Privacy Policy

Section 1

What this covers

This policy applies to www.drrobertjaffe.com and to the assessments, forms, waitlists, purchases, and communications offered through it by Robert B. Jaffe, PhD ("Dr. Jaffe," "we," "us"). It does not replace the separate confidentiality protections that apply once you become a therapy client; those are described in Section 7 and in the consent documents you sign at intake.

Section 2

What we collect

What you give us

What's collected automatically

Like most websites, this one records basic technical information when you visit: IP address and approximate location, browser and device type, pages viewed, and the site or search that brought you here. This comes from Squarespace's built-in analytics and any analytics tools described in Section 8.

Section 3

Assessments and your answers

The free Snapshot. Your first name and email are collected before the assessment begins so we can give you access to your results and, if you choose, send you occasional notes. Your answers are scored to produce the result you see on screen. Your pattern scores may be kept with your name and email so that, if you later book a paid assessment or consultation, Dr. Jaffe can see your starting point. They are not used for anything else.

Paid assessments. Your answers and the report they generate are sent to Dr. Jaffe so he can prepare for your Results Review. Some paid assessments include optional narrative questions about your history; you may skip any of them. They are read only by Dr. Jaffe.

What we never do with answers. We do not use your pattern results or answers to build advertising audiences, to target you with ads, or to segment marketing emails by pattern. We do not put pattern labels in email subject lines. We do not sell or share answers with anyone.

Assessments are not clinical records. Unless and until you become a therapy client, assessment data is held as business information, not as a medical record, and is not covered by therapist-client privilege.

Section 4

How we use information

• To deliver what you asked for. Showing your result, preparing your report, booking your review, answering your message, adding you to the waitlist.
• To run the practice. Scheduling, reminders, receipts, superbills, and records we're required to keep.
• To send you email you've agreed to. Only if you ticked the box (Section 5).
• To understand how the site is used. Which pages people visit, where they arrive from, and where they leave, in aggregate.
• To meet legal obligations. Including mandatory reporting duties that apply to a licensed therapist, and responding to lawful requests.
• To keep the site safe. Detecting spam, fraud, and abuse.

Where privacy law requires a legal basis (California's CCPA/CPRA, and the GDPR for visitors in the EU or UK), we rely on: performance of a contract, your consent, our legitimate interest in running and improving the site, and compliance with legal obligations.

Section 5

Email and consent

Every form on this site that collects your email has a separate, clearly labeled checkbox for marketing and educational emails. If you don't tick it, you'll receive only the thing you asked for: your results, a reply to your message, a receipt, or program waitlist updates.

If you do tick it, you may receive occasional notes from Dr. Jaffe, article announcements, and program news. Every such email has an unsubscribe link. Unsubscribing doesn't affect any service you've purchased.

We record when and where you gave consent, and which version of this policy was in effect, so we can honor your choice.

Section 6

Who handles your data

We do not sell, rent, or trade personal information. The following services process it on our behalf to run the site:

Each of these is bound by its own privacy terms and by our agreement with it not to use your data for its own purposes.

We may also disclose information when the law requires it, to prevent imminent harm to you or someone else, or if the practice is ever transferred to a successor, in which case you'll be told.

Section 7

Therapy records

Once you become a therapy client, information you share is protected by California law, including the Confidentiality of Medical Information Act, and by federal law where it applies. Dr. Jaffe does not disclose it without your written consent, except where the law requires: imminent risk of harm to you or others, suspected abuse of a child, elder, or dependent adult, and court orders. These exceptions are explained in full at intake.

Coaching, group programs, and assessments are not therapy. Information from them is handled with care but is not protected by therapist-client privilege. Group participants are asked to keep what others share confidential; we can't guarantee what other participants do.

Section 8

Cookies and analytics

The site uses cookies for two things: to make the site work (for example, remembering your cart) and to measure how it's used. Squarespace's built-in analytics run by default. If we add another analytics tool, we'll name it here.

We do not use advertising or retargeting cookies. You can block cookies in your browser; the site will still work, though the cart may not. We don't respond to "Do Not Track" signals because there's no agreed standard for them.

Section 9

How long we keep it

• Therapy records: at least seven years after the last session, as California law requires.
• Paid assessment answers and reports: two years after your Results Review, unless you become a client, in which case they join your record.
• Free Snapshot data and waitlist signups: until you ask us to delete it, or three years after your last interaction with us.
• Messages sent through the site: two years.
• Email list: until you unsubscribe or ask to be removed.
• Purchase records: as long as tax and accounting rules require, typically seven years.

When the period ends, we delete the data or strip it of anything that identifies you.

Section 10

Security

The site is served over HTTPS. Form submissions travel encrypted. Access to submissions, reports, and the email list is limited to Dr. Jaffe and staff who need it, behind password-protected accounts.

No system is perfectly secure. Email in particular is not a secure channel, which is why we ask you not to send sensitive clinical detail through the contact form. If you believe your information has been exposed, contact us and we'll tell you what we know.

Section 11

Your rights

Wherever you live, you can ask us to:

• Tell you what personal information we hold about you and send you a copy
• Correct anything inaccurate
• Delete your information, subject to records we're legally required to keep
• Stop sending you marketing email (or just use the unsubscribe link)
• Withdraw consent you gave earlier

Write to the address in Section 15. We'll confirm your identity and respond within 30 days. There's no charge and no penalty for asking.

Section 12

California residents

Under the CCPA and CPRA, California residents have the right to know what personal information we collect and how it's used, to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising these rights.

We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front. To make any other request, use the contact details in Section 15.

Section 13

Children

This site and everything on it are for adults. We don't knowingly collect information from anyone under 18. If you believe we have, contact us and we'll delete it.

Section 14

Changes

We'll update this policy when our practices or the law change, and we'll change the effective date at the top when we do. If a change materially affects how we use information you've already given us, we'll email you if we have your address.

Section 15

Contact

Questions, requests, or concerns about your information: