PRIVACY POLICY

Last Updated: June 19, 2026

Living Solutions Counseling (“LSC”) is focused on helping people feel emotionally healthy at work and at home. As a provider of mental health services that connects employees and their dependents with effective and convenient care for their mental and emotional well-being, we combine technology, research-backed therapeutic methods, and top support providers such as coaches and licensed therapists (“Providers”) to offer personalized care.

1. SCOPE & JURISDICTION

This Privacy Policy (“Policy”) describes how LSC collects, uses, and discloses personal information collected via our marketing website, public contact and intake web forms, our mobile applications, events, and any other online or offline offering of ours that links to this Policy (collectively, the “Services”).

  • The HIPAA Boundary: If you are in the United States and register as an active patient receiving clinical services, the use, disclosure, and structural protection of your clinical charts and communications inside our Electronic Health Record (EHR) vendor platform (Tebra) are strictly governed by the federal Health Insurance Portability and Accountability Act (HIPAA) and our matching HIPAA Notice of Privacy Practices, which overrides this document.

  • Geographic Limitations: LSC delivers coaching and clinical services strictly targeted to residents within authorized United States jurisdictions (Washington, California, Oregon, and Wisconsin). LSC does not market or offer services outside of the United States.

  • Provider Specific Policies: Some Providers may have additional Privacy Policies or Informed Consent documents that describe their unique data practices during care.

2. PERSONAL INFORMATION WE COLLECT

The categories of personal information we collect depend on how you interact with our website or submit inquiries.

A. Information You Provide Directly to Us

  • Client Registration & Pre-Screening Forms: If you request a consultation or register through our web forms, we collect identifiers including your name, postal address, location, email address, phone number, username, password, and demographic variables (such as gender, date of birth, as well as race, ethnicity, religious affiliations, sexual orientation, and/or pronouns if you choose to disclose them).

  • Clinical Issue Declarations: Depending on the web forms you complete (e.g., intake inquiries or initial assessments), we collect text data regarding your mood, mental or physical health history, treatment history, symptoms, or current emotional state.

  • Communications: If you communicate with our administrative care team via email, phone, text, chat, or within our interactive web features, we collect your contact info and the contents of those messages. Calls to LSC’s care team may be recorded for quality metrics.

  • Surveys: We may periodically send optional surveys to collect feedback on your experience. This data helps inform LSC’s approach to evidence-based care and progress assessment.

B. Information Collected from Other Sources

  • Third-Party Referrals & Payors: We may receive information about you from your Benefit Sponsor, Health Savings Plan, insurance company, or third-party care payors involved with your coordination of care. We may also collect basic demographic data if a friend or relative refers you to LSC.

  • Third-Party Sign-On: If you choose voluntarily to log into your LSC account via a third-party service (like Google), we may collect information permitted by your privacy settings on that platform, such as your public profile, contact lists, and user interactions. Please obtain necessary consents before providing us with personal information regarding another individual.

C. Information Automatically Collected (Cookies & Trackers)

When visiting our Services, we automatically log your computer or device identification, operating system type, browser type, browser language, the website you visited before browsing to us, pages viewed, duration of visits, and access times. We and our third-party analytics partners (such as Google Analytics) use cookies (both session and persistent) and pixel tags/web beacons to collect this data. Our uses of these Technologies fall into the following categories:

  • Operationally Necessary: Required for system access, security, and fraud prevention.

  • Performance-Related: Used to analyze how individuals interact with the website.

  • Functionality-Related: Keeps track of your specified preferences or signs you into our services.

  • Advertising or Targeting-Related: Used strictly on LSC’s public marketing website to deliver relevant contextual content.

Strict Clinical Data Wall: Advertising, tracking, and targeting pixels are strictly prohibited and structurally blocked on any private portal or site where active clients log in to access care, message their therapist, or search for clinical records.

3. USE OF PERSONAL INFORMATION

LSC utilizes collected personal and health-related data for the following legitimate business and clinical administration purposes:

  • Provider Matching & AI-Assisted Intake: To process your intake questions and match you with an appropriate Provider. LSC may utilize administrative software automation to flag specific diagnostic categories or recommend treatment suggestions based on your responses.

  • Clinical Documentation Efficiencies: To enable our Providers to complete manual, administrative, or routine documentation tasks more effectively through automated conversation notes, transcriptions, and session summaries, subject to absolute manual review and modification by your licensed therapist.

  • Account Administration: To open, maintain, and manage profiles, provide notifications or automated appointment reminders, respond to technical support questions, or register you for events.

  • Security & System Integrity: To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and debug or repair website technical errors.

  • De-identified and Aggregated Information: We may anonymize personal and clinical data sets to provide Benefit Sponsors with group insights into how their employees use our services, or to train our internal machine learning models to improve our service offerings. Non-personally identifiable information may be stored indefinitely.

4. DISCLOSURES OF PERSONAL INFORMATION

We do not sell your personal data or your health information. We disclose your information only to the restricted categories of third parties described below:

  • Your Assigned Providers: If you seek care, your selected therapist or coach will have direct access to your submitted web intake forms and assessments. If you switch Providers, your records will be shared with the new Provider to ensure a consistent care experience.

  • HIPAA-Compliant Service Providers: We share personal data with third-party service vendors (such as our payment processors, IT infrastructure vendors, our EHR Tebra and our secure office domain Google Workspace). Every vendor handling sensitive health data is bound by a strict, signed Business Associate Agreement (BAA).

  • Disclosures to Protect Us and Others: We may preserve and disclose your records to external parties if we believe in good faith that doing so is required to comply with law enforcement requests, a court order, or a subpoena; when required by health oversight agencies; or to protect the safety or vital interests of yourself or others under multi-state Duty to Warn standards.

  • Corporate Changes of Control: In the event of a corporate merger, acquisition, divestiture, or bankruptcy involving all or a portion of LSC, customer contact lists and web submission records may be among the assets transferred to the succeeding entity.

5. SECURITY & DATA RETENTION

We enforce robust administrative, technical, and physical safeguards—including full-disk encryption, enforced multi-factor authentication (MFA), and automated audit logging—to protect your web data. However, no method of internet transmission is 100% secure. Any unencrypted text or personal email you send through the open internet cannot be completely protected against interception. You are never required to use unsecured channels; you can choose to receive and send all messages using our secure electronic communication system, which requires you to log into a separate portal to access messages. We retain personal information pursuant to statutory requirements, keeping records for a minimum of six (6) years from creation to simultaneously satisfy federal compliance standards and multi-state medical record retention laws.

6. CHILDREN'S PRIVACY

LSC’s public web offerings are not directed to children under the age of 13. We do not knowingly collect or maintain personal information shared by children under 13 via public web forms. If we discover that a child under 13 has provided us with personal information in violation of applicable law, we will permanently delete that file from our servers unless we have a separate legal obligation to retain it.

7. YOUR PRIVACY CHOICES AND RIGHTS

Depending on your state of residence, you maintain the following legally enforceable choices and rights regarding your web data:

  • Communication Preferences: You can opt out of promotional emails by clicking the "unsubscribe" link at the bottom of the message. You can opt out of text messages at any time by replying “STOP”. You can turn off mobile app push notifications in your device settings.

  • The Right to Access & Portability: To confirm whether we are processing your personal information and request a portable, electronic copy of your collected data.

  • The Right to Correction: To request immediate rectifications if your name, contact information, or demographic records are stored inaccurately.

  • The Right to Deletion: To request that LSC erase your collected website data. (Note: This right does not apply to official medical records housed inside Tebra, which are bound by state medical retention statutes).

To exercise any of these privacy rights, submit a formal request to our administrative team at support@livingsolutionscounseling.com.

8. STATE-SPECIFIC LEGAL SUPPLEMENTS

California Supplemental Notice (CCPA/CPRA & SB 446)

  • Sensitive Personal Information: LSC collects data concerning a consumer's mental health, sexual orientation, or racial/ethnic origin strictly on a voluntary, opt-in basis during pre-clinical screening. We do not use or disclose this sensitive personal information for purposes outside of direct clinical matching or healthcare operations.

  • Automated Decision-Making Transparency: LSC utilizes automated technology to assist providers with note-summarization and intake matching. California residents maintain the absolute right to opt out of automated mental health profiling systems by contacting our compliance office.

  • Accelerated Breach Right: In accordance with California SB 446, if unencrypted consumer personal data is compromised in a data breach, LSC is legally mandated to notify affected California residents within 30 calendar days of discovery.

Washington State Notice (MHMDA Disclaimer)

  • If you are a resident of Washington State accessing this site, the collection, management, and strict deletion protocols for any data you provide regarding your mental or physical symptoms on our public contact forms are governed explicitly by our standalone Consumer Health Data Privacy Policy. You can access this dedicated document by clicking the link marked "Consumer Health Data Privacy Policy" on our primary homepage footer.