Privacy policy

At the Emotional Knot Therapy, I value your privacy and am committed to protecting your personal and health information. This Privacy Policy explains how I collect, use, disclose, and protect your information when you work with me through my virtual therapy practice. I only provide services to New Jersey residents.
Because I provide mental health services, I follow the federal HIPAA Privacy and Security Rules and the New Jersey Data Privacy Act (NJDPA), which took effect in 2025. If these laws conflict, the stricter standard applies.

By using my website (www.theemotionalknot.com), you agree to the terms listed in this Privacy Policy.

1. Information I Collect
To provide therapy and run my practice, I collect:
• Personal details: name, date of birth, address, phone, email, and other contact details.
• Health information (PHI): mental health history, diagnoses, treatment notes, treatment plans, medications.
• Psychotherapy notes: notes I keep separately from your record about the content of our sessions. These have special HIPAA protections.
• Administrative information: scheduling details, billing/receipts (I am a self-pay practice).
• Technical data: IP address, device/browser information, cookies, and analytics (see Section 9).
• Communications: emails, messages, or information you share with me during virtual sessions.

2. How I Collect Information
I collect information directly from you through intake forms, emails, phone calls, and virtual sessions. I also receive information through the secure telehealth platform and payment processor I use.

3. How I Use Your Information
I use your information to:
• Provide therapy services and keep records.
• Schedule and manage appointments.
• Communicate with you about your care.
• Provide receipts or superbills if requested.
• Comply with legal and ethical obligations.
• Improve my practice and keep things running smoothly.
I do not sell your personal or health information.

4. Legal Obligations I Follow
• HIPAA: I follow HIPAA rules, give you a Notice of Privacy Practices at intake, and get your written authorization if I ever need to share your information for reasons outside treatment, payment, or healthcare operations.
• New Jersey Data Privacy Act (2025): This law gives you rights like access, correction, and deletion of personal information. Because I am a healthcare provider, HIPAA may limit how some of these rights apply, but I will review and respond to any valid requests.

5. Your Rights
As my client, you may have the right to:
• Access & copy your records. (Psychotherapy notes may be excluded under HIPAA.)
• Request corrections to inaccurate information.
• Request deletion of personal information (I may not be able to delete records I’m legally required to keep).
• Request a portable copy of certain data.
• Request restrictions on disclosures of your information.
• Opt out of the sale of personal data or targeted advertising (I do not sell your data or use targeted advertising).
• File a complaint with me, with the U.S. Department of Health and Human Services (HHS), or with the NJ Attorney General’s office if you believe your privacy rights have been violated.

To exercise any of these rights, please email me at: achavez@theemotionalknot.com

6. When I May Share Information Without Consent
I may share your information without your written authorization if required by law, including:
• For treatment purposes.
• If I believe you are at risk of harming yourself or others.
• If I must report child, elder, or dependent adult abuse or neglect.
• To comply with a court order.
• For certain public health and law enforcement purposes.

7. Telehealth & Consent
I provide therapy virtually using a secure, HIPAA-compliant telehealth platform. You must be physically located in New Jersey at the time of our sessions. Before starting, I will review informed consent for telehealth, which explains the risks, benefits, and limitations.

8. Social Media & Online Presence
I maintain a professional presence on platforms such as Instagram or other social media for educational and informational purposes only.
• No therapy via social media: I do not provide therapy or clinical advice through social media platforms, direct messages, or comments. These channels are not secure or HIPAA-compliant.
• No “friending” or following clients: To protect your privacy and maintain clear professional boundaries, I do not accept friend requests or follow current or former clients on personal or professional accounts.
• Interactions: If you choose to “like,” comment on, or follow my professional content, please be aware this may compromise your confidentiality. I will not acknowledge clients in comments or direct messages to protect your privacy.
• Testimonials & reviews: Ethics guidelines and privacy laws prevent me from soliciting or posting testimonials or reviews from current clients. You are never obligated to leave a review.
• Messaging: If you contact me through social media messaging, I will redirect you to email or my secure telehealth platform. Please use those channels for anything related to your care.

9. Website Cookies & Analytics
My website may use cookies or analytics tools to improve functionality (e.g., scheduling widgets). I do not use these tools for targeted advertising or selling your data.

10. Security & Record Retention
I use reasonable safeguards such as encryption, strong passwords, and secure devices to protect your information. Records are kept for the period required by New Jersey law and then securely destroyed.

11. Breach Notification
If a breach of unsecured health information occurs, I will notify you promptly, consistent with HIPAA and state law.

12. Policy Updates
Privacy laws change, and I may update this Policy from time to time. The updated version will always be posted on my website with the effective date.

13. Contact Information
If you have any questions, requests, or concerns about your privacy, please contact me:

Amanda Chavez LPC, NCC, CCTP
The Emotional Knot Therapy LLC
Email: achavez@theemotionalknot.com
Phone: 201-632-1031
You may also contact:
• U.S. Department of Health & Human Services, Office for Civil Rights (HIPAA complaints).
• New Jersey Attorney General’s Office (for NJDPA-related privacy complaints).