Privacy Policy
Effective date: 2026-07-15
Katelin Hanhart, LCSW ("we," "us," or "our") operates the website katelinhanhart.com (the "Site"), with technology provided by Grow Your Practice. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the Site you agree to this policy.
Information we collect
- Information you give us. When you submit a contact, quote, or booking form, or otherwise reach out, we collect the details you provide — typically your name, phone number, email address, and any message you include.
- Information collected automatically. Like most websites, we and our providers automatically receive standard log and device data (IP address, browser type, pages viewed, referring page) and use cookies or similar technologies for site functionality and measurement as described in our Cookie Policy.
- Scheduling. If you book through our online scheduling tool, the appointment details you enter are processed by our scheduling provider on our behalf.
How we use your information
We use your information to respond to your inquiries, provide quotes and services, schedule and confirm appointments, send communications you request or that relate to our services, keep the Site secure and working, and meet legal obligations. We do not use it for automated decisions that produce legal or similarly significant effects about you.
How we share your information
We do not sell your personal information for money. We share it only with:
- Service providers ("processors") who help us operate — website hosting, CRM/messaging, scheduling, email delivery, and (only with your permission) analytics. They may use it only to perform services for us. The providers that may process personal data through this Site are listed below.
- Legal and safety recipients when required by law, to enforce our terms, or to protect the rights, property, or safety of you, us, or others.
| Provider | Used for | Information it handles | Location |
|---|---|---|---|
| HighLevel, Inc. (GoHighLevel / LeadConnector) | CRM and lead system of record; forms, pipelines, appointments, SMS/email, calls. | Name, email, phone, submitted message, appointment & booking details, tags, notes; call recordings/transcripts where calling is used. | United States |
| Supabase (prod project) | Lead-router backups, GYP portal data, KPI/cron, internal brain. | Raw form submissions (name/email/phone/message) captured before routing; portal intake; ack logs. | United States (AWS us-east-1) |
| Resend (Plexo, Inc.) | Transactional lead-acknowledgement email. | Lead email address + first name. | United States (AWS SES us-east-1) |
| Discord, Inc. | Primary INTERNAL ops channel; inbound leads posted for the team. | Lead name, phone, email, message (private internal channels only). | United States |
| Slack Technologies (Salesforce) | Per-client 'slack-hub' mirrors that client's inbound leads into their own channel. | Lead name, email, phone, message. | United States |
| Cloudflare, Inc. | CDN/DNS backend for client domains; hosts our internal OS console + legal/consent static pages; edge Workers. | Visitor IP + request metadata transiting the edge; DNS. Internal console is access-gated. | Global edge (US-HQ) |
| Lovable Labs Incorporated (Lovable) | Builds and hosts client marketing websites and the GYP portal. | Serves site pages; the platform also injects a first-party analytics beacon, disclosed in the Cookie Policy where present. | United States / EEA (SOC 2 & ISO 27001 data centers; SCCs for transfers) |
| Lovable analytics (__l5e / events.js) | First-party site analytics auto-injected by Lovable; session-replay-capable (rrweb) though replay currently dormant. | Random visitor identifier + session identifier; page address visited; performance timings; session-start event. Transport carries standard connection data (IP, device/browser). | United States / EEA (Lovable infrastructure; verified 2026-07-16) |
| Google Fonts (Google LLC) | Web-font delivery. | Visitor IP disclosed to Google on font fetch. | United States (global CDN) |
Cookies, analytics & tracking
We use strictly necessary cookies to run the Site. A consent banner is being rolled out across this Site; where it is active you can accept, reject, or choose non-essential technologies by category via Cookie preferences. The technologies actually in use are listed truthfully in our Cookie Policy, and you can always control cookies and tracking through your browser settings and the Global Privacy Control (GPC) signal, which we honor as an opt-out of any "sale" or "sharing" where required. Details, including the specific technologies actually in use on this Site, are in our Cookie Policy.
Website analytics on this Site
Our website is built and hosted on a third-party website platform. That platform includes a first-party analytics script (internally named `__l5e`) that, on page load, records limited usage data under a random visitor identifier — the page address you visit, basic performance timings (such as load speed), and that a browsing session started. Like any web request, its transmissions carry standard connection data such as IP address and device/browser type. Based on our testing it does not capture what you type into forms, and it does not use advertising cookies. We do not use it to identify you.
We are transitioning this Site to disable this script; in the meantime you can limit measurement through the controls described below.
Because this script is injected by the website platform itself, it is not controlled by our cookie banner. You can limit it through your browser's privacy settings and content blockers, and we honor the Global Privacy Control (GPC) signal as an opt-out of any "sale" or "sharing."
Health information & this website
This website is an informational and contact website for a health-care practice — not a treatment, patient-portal, or medical-records system. Please keep the following in mind:
- This is not a secure or confidential channel. Do not submit diagnoses, treatment details, medical history, insurance/claims information, or other sensitive health information through the contact form, email, or text. Share only what is needed to request an appointment or a call back (for example, your name, contact details, and a brief, general note).
- This form is not part of clinical intake. It captures only the limited contact information needed to respond to your inquiry. Clinical care, intake, and health records are handled through the practice's own secure clinical systems — not through this website.
- How health information is handled. Any health information the practice receives is handled in accordance with applicable law, including HIPAA where it applies, under the practice's Notice of Privacy Practices (available from the practice on request).
- Sensitive-data choice. To the extent any information you voluntarily provide could be considered sensitive (including information that could reveal a mental- or behavioral-health interest), we use it only to respond to you, we do not sell or share it for cross-context behavioral advertising, and you may ask us to delete it at info@katelinhanhart.com.
If you are an existing client and need to reach Katelin Hanhart, LCSW about your care, use the secure method the practice has given you rather than this website.
Consumer health data (Washington, Nevada, Connecticut & similar)
Some states have specific "consumer health data" laws — including Washington's My Health My Data Act, Nevada's SB370, and Connecticut's health-data provisions. If one of these applies to you:
- We collect only the limited contact information you choose to provide through this Site, and we do not knowingly collect consumer health data beyond that.
- We do not sell consumer health data, and we do not use geofences around health-care facilities.
- We will not share consumer health data with third parties for their own purposes without your consent, except as needed to respond to your inquiry or as required by law.
- You may withdraw consent, request access, or request deletion of any such data by emailing info@katelinhanhart.com.
Washington residents may have additional remedies, including a private right of action under the My Health My Data Act.
Text messaging (SMS)
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. The mobile phone number and SMS consent you provide are used solely so that Katelin Hanhart, LCSW can communicate with you about your inquiry and our services — scheduling, confirmations, reminders, and follow-up.
- Consent is opt-in. You opt in by checking the SMS consent box on our contact form. We do not require SMS consent as a condition of any service.
- Message frequency varies. Message and data rates may apply.
- Opt out anytime by replying STOP — or by any reasonable method, including emailing us; reply HELP for help.
- See our full SMS Terms & Conditions for details.
Categories of information for text messaging (your mobile number and consent status) are not sold or shared, and are not disclosed to any third party for their own marketing.
Data retention & security
We keep personal information only as long as needed for the purposes described here or as required by law, then delete or de-identify it. We typically retain inquiry and lead records for up to 24 months after our last interaction with you, and routine operational logs for up to 12 months, unless a longer period is required by law — and you may request deletion sooner. We use reasonable administrative and technical safeguards to protect it. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your privacy rights
You may request access to, a copy of, correction of, or deletion of the personal information we hold about you, and you may opt out of non-essential communications at any time. To exercise any right, contact us using the details below; we will verify your request and respond as required by applicable law. We will not discriminate against you for exercising your rights.
California privacy rights (CCPA/CPRA)
If you are a California resident, and to the extent the California Consumer Privacy Act applies, you have the right to:
- Know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties we disclose to;
- Delete personal information we collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising; and
- Limit the use of sensitive personal information, and be free from discrimination for exercising your rights.
We do not sell your personal information for money. Some uses of cookies and advertising or analytics technologies may be considered a "sale" or "sharing" under California law. You can opt out at any time by enabling Global Privacy Control (GPC) in your browser — we treat a GPC signal as a request to opt out of sale/sharing — and, where our cookie banner is active, by rejecting non-essential cookies (Cookie preferences).
Notice at collection: the categories of personal information we collect, the purposes, and the third parties we disclose to are described in this policy ("Information we collect," "How we use," and "How we share," above); we collect no categories beyond those listed, and we retain personal information as described under "Data retention & security." We do not knowingly sell or share the personal information of consumers under 16.
To exercise these rights, contact us by email at info@katelinhanhart.com or through the contact form on this Site — two methods are always available. We will verify your request and respond within the timeframe the law requires, and you may use an authorized agent.
Other U.S. state privacy rights
Residents of states that have enacted comprehensive consumer-privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Indiana, Tennessee, Minnesota, Maryland, Rhode Island, Kentucky, and others as they take effect — may have the right to:
- Access / confirm whether we process their personal data and obtain a copy of it;
- Correct inaccuracies and delete their personal data;
- Opt out of targeted advertising, the sale of personal data, and certain profiling; and
- Opt in before we process sensitive data, where required.
The specific rights available vary by state, and some states' rights are narrower (for example, Iowa does not provide a targeted-advertising opt-out).
To exercise any of these rights, email info@katelinhanhart.com or use the contact form on this Site. We will respond within the period required by your state's law. If we deny your request, you may appeal by replying to our response within a reasonable time; if we deny your appeal, we will provide you with a way to contact your state Attorney General to submit a complaint.
Children's privacy
The Site is not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The "Effective date" above reflects the latest version, and we will post material changes on this page.
Contact us
Questions or requests about this Privacy Policy? Contact Katelin Hanhart, LCSW at info@katelinhanhart.com.