PRIVACY POLICY
Riverdale Therapy Online
Effective Date: September 24, 2026    |    Last Updated: September 24, 2026
 

Who We Are
Riverdale Therapy Online (“Riverdale,” “we,” “us,” or “our”) provides affordable online psychotherapy and related mental-health support to clients located in the State of New York. This Privacy Policy explains how we collect, use, disclose, and protect personal information, including information that may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and applicable New York law.

Scope
This Policy applies to information collected through our website, online scheduling or intake forms, email, phone, text or SMS (if used), and live video sessions conducted via Zoom or other web-based video platforms. It does not apply to third-party websites we do not control.

Information We Collect

Information you provide

Identity and contact data: name, date of birth, address, phone number, email address. Clinical and intake data: presenting concerns, mental-health history, medications, emergency contacts, and other information needed to evaluate and treat you. Payment and billing data: billing name, last four digits of payment method, transaction amounts, and related records (full card numbers are typically processed by a payment processor, not stored by us). Communications: emails, messages, and notes from sessions.

Information collected automatically
Device and log data such as IP address, browser type, pages visited, and timestamps, if our website uses standard web logs or analytics. Cookies or similar technologies if enabled on the site. You can control cookies through your browser settings.

Information from video sessions
Sessions are conducted live via Zoom or another web-based video platform. We do not routinely record sessions. If a recording is ever proposed, we will obtain your written consent first, except where recording is required by law. Video platforms process audio/video in real time and may collect technical connection data according to their own policies.

How We Use Information
We use personal information and PHI to: Provide, schedule, and document therapy and related services; Communicate with you about appointments, billing, and care; Process payments and maintain financial records; Comply with legal, licensing, and professional obligations; Protect the safety of you or others when we reasonably believe there is a serious and imminent threat; Improve our operations and website security; and Obtain professional consultation or supervision when appropriate, using the minimum information necessary.

Sharing of Information
We do not sell your personal information. We may share information with: Service providers who help us operate (for example, video platforms such as Zoom, payment processors, secure email or EHR vendors, and IT support), under contracts that require appropriate confidentiality and security; Other treating providers, with your consent or as otherwise permitted for treatment; Your insurance plan, if you ask us to bill insurance (this practice may operate primarily on a self-pay / affordable private-pay model; confirm at intake); Legal or regulatory authorities when required; and professional advisors (attorneys, accountants) under confidentiality obligations.
 

Zoom and other video vendors have their own privacy policies. If we use a Zoom plan designated as HIPAA-eligible, we will maintain a Business Associate Agreement (BAA) with Zoom where required. You should use a private location and a secure internet connection for sessions.

Children and Minors
Our services are intended for adults unless we separately agree in writing to treat a minor and obtain required parental or guardian consent under New York law. We do not knowingly collect personal information from children under 13 through the public website. If you believe a child under 13 submitted information to the site, contact us so we can delete it.

Retention
We retain clinical records for at least the period required by New York law and professional licensing boards (commonly six years from the date of last service for adult records, and longer for minors—until a period after the client reaches age 18). We then securely destroy or de-identify records unless a longer retention period is required.

Security
We use reasonable administrative, technical, and physical safeguards designed to protect information, including access controls, encrypted transmission where feasible (HTTPS, TLS), and limited staff access on a need-to-know basis. No method of electronic transmission or storage is 100% secure. Please do not send highly sensitive clinical details by unencrypted email or ordinary SMS unless you accept the risk or we have arranged a secure channel.

Email, Text, and Website Communications
Standard email and SMS are not fully secure. If you contact us by those methods, you acknowledge that risk. We may use email or text for scheduling reminders. You can opt out of non-essential marketing messages at any time; operational messages related to your care or appointments may still be sent as permitted by law.

State Privacy Laws
Because we serve New York residents and operate in the United States, New York confidentiality rules for mental-health information apply in addition to federal law. If other state privacy statutes become applicable, we will honor required rights to the extent they apply to us.

Changes to This Policy
We may update this Policy. The “Last Updated” date will change, and material changes will be posted on the website or provided to active clients as required by law. Continued use of the site after an update constitutes notice of the revised Policy for website visitors; active clients will receive required notices for changes affecting PHI uses.