Website Privacy Policy

Business identity and privacy contact

Legal business name: Mishelle Dyer

Privacy requests: mishelle@lfscounseling.com

Contact this address with privacy questions or requests concerning this website. Please keep your initial request general; do not send medical records, identification documents, or detailed health information by email.

Information you choose to submit

The consultation form collects first name, last name, phone, email, how you heard about the practice, and a brief reason for seeking help. On pages with pricing choices it also sends the selected pricing option and associated amount (or an undecided value). A simple arithmetic check runs in the browser; its answer is not sent in the form payload.

The form sends the current page path as “source.” It does not include query parameters, click identifiers, campaign parameters, document referrer, full URL or device information in its JSON payload. It does not persist attribution in cookies or browser storage. “How you heard” is your manually entered answer, not an automatic marketing identifier. The receiving server still receives connection metadata when a form is sent.

Form entries remain in React memory while the form is open; this app does not write them to cookies, localStorage, sessionStorage, analytics events or redirect URLs. Your browser’s autofill/history and third-party systems are separate. Do not put patient details into a URL or submit records through this general website form.

Purposes and recipients

Your inquiry is sent directly from your browser to the practice’s configured LeadConnector/HighLevel webhook at services.leadconnectorhq.com, under its webhook-trigger endpoint. This supports follow-up and consultation scheduling. The app does not first save these inquiries in a website database. That does not mean the recipient has no records or logs. The practice must confirm account access, downstream automations, recipients and retention in HighLevel.

After an accepted submission, this app navigates to /calendar without adding submitted information to the URL. The calendar is hosted by LeadConnector/HighLevel at api.leadconnectorhq.com. It does not load until you explicitly request it. The former top-level helper script from link.msgsndr.com has been removed; the calendar runs inside an isolated frame instead. Booking details you enter there are provided to that service and the practice through its configuration. We cannot inspect or change its cross-origin form, storage, policies or subsequent processing from this website.

Opening the provider’s separate scheduling link also connects to that provider. You do not need to accept optional storage here to submit the first-party consultation form.

A read-only visit to the separate scheduling page observed connections to api.leadconnectorhq.com, stcdn.leadconnectorhq.com, backend.leadconnectorhq.com, Google Fonts (fonts.googleapis.com and fonts.gstatic.com) and Google-hosted assets at storage.googleapis.com. It created a provider analytics/attribution session before any information was typed. Loading the embedded calendar enables the same provider service; this site cannot disable its internal attribution. Provider storage details are listed in the Cookie Policy. Observing no typed information does not establish what the provider would collect during a completed booking.

Hosting, fonts and connection metadata

The site is hosted using Replit. Hosting, network and security providers may receive or log request paths, query strings, IP addresses, browser headers, timestamps and operational details. This code cannot verify their full logging or retention settings and does not promise that IP addresses are never logged.

Lora and DM Sans font files are hosted with this website. This version makes no Google Fonts connection to display its typography. Earlier versions used fonts.googleapis.com and fonts.gstatic.com. The app sets a no-referrer policy for outgoing requests, including form and calendar connections, to reduce disclosure of browsing URLs. That does not hide your IP address, destination, or information you intentionally submit.

Google Tag Manager and Google Ads previously loaded on this website. App-controlled tags are now disabled, including conversion events and the no-JavaScript tracking iframe. Accepting optional storage does not re-enable them. The scheduling provider’s own embedded-page integrations require separate practice review; this site cannot guarantee what that provider runs. Previous provider disclosures cannot be undone by this change; the contents and past recipients of the former GTM container have not been verified.

Preferences and attribution

The only active app-created persistent browser record is the consent preference, policy version and timestamp. It is valid for 180 days. Scheduling is the only currently offered optional category. The site does not automatically forward current-request campaign parameters or persist attribution. Future marketing changes need a fresh privacy and healthcare review; lack of storage alone would not remove privacy obligations.

See the Cookie Policy for storage names, cleanup limits, third-party controls and expiration. Open Cookie settings to change or withdraw optional permission.

Healthcare information and clinical privacy

Even a request for counseling, contact information on a therapy page, a referral answer, or a reason for seeking help can be sensitive. Keep inquiries general. This form is not an emergency service, a clinical intake portal, or a place to upload medical records.

Cookie consent is not HIPAA authorization to disclose health information. A banner, browser-to-provider submission, SPA architecture or absence of a website database does not establish HIPAA compliance. This website policy is not the practice’s clinical Notice of Privacy Practices. Ask the practice for its clinical notice and secure communication/intake procedure.

The practice must review whether HIPAA and other laws apply, obtain any required business associate agreements, verify HighLevel/LeadConnector and hosting configurations, restrict access and downstream automations, and establish retention/deletion and incident procedures before collecting clinical information through these tools. No certification or vendor agreement is asserted by this policy.

Retention, rights and international processing

The website’s consent preference is valid for 180 days. Retention for inquiries, booking records, backups and provider/network logs has not been verified; there is no invented deletion deadline here. The practice must establish and communicate its schedule, including any professional record-retention obligations.

Depending on applicable law and your circumstances, you may have rights to request access, correction or deletion, restrict or object to processing, obtain a copy, or raise a concern with an appropriate authority. Availability and exceptions require practice/legal review; this policy does not assert that every right applies to everyone or invent a legal basis for processing. Send privacy questions or requests to mishelle@lfscounseling.com, keeping your initial message free of sensitive details.

Providers may process information in the United States or other countries. Processing locations and any required transfer safeguards have not been verified. Withdrawing optional consent stops future optional use controlled here, not information already sent or records required by law. The practice must confirm applicable jurisdictions, rights procedures and vendor arrangements.