Who we are
Our website address is: https://goldheartcounseling.com. Gold Heart Counseling is sometimes referred to as GHC.
What personal data we collect and why we collect it
Comments
GHC does not allow for comments on its site.
Contact forms
We use forms on the website to streamline client intake. That information is collected and protected by HIPAA compliant services. Your information will never be shared with anyone outside of Gold Heart Counseling unless you allow it for therapeutic reasons.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Technical Information Collected
GHC collects visitor IP Address and browser information, including search engine referrals and a visitor’s device information (if available). This information is not directly tied to you, and is only used to manage the flow of traffic on the site and to better understand how our visitors are reaching us and what device/browser they are using.
How long we retain your data
Information collected for therapeutic reasons will be kept according to our office policy for document retention. Technical information collected on the site typically expires after a month or two.
Where we send your data
Your data may be routed through services that GHC contracts with. Those services transfer your information in an encrypted format, and have signed Business Associate Agreements in accordance with HIPAA standards.
Your contact information
Our phone number may be found at the top of this page. For technical questions about the website, please contact the web designer.
Additional information
How we protect your data
We use SSL encryption across the site to protect your access to the website and to ensure that any information submitted to GHC is protected. We only contract with outside vendors who are HIPAA compliant and encrypt your data.
What data breach procedures we have in place
We keep regular backups of the website, and store client information separately from the website itself. Your personal files and information will not be stored on the website host’s server. In other words, if the website is compromised, your data will not be affected.
Third-Party Integrations
This website was built on the WordPress Platform, using the GeneratePress Theme. The Elementor page builder was used to construct most of the pages on this website. Several plugins make running this site possible. Each plugin has their own information regarding data protection and privacy policies. We encourage you to visit the plugin developers’ websites for additional information about how these plugins interact with your data. Generally, the plugins are used for website function and not data storage or transmission. The only plugin that does handle data transmission is the HIPAA Forms for WordPress plugin.
Here is a list of all plugins used (as of May 2020):
- Black Studio TinyMCE Widget
- Caldera Forms (data transmission from forms handled by HIPAA Forms)
- Code Snippets
- Elementor
- Elementor Pro
- Font Awesome
- GP Premium
- HIPAA Forms
- Lightweight Social Icons
- Real Simple CSS
- UpdraftPlus – Backup/Restore
- WP Statistics
- All In One WP Security & Firewall