Website Privacy Policy
Candor & Hope Therapy Inc. Beachwood, Ohio 44122 (216) 245-8488 | connect@candorandhopetherapy.com Primary website: https://candorandhopetherapy.com Effective date: October 8, 2026
Scope and contact
Candor & Hope Therapy Inc. operates the public website at https://candorandhopetherapy.com. This policy applies to our public website and any other practice-controlled website that expressly links to this policy. It describes website information handling, rather than replacing our clinical Notice of Privacy Practices or informed consent.
Independent scheduling, portal, payment, social-media, and other services have their own notices and terms. Our legal duties still apply to information we handle through those services.
Website privacy requests: contact connect@candorandhopetherapy.com or (216) 245-8488 and ask for the website privacy contact. Clinical privacy requests and complaints should be directed to the Privacy Officer using the same contact information. Our public location is Beachwood, Ohio 44122; contact us for complete mailing instructions.
Information you provide
When you contact us by phone or email, we receive the information you choose to provide, such as your name, contact details, question, and communication preferences. Applications, referral requests, and other inquiries may contain additional information you supply. Information submitted through a third-party service is handled through that service and our applicable practice processes.
Please keep initial inquiries brief. Do not send detailed symptoms, diagnoses, treatment histories, insurance identifiers, identity documents, or records through ordinary email, public website tools, or social-media messages. Ask for an approved secure channel. A warning does not make an insecure channel suitable for protected health information.
Our public website is not an emergency service. For a crisis, call or text 988; for immediate danger or a medical emergency, call 911 or go to an emergency department. We do not promise real-time review of website messages.
Technical information and browser storage
The website and hosting services process technical information needed to deliver pages, operate the service, diagnose errors, and protect against abuse. This can include an IP address, device and browser information, request time, pages or URLs requested, and connection or security information. The hosting platform may maintain operational logs and page-activity records.
Base44 operational requests may include the current page URL and a generated anonymous identifier. An anonymous identifier can distinguish a browser even when it is not directly labeled with your name. If you sign in, authentication information may also accompany authorized requests. Do not put confidential information in URL parameters.
Browser storage may support appearance preferences, saved public resources, authentication where enabled, and operational identifiers. Blocking or clearing storage can affect these functions, sign you out, or remove saved preferences. Clearing your browser does not necessarily delete information already retained by a provider.
Therapist matching
Our public matching questionnaire is intended to compare preferences locally against public clinician information. Preferences are not intended to be sent as server-side matching filters or saved in browser storage. Choices clear when you complete or reset the questionnaire, refresh, or leave the page. Public clinician data still loads from the hosting service independently of your answers.
Matching is informational and does not diagnose, determine medical necessity, guarantee clinician availability, or replace a discussion with the practice. Local processing does not by itself prevent an enabled session-recording tool from observing the interface.
Analytics and interaction recording
On October 8, 2026, inspection of the published website’s application code showed that Google Analytics and optional analytics through the application’s Base44 software library were disabled. No Google Analytics or Tag Manager loader or application analytics event calls were identified in the inspected code. Code inspection is not a test of actual browser traffic and does not verify Google-side retention, existing cookies, or deletion of previously collected information.
The published website still includes a separate Base44 page-activity script. It is configured to send a page name to the hosting service on initial loading and when the page path changes. Operational requests may also include the current URL and a browser or account identifier. The exact browser request headers, server-added fields, identity associations, access arrangements, retention periods, and available controls have not been independently verified. Disabling application analytics does not establish that platform page logging, operational logging, or session recording has stopped.
The practice turned off Base44 Session Recordings and deleted existing recordings on October 8, 2026. Session replay is not enabled under the practice's current configuration.
Turning off session recording and deleting recordings does not establish that operational logs, page-activity records, or information held by other providers have been deleted or that all website tracking has stopped. Local questionnaire processing is separate from these technical services. Contact the practice about website information handling or deletion requests, and do not enter confidential information into public website tools.
Cookie choices and website terms do not substitute for a HIPAA authorization. We must have a lawful basis and required safeguards before disclosing protected health information. We do not use this policy to authorize disclosures that applicable health-privacy law prohibits.
How information is used and shared
We use information to respond to inquiries, explain available services, administer applications or referrals, provide requested access, operate and secure the website, and comply with legal obligations. Clinical information is handled under applicable health-privacy requirements and our Notice of Privacy Practices.
Service providers may process information for hosting, email, portals, scheduling, and other requested functions. We limit access and use to appropriate purposes and arrangements required by law. Linking to a service does not mean that every visitor's information is automatically sent to it; following a link or using its service may result in information being processed there.
We may disclose information when law requires or permits it, to address security incidents, or to protect rights and safety, subject to applicable confidentiality restrictions. A lawful business transition may involve information subject to required safeguards. No statement here permits the sale, advertising use, or other disclosure of protected health information without the authority required by law.
Third party services
The website uses Base44 hosting and may load resources such as images or fonts from external providers. Loading those resources can disclose connection information to the provider. Google Analytics is addressed separately above. Links may lead to SimplePractice, Grow Therapy, social-media services, or other independent sites. Verify that you are using your clinician's correct portal before entering private information.
Review the destination's privacy notice when using an external service. Our policy does not govern that provider's independent collection. We remain responsible for arrangements and disclosures for which applicable law makes us responsible.
Retention and safeguards
Retention depends on the information and purpose, legal or professional requirements, security needs, disputes, and provider arrangements. Website logs are not necessarily retained for the same period as clinical records. Contact us for information about a particular category or request; we do not promise an unverified fixed deletion period for platform logs.
We use reasonable administrative, technical, and physical safeguards appropriate to information we control. No online system can guarantee absolute security. Provider agreements and settings must support any regulated information processed through the service; this policy is not a certification of a platform's HIPAA suitability.
Your choices and requests
You may contact us to ask about information handling, correct contact details, request access or deletion where applicable, or stop optional communications. We may verify identity through a secure method. Clinical access, amendment, and other health-information rights are described in the Notice of Privacy Practices. Deletion requests do not override required clinical retention, legal holds, security obligations, or other lawful exceptions.
You may use browser controls to limit cookies or storage, but these controls can affect website functions and do not necessarily stop all server logging. Do not Track or similar browser signals are not a verified comprehensive opt-out for this website. Rights required by applicable law remain available regardless of that limitation.
Children and accessibility
This public website is intended for general information and adult-managed inquiries; it is not a child-directed online service. A minor's access to lawful clinical care and privacy rights are governed separately by applicable law and service consent. Parents or guardians concerned about information submitted by a child may contact us for review.
For an accessible version of this policy or assistance using the website, call (216) 245-8488 or email connect@candorandhopetherapy.com. You need not disclose a diagnosis to report an accessibility problem.
Changes
We post updates with a revised effective date. Material changes will be communicated as required by law. An update does not retroactively authorize a disclosure that was prohibited when made, and website use alone does not constitute HIPAA authorization.