Effective date: November 4, 2025

Applies to: The public website for Groundwork Psychology, PLLC (“we,” “us,” “our”). This policy describes how we handle information collected on our public website (the “Site”). It does not govern protected health information (“PHI”) in the context of care; PHI is governed by our Notice of Privacy Practices (“NPP”).

This is not medical advice. Site content is informational and not a substitute for professional advice. If you have a medical or mental-health emergency, call 911.

1) Who we are & how to contact us

Groundwork Psychology, PLLC
4611 N. Ravenswood Ave
Suite 101
Chicago, IL 60640
Email admin@groundworkchicago.com • Phone: 872-240-4935
For PHI matters, please refer to the NPP (linked above).

2) What this policy covers (scope)

  • Public pages on this Site (hosted by WordPress) and embedded tools we control here.
  • Excludes external services (e.g., our EHR’s patient portal, telehealth platforms, payment pages hosted by vendors). Those services have their own privacy terms and, where PHI is involved, are covered by our NPP.

3) Information we collect on this Site (non-PHI)

We may collect:

  • Contact information you submit (name, email, phone, message).
  • Technical data (IP address, device/browser type, pages viewed, timestamps, referring URLs) generated by your browser and our hosting/analytics.
  • Cookie/usage data (see Cookies & Tracking below).

We do not intentionally collect biometric identifiers (e.g., face/voice prints) on this Site. If that ever changes, we will comply with Illinois BIPA (see §10 below).

4) How we use this information

  • To respond to inquiries and schedule with you (outside the EHR portal);
  • To operate, secure, debug, and improve the Site;
  • To understand aggregate usage (analytics) and, if enabled, to measure marketing performance;
  • To comply with law and enforce our terms.

We do not sell personal information.

5) When we share information

We share only with service providers (“processors”) that help us run the Site and deliver services, subject to confidentiality and security obligations. Typical categories:

  • Hosting/CDN, email & forms (WordPress stack, email delivery)
  • EHR patient portal & forms (Sessions Health) – PHI here is covered by our NPP
  • Telehealth (Zoom, Doxy.me) – when used for care, governed by our NPP
  • Analytics/anti-abuse (e.g., Google Analytics, reCAPTCHA) if enabled

Illinois PIPA also requires reasonable security measures and those measures must flow down to vendors that handle personal information. Our vendor contracts include those obligations.

6) Cookies & tracking technologies (website only)

We may use cookies, pixels, and similar technologies to keep the Site secure, remember preferences, and understand usage. You can control cookies via your browser and (if we deploy it) our Cookie Settings tool.

Important for HIPAA-regulated providers: Industry guidance on tracking technologies has been evolving; we avoid configuring trackers on pages or forms where PHI could be collected, and we work to prevent PHI from being sent to analytics/ads tools.

Do Not Track (DNT): Browsers send DNT signals inconsistently; we currently don’t respond to DNT. You can still use browser settings or our Cookie Settings to control tracking.

7) Your choices

  • Marketing emails (if offered): you can unsubscribe anytime via the email footer.
  • Cookies: adjust in your browser or via Cookie Settings (if deployed).
  • Access/Deletion requests: While CCPA generally applies to certain California-threshold businesses, you can always email us with privacy questions or requests; we’ll respond as appropriate for our obligations and operations.

8) Children’s privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it.

9) Security; retention & disposal

We maintain reasonable security measures designed to protect personal information we handle through the Site and require similar measures of our vendors. We retain website-collected information only as long as needed for the purposes above, then dispose of it securely. Illinois law requires reasonable security and sets disposal standards that render personal information unreadable, unusable, and undecipherable.

10) Illinois-specific disclosures

A) Personal Information Protection Act (PIPA)

If a breach of security compromises personal information of Illinois residents, we will notify affected individuals without unreasonable delay (subject to law-enforcement holds) and, if a single incident requires notice to more than 500 Illinois residents, we will also notify the Illinois Attorney General with the required details.

B) Data security & disposal

We implement and require “reasonable security measures” and follow Illinois disposal rules for materials containing personal information (including contracting with qualified disposal vendors when used).

C) Biometric Information Privacy Act (BIPA)

We do not collect biometric identifiers or information on this Site. If we begin to collect them in the future, we will first publish a publicly available retention/destruction policy and obtain written (including electronic) consent; we will not sell or profit from biometric data.

11) Third-party links & embedded content

Our Site may link to or embed third-party services (e.g., patient portal, telehealth, maps). Those services have their own privacy practices; review them before use.

12) Changes to this policy

We’ll update this page and change the Effective date when we make material changes. Continued use of the Site after changes means you accept the updated policy. (Changes to PHI practices are handled per our NPP obligations.)

Scroll to Top