Privacy Policy

Section 01

Introduction

This Privacy Policy applies to the website www.drrobertjaffe.com and all services, programs, digital products, and consultations offered by Dr. Robert B. Jaffe, PhD ("Dr. Jaffe," "we," "us," or "our"). It describes how we collect, use, store, and share personal information in connection with your use of this website and our services.

By using this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the website.

Section 02

Information We Collect

We collect information in two ways: information you provide to us directly, and information collected automatically when you use the website.

Information You Provide Directly

• Name and contact information (email address, phone number)
• Location (city and state, used to determine eligibility for therapy vs. coaching)
• Information submitted through contact forms, consultation booking requests, or intake questionnaires
• Responses to diagnostic assessments and quizzes
• Payment information (processed securely by third-party payment processors; we do not store full card details)
• Communications you send to us by email or through the website

Information Collected Automatically

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on each page, and navigation paths
• Referring website or search query that brought you to this site

This automatically collected data is gathered through cookies, web beacons, and third-party analytics tools including Google Analytics. See Section 7 for more information on cookies.

Section 03

How We Use Your Information

We use the information we collect for the following purposes:

We will not use your information for any purpose materially different from those listed above without your prior consent.

Section 04

Legal Basis for Processing

Where applicable under privacy law (including the California Consumer Privacy Act and, for international visitors, the GDPR), we process your personal data on the following legal bases:

• Contract: Processing necessary to deliver services you have purchased or requested
• Consent: Processing based on your explicit agreement, such as subscribing to email communications
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the website and preventing fraud, where those interests are not overridden by your rights
• Legal obligation: Processing required to comply with applicable law, including mandatory reporting obligations under California law

Section 05

How We Protect Your Data

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Secure, encrypted hosting infrastructure
• SSL/TLS encryption for all data transmitted through the website
• Password-protected systems with access limited to authorized personnel
• Use of HIPAA-compliant platforms for scheduling and telehealth services where applicable

Section 06

Sharing of Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information only in the following circumstances:

• Service providers: Third-party vendors who assist us in operating the website and delivering services, such as email platforms, scheduling tools, payment processors, and video conferencing providers. These vendors are contractually required to protect your data and may not use it for their own purposes.
• Legal requirements: When required by law, court order, or governmental authority, including mandatory reporting obligations under California law (e.g., duty to warn, child abuse reporting).
• Safety: When disclosure is necessary to prevent imminent harm to you or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change.

Section 07

Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns via Google Analytics
• Improve site functionality and content
• Support marketing and retargeting efforts (where applicable)

You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of certain parts of this website. For information on how Google Analytics collects and processes data, visit policies.google.com/privacy.

We do not currently respond to "Do Not Track" browser signals, as there is no uniform standard for how such signals should be interpreted.

Section 08

Therapeutic Confidentiality

Information shared within a licensed therapeutic relationship is subject to additional legal protections beyond this Privacy Policy, including the California Confidentiality of Medical Information Act (CMIA) and applicable federal regulations.

Dr. Jaffe will not disclose information from a therapeutic relationship without your written consent, except as required by law. Mandatory exceptions include, but are not limited to:

• Imminent risk of harm to yourself or others (duty to warn)
• Suspected child, elder, or dependent adult abuse
• Court-ordered disclosure

Coaching and group program relationships are not licensed therapeutic relationships and do not carry the same legal confidentiality protections, though Dr. Jaffe maintains strict professional confidentiality in all client relationships.

Section 09

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law or professional obligation.

• Therapy and clinical records: Retained for a minimum of 7 years following the last date of service, or longer as required by California law.
• Coaching and program records: Retained for 3 years following the conclusion of services.
• Email and marketing data: Retained until you unsubscribe or request deletion.
• Website analytics data: Retained in accordance with Google Analytics default retention settings (26 months).

When data is no longer needed, it is securely deleted or anonymized.

Section 10

Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to legal and professional retention obligations
• Restriction: Request that we limit how we use your information in certain circumstances
• Portability: Request a copy of your data in a portable, machine-readable format
• Objection: Object to certain types of processing, including direct marketing
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the information in Section 16. We will respond to verified requests within 30 days.

Section 11

Email Communications

If you subscribe to our email list or opt in to receive communications, you may receive newsletters, program updates, resources, and promotional content. You can unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

We do not send unsolicited commercial email. All marketing communications are sent only to individuals who have explicitly opted in.

Section 12

Third-Party Links

This website may contain links to external websites, including scheduling platforms, professional directories, and social media profiles. These links are provided for your convenience. We are not responsible for the privacy practices or content of those sites and encourage you to review their individual privacy policies before providing any personal information.

Section 13

Children's Privacy

Our general website and services are intended for adults. We do not knowingly collect personal information from children under the age of 13. Where adolescent therapy services are offered, parental or guardian consent is required, and information is handled with heightened care in accordance with applicable law.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take prompt steps to delete that information.

Section 14

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
• The right to delete personal information we have collected, subject to certain exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
• The right to non-discrimination for exercising your privacy rights

To submit a California privacy rights request, please contact us using the information in Section 16. We will verify your identity before processing any request.

Section 15

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Effective Date" at the top of this page. Your continued use of the website after any changes constitutes your acceptance of the updated policy.

We encourage you to review this page periodically to stay informed of how we handle your information.

Section 16

Contact

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: