Legal

Privacy Policy

What this website collects, what it does not, and where the information goes.

Website privacy, not clinical privacy. This policy covers only this website. How your health information is handled once you are a client is governed by the HIPAA Notice of Privacy Practices, which you receive and acknowledge at intake. That Notice controls treatment records. This page controls the website and nothing more.

Effective date: September 17, 2026  ·  Last reviewed: September 17, 2026  ·  Version: 1.0

1. Summary in Plain Language

This site runs no analytics, sets no cookies of its own, and loads no tracking pixels. There is no consent banner because there is nothing to consent to. The only information collected is what you choose to send through the contact form or by email, plus the ordinary technical data any web host records when a page loads. I do not sell, rent, or share your information for marketing, and I use it only to answer you or to arrange a session. You can ask me to delete anything you have sent by emailing thomasjoneslcsw@gmail.com.

2. Who Operates This Site

This website is operated by Thomas A. Jones, LCSW, LCADC, an individual practitioner: a licensed clinical social worker and licensed clinical alcohol and drug counselor in private practice. Licensure: Nevada LCSW 6182-C and LCADC 00409-LC; Utah LCSW 14232258-3501; Arizona (license number pending). Sessions are held online with clients located in Nevada, Utah, and Arizona. In this policy, "I," "me," and "my" refer to Thomas A. Jones. "You" refers to the person visiting this website.

3. Two Separate Privacy Documents

There are two documents, and they cover different things:

  • This Privacy Policy covers the website: the contact form, email you send me, the hosting provider's server logs, and the third-party services the site relies on.
  • The Notice of Privacy Practices is the HIPAA notice for clinical care. It explains how protected health information (PHI) is used and disclosed in treatment, your rights over your records (to inspect and copy them, request amendments, request restrictions, request confidential communications, and receive an accounting of disclosures), and how to file a complaint. It governs treatment records, not this website.

HIPAA applies to clinical PHI handled inside the therapy relationship. A message you send through this website before you are a client is not a treatment record, which is one reason Section 8 asks you not to put health details in it.

4. Information This Site Collects

The site collects only what you volunteer, plus limited technical data your browser sends to the host.

4.1 The contact form

The form on the Contact page asks for:

  • Your name and email address (required)
  • Your phone number (optional)
  • The topic you select and your message (optional)
  • An acknowledgment checkbox confirming you understand the form is not a secure channel for health information
  • A hidden honeypot field that stays empty for real people, and a timing check that rejects submissions completed faster than a person could type. Both exist only to stop spam. No spam-check service is active at this time; if one is added, this policy will say so first.
4.2 Email you send directly

If you email thomasjoneslcsw@gmail.com, I receive whatever you include: your address, your name if shown, the message, and any attachments. That mailbox is Gmail, so Google stores the message on its servers under Google's own terms.

4.3 Technical and server data

The site is hosted on Cloudflare Pages. Like every website, the host's edge servers record a request log whenever a page, image, or script is requested. That log typically includes your IP address, your browser and device type, the page requested, the referring URL if any, and a timestamp. I do not download, keep, or analyze these logs. Cloudflare retains them on its own schedule under the Cloudflare Privacy Policy.

4.4 Cookies and browser storage

This website sets no cookies of its own and stores nothing in your browser. There is no analytics, no advertising pixel, no session recording, and no consent banner. The only cookies that could ever appear are strictly necessary ones the hosting provider may set for security, such as during a bot challenge, and those are not used to track you across sites.

If a privacy-respecting, cookie-free analytics tool is ever added, this policy will be updated before it goes live.

4.5 What this site does not collect
  • No Social Security numbers, government IDs, insurance IDs, or dates of birth.
  • No payment card information. Payment and scheduling happen through Alma or directly with me, not through this website.
  • No precise location data.
  • No browser fingerprinting and no cross-site tracking.
  • No information knowingly collected from anyone under 13.

5. How the Information Is Used

Information you submit is used only to:

  • Reply to your question.
  • Arrange a consultation or first session.
  • Follow up on a previous conversation or scheduling request.
  • Prevent spam and abuse through the honeypot and timing check.
  • Meet legal obligations and respond to lawful requests.

I do not sell, rent, or share your personal information with third parties for marketing. I do not use it for advertising and do not run automated profiling or automated decision-making.

6. Third-Party Services

A working website needs a few outside services. Each has its own privacy practices, linked below.

  • Cloudflare (hosting and DNS): receives every request to this site, including IP address and page path, and keeps the server logs described in Section 4.3. Privacy policy.
  • FormSubmit (contact form processor): receives the full content of any form you submit and forwards it to my email inbox. FormSubmit is a third-party processor, and it is not a secure channel for health information. Privacy policy.
  • Google (Gmail) (my inbox): stores forwarded form submissions and any email you send me. Privacy policy.
  • Google Fonts (typography): the site's typefaces are loaded from Google's servers, which see your IP address when the font files are requested. Privacy policy.
  • Alma (booking): the "Book a Session" links take you to my provider page on Alma, a separate website. This site passes no data to Alma; anything you enter there is governed by Alma's own policy. Privacy policy.
  • Psychology Today (directory listings): links to my profiles go to an external site with its own privacy practices.

Nothing else loads from a third party. The site's security policy restricts browsers to exactly these services, so no analytics or advertising script can load even by accident.

7. How Long Information Is Kept

  • Contact-form submissions and email: kept until your inquiry is resolved, plus up to 12 months for follow-up, then deleted or archived.
  • Server logs: retained by Cloudflare on its default schedule. I do not extend it.
  • Clinical records for actual clients are kept separately, for the period required by state law and licensure rules, as described in the Notice of Privacy Practices. That retention is longer and governed by different rules.
  • Information may be kept longer where the law requires it or to resolve a dispute.

8. Security, and the Limits of Email and Forms

The site is served over HTTPS, and every service it uses supports encryption in transit. Still, no method of sending or storing data over the internet is completely secure.

The contact form is not a secure channel for health information. Submissions travel through FormSubmit and arrive in a standard Gmail inbox. That path does not meet HIPAA's requirements for protected health information. Please do not include diagnoses, medications, detailed history, or other sensitive clinical details in the contact form or in unencrypted email. A name, a phone number, and "I would like to schedule" is plenty. Checking the acknowledgment box on the form confirms you understand this. If you need a secure channel, call (775) 990-9846 or wait for your first session, where communication is protected under HIPAA.

9. Children's Privacy

This website is not directed to children under 13, and I do not knowingly collect information from anyone under 13. My practice serves adults. If you believe a minor has submitted information through this site, email thomasjoneslcsw@gmail.com and it will be deleted promptly.

10. Your Rights and Choices

Whatever state or country you live in, you can ask me to tell you what information I hold about you from this website, correct it, or delete it, by emailing thomasjoneslcsw@gmail.com. I may need to confirm your identity first, for example by matching details from your original message. Specific laws add the following:

  • California (CCPA / CPRA): the rights to know, delete, correct, opt out of "sale" or "sharing," limit use of sensitive information, and not be discriminated against for exercising those rights. I do not sell or share personal information. Requests are answered within 45 days.
  • Nevada (NRS 603A): the right to direct that covered information not be sold. I do not sell covered information. Requests are answered within 60 days.
  • EU, UK, and Switzerland (GDPR and UK GDPR): the rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to your data protection authority. The legal bases for processing are your consent when you contact me and my legitimate interest in replying and keeping the site secure. Data is processed by the U.S. vendors named in Section 6.

11. "Do Not Track" and Global Privacy Control

Some browsers send a Do Not Track or Global Privacy Control signal. Because this site runs no trackers, there is nothing to switch off in response. If a tracker is ever added, valid opt-out signals will be honored.

12. Links to Other Sites

This site links to outside websites, including Alma for booking, Psychology Today, and the organizations on the Resources page. I am not responsible for their privacy practices or content. Please review their policies before entering information on them.

13. How to Contact Me About Privacy

To exercise any right described above or to ask about this policy:

Thomas A. Jones, LCSW, LCADC
Email: thomasjoneslcsw@gmail.com
Phone: (775) 990-9846

I answer verified requests within the time the applicable law allows, and usually much sooner.

14. Changes to This Policy

If the site's practices change, for example if a cookie-free analytics tool or a spam-check service is added, this policy will be updated before the change takes effect, and the "Last reviewed" date and version number at the top of the page will be revised.

For clinical privacy (how your health information is used and disclosed in treatment), see the HIPAA Notice of Privacy Practices, which is also provided at your first session. See the Terms of Use and Accessibility Statement for the other site policies.
Book a Session