PART 1: WEBSITE PRIVACY POLICY

Hearthspun Therapy Effective date: [9/30/26] Last updated: [9/30/26]

1. Who I am

Hearthspun Therapy is a counseling practice operated by Alicia Stribling, LMHCA, Washington State Credential No. MHCA.MC.70141037, under the supervision of Lilith Halpé, LH60523778.

Contact: Alicia Stribling; alicia@hearthspuntherapy.com

206-801-0737

2. Scope

This policy explains how we handle information collected through this website, hearthspuntherapy.com. Information you share with us once you become a client is protected health information and is governed by our separate Notice of Privacy Practices (Part 2 below), not this policy.

3. Information we collect

• Information you give us: your name, email address, phone number, and any message you send through our contact form, scheduling tool, or email.

• Automatically collected information: device and browser type, pages viewed, approximate location, and referring website, collected through [analytics tool, e.g., "a privacy-focused analytics service"] and cookies.

• Third-party tools: [scheduling platform], [telehealth platform], and [other tools] may collect information when you use them. Their own privacy policies apply.

4. Please don't send sensitive details

Website forms and regular email are not a secure way to share personal health information. Please limit messages to basic contact and scheduling information. Sensitive clinical information should be shared only in session or through our secure client portal.

5. How we use information

We use website information to respond to inquiries, schedule appointments, operate and improve the website, and meet legal obligations. We do not sell your information, and we do not use it for third-party advertising. [Delete or edit if you use advertising pixels; if you do, describe them here and review the My Health My Data Act issues with an attorney.]

6. Consumer health data (Washington)

Some information collected through this website could be considered consumer health data under Washington law, for example a message indicating you are seeking counseling. We collect this only to respond to you and operate the practice. We do not sell it, and we do not share it except with service providers who help us run the website and scheduling, or as you direct or the law requires. You may request access to, deletion of, or withdrawal of consent for this data by contacting us at [email]. [Attorney: confirm whether a standalone consumer health data privacy policy is needed.]

7. Cookies

This site uses cookies for [basic site function and analytics]. You can block or delete cookies in your browser settings, though some features may not work.

8. Sharing

We share website information only with service providers that support our operations, under agreements to protect it, and when required by law or to protect safety.

9. Security and retention

We use reasonable administrative and technical safeguards, but no website or email is completely secure. We keep website inquiries for [period, e.g., 12 months] unless you become a client. Client records follow the retention rules in our Notice of Privacy Practices.

10. Children

This website is not directed to children under 13, and we do not knowingly collect their information online.

11. Changes and contact

We may update this policy and will post the new date above. Questions or requests: Alicia Stribling (206)801-0737 alicia@hearthspun.com 108 S Jackson St, Seattle, WA 98104

PART 2: NOTICE OF PRIVACY PRACTICES

Hearthspun Therapy Effective date: 9/30/2026

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our duties

We are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you if there is a breach of your unsecured PHI.

How we may use and disclose your information without your authorization

• Treatment: to provide and coordinate your care. Example: consulting with another provider involved in your care, with your consent where required.

• Payment: to bill and collect for services. Example: submitting claims to your insurance company.

• Health care operations: to run the practice. Example: quality review, record keeping, and clinical supervision. I am an associate-level counselor, and my supervisor, Lilith Halpé may review your records and discuss your care with me as required for my licensure and to ensure quality.

• As required by law, including:

  • reports of suspected abuse or neglect of a child or vulnerable adult;

  • to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, including disclosures required by Washington law when a client presents a serious threat of violence;

  • court orders and other legal process;

  • health oversight activities, including investigations by the Washington State Department of Health;

  • public health, law enforcement, coroner, and other purposes permitted by law.

• Emergencies: if you are unable to consent and disclosure is in your best interest.

Uses that require your written authorization

• Psychotherapy notes (my separate process notes), except for limited uses permitted by law.

• Marketing and sale of PHI.

• Any other use or disclosure not described in this notice.

You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

Washington law

Washington law, including the Uniform Health Care Information Act and the confidentiality provisions for licensed counselors, may give your information more protection than federal law. Where state law is stricter, we follow it.

Your rights

You have the right to:

• Inspect and get a copy of your records, with limited exceptions. We will respond within the time required by law and may charge a reasonable cost-based fee.

• Request an amendment of information you believe is incorrect or incomplete. We may deny the request in certain circumstances and will explain why in writing.

• Request restrictions on certain uses and disclosures. We are not required to agree, except that we must agree to your request not to disclose information to your health plan for a service you have paid for in full out of pocket, unless the law requires otherwise.

• Request confidential communications by alternative means or at alternative locations, such as contacting you only by a specific phone number.

• Receive an accounting of certain disclosures of your PHI made in the last six years.

• Receive a paper copy of this notice, even if you agreed to receive it electronically.

• Be notified of a breach of your unsecured PHI.

Electronic communication and telehealth

Email and text are not fully secure. We will use them only for scheduling and administrative matters unless you agree otherwise in writing. Telehealth sessions use Google Meet, and we take reasonable steps to protect your privacy. You are responsible for being in a private location.

Record retention

We retain client records for at least ten years after the last session and then destroy them securely.

Changes to this notice

We may change this notice and the change may apply to information we already hold. The current version will be posted on our website and available in the office.

Questions and complaints

Privacy contact: Alicia Stribling, LMHCA | 206-80100737 | alicia@hearthspuntherapy.com | 108 S. Jackson St, Seattle, WA, 98104

If you believe your privacy rights have been violated, you may file a complaint with us using the contact details above, with the U.S. Department of Health and Human Services Office for Civil Rights (hhs.gov/ocr/complaints), or with the Washington State Department of Health (doh.wa.gov). We will not retaliate against you for filing a complaint.

# Client Confidentiality Statement

Hearthspun The

Alicia Stribling, LMHCA | Washington State Credential No. MHCA.MC.70141037

Practicing under the clinical supervision of Lilith Halpé, MA, LMHC Credential No. LH60523778

206-801-0737

Telehealth services in Washington State

Your privacy matters

What you share in counseling is private. Washington law and my professional ethics protect what you tell me, and I will not disclose information about you or your counseling without your written permission, except in the limited situations described below. This statement explains those situations so there are no surprises.

Situations where I may need to share information

1. With your written authorization. You can allow me to share information with people you choose, such as a physician, psychiatrist, school, or family member. You decide what is shared and can revoke your permission in writing at any time, except for actions already taken.

2. Abuse or neglect. I am required by law to report suspected abuse, abandonment, neglect, or financial exploitation of a child, a dependent adult, or a vulnerable adult to the appropriate authorities.

3. Serious risk of harm. If I believe you are at serious and imminent risk of harming yourself, or of seriously harming another person, I may take steps to protect safety. This can include contacting emergency services, family, or a person who is at risk, and arranging for a higher level of care. I will share only what is needed and, when possible, will talk with you first.

4. Legal proceedings. Communications in counseling are generally privileged under Washington law. However, I may be required to disclose information if a court orders it, or in limited circumstances if you place your mental health at issue in a legal proceeding. If I receive a subpoena or other request for your records, I will not release them without your written permission or a valid court order, and I will contact you first whenever the law allows.

5. Licensing and oversight. The Washington State Department of Health or another oversight authority may review records in connection with a complaint or investigation.

6. Clinical supervision. I am an associate-level counselor. As required for my licensure, I meet regularly with my supervisor, Lilith Halpé, to discuss my cases. Your information may be shared in supervision to ensure quality care. My supervisor is bound by the same confidentiality obligations I am, and I work to share only what is necessary.

7. Payment and billing. If you use insurance, I may need to share your diagnosis, dates of service, and treatment information with your insurer to process claims. Billing services I use are bound by confidentiality agreements. You may ask me what will be sent before I submit anything.

8. Medical emergencies. If you are unable to consent because of a medical or psychiatric emergency, I may share limited information with emergency responders or medical providers to help you.

Special situations

- Couples and family sessions. What each person shares in a joint session is part of the shared record. I do not agree to keep secrets between participants in a joint session. If someone contacts me individually, I may use that information to benefit the work as a whole.

- Minors. Parents or guardians generally have access to a child's treatment, but Washington law allows some minors to consent to their own outpatient counseling, which can limit access to records. We will discuss how privacy works before treatment begins.

- Legal or court-related work. Counseling is not a forensic evaluation. If you expect your records or my testimony to be involved in a legal matter, please tell me at the start so we can discuss the impact on your care.

Communication and technology

- Phone, email, and text. These are not fully secure. I use them only for scheduling and brief administrative matters unless you agree otherwise in writing. Please do not send clinical details by regular email or text. If you use them, you accept the risk of interception or exposure, for example if someone else has access to your device.

- Telehealth. I use Google Meet, which is HIPAA-compliant and has a signed business associate agreement with me. You are responsible for joining from a private location and for not recording sessions. I do not record sessions unless we agree in writing. [Edit.]

- Social media. I do not accept friend or follow requests from clients, to protect your privacy. If you choose to follow my practice page, be aware that others may see that you did.

- Chance encounters. If we see each other in public, I will not acknowledge you first, so that I don't reveal our relationship. You are welcome to greet me, and we can decide together how you'd like to handle it.

Your records

I keep a clinical record of your care. You may request access to it, and I will respond within the time required by law. You may ask me to correct errors. Records are stored securely and kept for [period, e.g., six years after the last session, or longer for minors] before being destroyed. See my Notice of Privacy Practices for full details of your rights.

## Questions and concerns

Please ask me at any time about how your information is handled. If you have a concern you'd like to raise beyond our conversation, you can contact the Washington State Department of Health (doh.wa.gov) about the complaint process for credentialed counselors.

Terms of Use

Hearthspun Therapy PLLC Website: hearthspuntherapy.com Effective date: 9/30/2026 Last updated: 9/30/2026

1. Acceptance of these terms

By accessing or using this website, you agree to these Terms of Use and to our Privacy Policy. If you do not agree, please do not use the site.

2. About the practice

This website is operated by Alicia Stribling, LMHCA, Washington State Credential No. MHCA.MC.70141037, under the supervision of Lilith Halpé, LH60523778.

Contact alicia@hearthspuntherapy.com 206-801-0737

3. No counseling relationship

Visiting this website, reading its content, or sending a message, form, or email does not create a counselor-client relationship. A counseling relationship begins only after we have completed an intake process, you have received and signed the required paperwork, and I have agreed to provide services.

4. Not for emergencies

This website, contact forms, email, and voicemail are not monitored in real time and are not appropriate for emergencies. If you are in crisis or think you may harm yourself or someone else, call or text 988 (Suicide & Crisis Lifeline), call 911, or go to the nearest emergency room.

5. Educational content only

Articles, blog posts, resources, and other materials on this site are provided for general information and education. They are not professional advice, diagnosis, or treatment, and they are not a substitute for individualized care from a qualified professional who knows your situation. Do not delay or disregard professional advice because of something you read here.

6. Privacy and communications

Please do not send sensitive personal or health information through website forms or regular email, because these are not secure. Use the contact form for basic scheduling and inquiries only. Information you submit is handled under our Privacy Policy. Once you are a client, your information is also governed by the Notice of Privacy Practices.

7. Appointments and telehealth

Scheduling, payments, and telehealth may be provided through third-party services. Your use of those services is subject to their own terms and privacy policies. Services are provided only to clients physically located in Washington State at the time of the session, unless I have confirmed otherwise in writing. Appointment, cancellation, and fee terms are in your client agreement, not on this site.

8. Accuracy and updates

I work to keep the website accurate, but information may be out of date or contain errors. I do not guarantee that content is complete or current, and I may change or remove content at any time. Information about fees, insurance, availability, and services is confirmed only when you become a client.

9. Intellectual property

The content of this website, including text, graphics, logos, and design, is owned by Hearthspun Therapy PLLC or used with permission and is protected by copyright and other laws. You may view and print material for your personal, non-commercial use. You may not copy, reproduce, republish, or distribute it without written permission, except for brief quotations with credit and a link back.

10. Acceptable use

You agree not to:

• use the site for any unlawful purpose;

• attempt to gain unauthorized access to the site or its systems;

• introduce malware or interfere with how the site operates;

• submit false, misleading, or harassing messages, or impersonate another person;

• scrape or copy the site by automated means without permission.

11. Third-party links

The site may link to other websites or resources. I do not control and am not responsible for their content or privacy practices, and a link is not an endorsement.

12. Disclaimer of warranties

The website and its content are provided "as is" and "as available," without warranties of any kind, express or implied, to the fullest extent permitted by law. I do not warrant that the site will be uninterrupted, secure, or free of errors or harmful components.

13. Limitation of liability

To the fullest extent permitted by law, [Practice Name] and [Your Name] will not be liable for any indirect, incidental, consequential, or special damages arising from your use of, or inability to use, this website or reliance on its content. This section applies to use of the website only and does not limit any duties I owe to clients in the course of professional services, or any rights you have under law.

14. Changes to these terms

I may update these terms from time to time. The updated version will be posted here with a new date, and continued use of the site after that means you accept the changes.

15. Governing law

These terms are governed by the laws of the State of Washington, without regard to conflict-of-law rules. Any dispute arising from your use of this website will be handled in the state or federal courts located in [County], Washington, unless applicable law requires otherwise. [Attorney: confirm venue and whether to add an arbitration clause.]

16. Contact

Questions about these terms: Alicia Stribling;  alicia@hearthspuntherapy.com; 208-801-0737; 108 S Jackson St, Seattle, WA, 98104

To verify my credential or learn about the complaint process for credentialed counselors, contact the Washington State Department of Health at doh.wa.gov.