Micha’el Miller Therapy
Privacy Policy
Last updated: July 2026
This is the privacy policy for this website. It is separate from the clinical Notice of Privacy Practices (HIPAA) that governs your protected health information, which you receive when beginning services. This page is provided for transparency and is not legal advice.
Who this covers
This policy describes how Micha’el Miller Therapy (“the practice,” “we,” “I,” or “me”), operated by Micha’el Miller, MSW, LSW, handles information in connection with michaelmillertherapy.com. It applies only to this website, not to the therapy relationship, which is governed separately by the agreements and HIPAA notice provided at intake.
What information is collected
The practice does not collect personal information from you except what you choose to provide. Specifically:
- Consultation form. When you use the contact form, you submit your name, your email address, any message you write, and one broad category describing how you found the practice if you choose to answer that question. If you select a referral or “Somewhere else,” you may also provide an optional short, general explanation.
- Technical logs. Like most websites, the hosting and security provider may automatically process limited technical data (such as IP address, browser type, and request time) to deliver and protect the site.
The practice does not sell your information, does not use it for advertising, and does not share it except with the service providers described below that are necessary to operate the site and respond to you.
How information is used
Information you submit through the form is used to respond to your inquiry and arrange a consultation. Your email address is used to reply to you. The optional referral-source category and any optional explanation are used only to understand which outreach methods are useful; they are not used to profile you or target advertising to you. No names or sensitive details are requested in the referral explanation.
Please do not send sensitive information
The website form is transmitted over HTTPS, but the form and ordinary email are not confidential clinical communication channels. Please keep your first message general and leave out detailed clinical, medical, or otherwise sensitive information. After we connect, we can move to a secure method of communication.
Service providers
The practice relies on a small number of third-party providers, each acting as a processor of limited data:
- Cloudflare: website hosting, security, and the serverless function that receives form submissions. Cloudflare Turnstile may also be enabled to prevent automated abuse; when enabled, Cloudflare processes the information needed to assess the request.
- Resend: delivery of the form message to the practice inbox and, when enabled with abuse protections, an automated receipt to the email address you provide.
Each provider processes data under its own privacy terms.
Cookies and analytics
This website does not set advertising or tracking cookies and does not run third-party analytics. Links used in advertising may contain broad campaign labels in the URL. If the URL identifies a Google cost-per-click ad, the contact form may preselect “Google ad” as the optional referral source. The form does not submit raw campaign parameters, search keywords, or advertising click identifiers.
Your Colorado privacy rights
Depending on your circumstances, the Colorado Privacy Act may give you the right to access, correct, or delete personal data about you, to obtain a portable copy, and to opt out of the sale of personal data or targeted advertising. The practice does not sell personal data, does not engage in targeted advertising, and does not profile you. You may exercise any applicable right, or appeal a decision, by contacting the practice through the form on this site. We will respond as required by law and will not discriminate against you for making a request.
Data retention
Consultation messages are kept only as long as needed to respond and to meet applicable professional and legal obligations, then deleted. Clinical records, once services begin, are retained separately under applicable law and the practice’s clinical policies.
Security
The practice uses HTTPS, input validation, limited technical logging, and abuse controls to reduce risk. No internet or email system is completely secure, which is why sensitive information should not be sent through the form.
Children’s privacy
This website and the practice’s services are intended for adults. The site is not directed to children, and we do not knowingly collect information from anyone under 18 through this site.
Changes to this policy
This policy may be updated from time to time. The “last updated” date above reflects the most recent revision.
Contact
To ask a question about this policy or to exercise a privacy right, please use the contact form on this site.