice may use the submitted email address or telephone number to respond. Ordinary email, telephone, voicemail, and text messages may carry privacy risks and should not be used to send detailed clinical information. The practice limits the amount of sensitive information contained in ordinary communications.

Payments

Payment processing may occur through GoDaddy Payments or through SimplePractice. Card data is entered directly into the payment provider's hosted system. The Lovable website does not store full card numbers or security codes. Clients must not include diagnoses, treatment information, or other clinical details in payment descriptions or notes. Making a payment does not establish a therapist-client relationship.

Tracking and Analytics

The practice uses Google Analytics 4, provided by Google LLC, for limited, aggregate measurement of general website pages only. Google acts as the analytics provider and processes the limited measurement data described below. Google Analytics is not HIPAA-compliant, is not covered by a Business Associate Agreement, and is never used for Protected Health Information.

Analytics is optional and is blocked until you affirmatively consent. No analytics script is loaded and no analytics request is sent unless you select "Accept optional analytics." This choice is a website preference only; it is not HIPAA authorization and is not consent to any use or disclosure of health information.

You may select "Decline" instead. Declining does not limit or impair your use of this website in any way. You can change your choice at any time using the analytics preference control in the website footer. Your choice is stored locally in your own browser. When analytics is enabled, Google Analytics sets a first-party cookie and a randomly generated identifier for basic measurement; when declined, no such cookie or identifier is set by Google Analytics. Analytics data is retained by Google for the shortest practical retention period offered, currently two months.

Analytics is never loaded or executed on:

• The appointment-request page and any submission or confirmation state
• The Client Portal page and any SimplePractice activity
• Administrative pages and all administrative subpages
• Authentication, sign-in, and password routes
• This Privacy Policy, the Notice of Privacy Practices, and the Terms of Use
• Any page or state containing submitted information, and any error page that could expose it
• Any future authenticated, scheduling, billing, portal, clinical, or form-processing route

Measurement is limited to a basic page view on general informational pages. No names, email addresses, telephone numbers, contact-form messages, form-field values, appointment information, client status, SimplePractice information, user or database identifiers, authentication data, or error text containing your input are intentionally sent to Google. Query strings and URL fragments are removed before the page address is sent. No custom events describing symptoms, diagnosis, treatment interest, recovery status, relationship concerns, or clinical-service selection are collected, and no analytics events are attached to contact-form interactions, Client Portal clicks, crisis-resource use, telephone links, or email links.

Google Signals, advertising personalization, remarketing, User-ID tracking, cross-domain tracking, and enhanced measurement of form interactions are disabled. Granular location collection beyond Google Analytics defaults is not used, and no data sharing beyond what is necessary for basic measurement is enabled. No Google Tag Manager, Meta Pixel, Microsoft Clarity, heatmap, session-replay, or advertising tracker is used on this website.

Cookies and Technical Information

The website may use essential cookies and technical information necessary for security, authentication, form operation, fraud and abuse prevention, and basic website functionality. The practice does not sell personal information or use contact-request information for targeted advertising.

Data Retention

Limited contact-request information is retained only as long as reasonably necessary to respond, complete appropriate follow-up, transfer an accepted client to SimplePractice, meet applicable legal obligations, and protect the practice from misuse or disputes. Information that is no longer reasonably necessary will be deleted in accordance with the practice's data-minimization procedures.

Lovable contact requests are not part of the formal clinical record unless information is intentionally transferred into SimplePractice and used for clinical decision-making.

Data Security

The practice uses reasonable administrative, technical, and physical safeguards, including restricted administrator access, strong authentication, Row Level Security, server-side validation, encryption provided by the service platforms, data minimization, and separation of public contact data from clinical records. No internet transmission or storage system can guarantee absolute security.

External Links

The website may link to SimplePractice, GoDaddy-hosted payment pages, Amazon or the official book page, crisis resources, and government resources. External sites have their own privacy practices.

Privacy Requests

Please do not include detailed clinical information in ordinary email. The practice may move the communication into the secure SimplePractice portal.

Children

Dragonfly Directions Behavioral Health currently provides services only to adults. The website is not directed toward children.

Emergencies

This website, contact form, email, and voicemail are not continuously monitored and must not be used for emergencies. Call 911 or go to the nearest emergency department for an immediate emergency. For a mental-health or suicide-related crisis, call or text 988.

Changes to This Policy

This policy may be updated when technology, services, vendors, or legal requirements change. The current effective date will appear at the top of this page.

Effective Date: July 20, 2026.