This policy explains what this website collects and why. It is short, because the site does very little.
The form asks for your first name, email address, phone number, and an optional message. It is handled by Netlify Forms, and it is used for one thing: to reply to you and schedule a free 15 minute consult.
Please do not put clinical details, symptoms, or diagnoses in the message box. It is a scheduling form, not a clinical record, and it is not covered by a HIPAA business associate agreement. Anything sensitive is better said in session.
If you arrive from a search ad or a listing, the site stores the click identifiers and campaign labels from the link (gclid, msclkid, and utm_ values) in your browser’s session storage under the key sr_attribution, and submits them with the form. This is how I know which ad or listing brought you here so I am not paying for the ones that do not work.
These are campaign identifiers, not personal data. They say nothing about you, only about the link you clicked. They are cleared when you close the tab.
This site uses Google Analytics to count page views and to see which ads and listings bring people here. It is set up narrowly. Google Signals is switched off, ads personalisation is switched off in every region, and no advertising audiences are built from your visit. Google receives that a page was viewed, roughly what part of the world you are in, and which link you arrived from. It does not receive your name, your email address, your phone number, or anything you type into the form.
Analytics does not run everywhere on this site. It is deliberately absent from the crisis resources page, from this page, and from the Notice of Privacy Practices. If you are reading about crisis support, or reading this policy to check what I actually do, that visit is not measured at all.
On the thank you page, after the contact form is sent, one event records that a consult was requested. It carries nothing about you, only that it happened. That is how I can tell an ad worked without knowing who you are.
Google Analytics does set cookies in your browser. If you would rather it did not run for you, most tracking blockers stop it, and I have deliberately not tried to work around them.
This is worth saying plainly: a therapy website is one of the last places anyone should be followed around the internet.
Typefaces load from Google Fonts, which means Google’s servers receive your IP address when the page loads. If that matters to you, the fonts can be self-hosted instead. The fonts are currently loaded from Google. If you would prefer they were not, tell me and I will self-host them.
Form submissions are stored in Netlify and forwarded to my email. Only I read them. Submissions are kept for 12 months and then deleted.
Nothing is shared with anyone else, except the service providers that make the site work (Netlify for hosting and forms, and email delivery). If you become a client, your clinical records are handled separately and under stricter rules. See the Notice of Privacy Practices.
Email therapy@samantharajchel.com and ask. I will confirm what I have, send you a copy, or delete it, within 30 days.
This practice serves adults, and this site is not directed at children. I do not knowingly collect information from anyone under 18.
If this policy changes, the date at the top changes with it.
Samantha Rajchel, LCSW (Florida), RSW (Ontario)
therapy@samantharajchel.com
Telephone (561) 459-8299. My practice is fully virtual, so there is no public office address; if you need to send something by post, email me and I will give you a mailing address.