All Good Things Psychological Services Professional Corporation

Privacy Policy

Last Updated: May 27, 2026 Effective Date: May 27, 2026

Overview

All Good Things Psychological Services Professional Corporation ("AGTPS," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you visit our website at allgoodthingsps.com (the "Site").

Important distinction: This Privacy Policy governs information collected through this website only. It is separate from the privacy protections that apply to your clinical records and protected health information (PHI), which are governed by:

  • The federal Health Insurance Portability and Accountability Act (HIPAA), 45 C.F.R. Parts 160 and 164

  • The California Confidentiality of Medical Information Act (CMIA), California Civil Code § 56 et seq.

  • Nevada Revised Statutes § 629.061 (confidentiality of health records)

  • Your separately provided HIPAA Notice of Privacy Practices

1. Who We Are

All Good Things Psychological Services Professional Corporation Dr. Norma Ramirez, Licensed Clinical Psychologist Licensed in California (Board of Psychology) and Nevada (Board of Psychological Examiners, NRS Chapter 641) 📧 admin@allgoodthingsps.com

2. Information We Collect Through This Website

Plain English Summary: When you visit our website, some information is collected automatically (like your browser type and which pages you visited). If you reach out to us or schedule a consultation, we collect what you share. We do not collect clinical or health records through this website.

2.1 Information You Provide Directly

When you contact us through the Site's contact form, email, or consultation scheduling portal (SimplePractice), you may provide:

  • Your name

  • Your email address

  • Your phone number

  • General information about what brought you to seek services (such as presenting concerns you choose to share)

Please do not share sensitive protected health information (PHI) via web contact forms or general email, as these channels are not HIPAA-encrypted.

2.2 Information Collected Automatically

When you visit our Site, our hosting provider (Hostinger/Zyro) and third-party tools automatically collect certain usage data, including:

  • IP address

  • Browser type and version

  • Pages visited and time spent on each page

  • Referring website

  • Device type and operating system

  • Date and time of access

2.3 Cookies and Tracking Technologies

This Site uses cookies and similar tracking technologies, including:

  • Essential/Functional Cookies: Necessary for the Site to operate.

  • Analytics Cookies (Google Analytics): Used to understand how visitors use the Site, which pages are most visited, and how we can improve the user experience. Google Analytics collects data in an aggregated, anonymized format. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

  • Advertising Cookies (Google Ads): We use Google Ads to reach potential clients. Google may use cookies to show our ads to people who have visited our Site. You can manage your Google ad preferences at adssettings.google.com.

You may instruct your browser to refuse all cookies or to notify you when a cookie is being set. Note that some features of the Site may not function properly if cookies are disabled.

3. How We Use the Information We Collect

Plain English Summary: We use your information to respond to your inquiries, understand how people use our website, and — with Google Ads — reach people who might benefit from our services. We don't sell your information to anyone.

We use the information collected through this Site to:

  • Respond to your inquiries and schedule free consultations

  • Provide you with information about our services

  • Improve the content and functionality of the Site (via Google Analytics)

  • Display relevant advertising to potential clients (via Google Ads)

  • Comply with applicable legal obligations

  • Protect the security and integrity of the Site

4. Third-Party Service Providers

Plain English Summary: A few outside companies help us run this website and our practice. Here's who they are and what they do with data.

We work with the following third-party service providers that may have access to certain Site visitor data:

ProviderPurposePrivacy InformationHostinger / ZyroWebsite hosting and builderhostinger.com/privacy-policyGoogle AnalyticsWebsite analytics (anonymized traffic data)policies.google.com/privacyGoogle AdsOnline advertising to reach prospective clientspolicies.google.com/privacySimplePracticeClient portal, scheduling, and EHR (for clients)simplepractice.com/privacy

Note on SimplePractice: SimplePractice serves as our Electronic Health Records (EHR) system and HIPAA-compliant client portal. SimplePractice is a HIPAA Business Associate. Information you submit through the SimplePractice client portal (allgoodthings.clientsecure.me) is subject to SimplePractice's privacy policy and our HIPAA Business Associate Agreement, and is governed by HIPAA — not this Privacy Policy.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

5. Clinical Records and HIPAA

Plain English Summary: Your therapy records are protected by HIPAA and California and Nevada law — not just this Privacy Policy. You will receive a separate Notice of Privacy Practices before beginning any clinical services. That document explains your rights regarding your health information in detail.

All protected health information (PHI) created or collected in connection with clinical services (individual therapy, immigration psychological evaluations) is subject to HIPAA and is handled in accordance with our HIPAA Notice of Privacy Practices, provided separately at or before the commencement of clinical services.

Your rights regarding clinical records under HIPAA include, but are not limited to:

  • The right to access and receive a copy of your health records

  • The right to request amendments to your records

  • The right to an accounting of disclosures

  • The right to request restrictions on certain uses and disclosures

  • The right to receive communications through alternative means

Additional protections are provided under:

  • California CMIA (Civil Code § 56 et seq.): Provides broader protections than HIPAA for mental health records held by California-regulated entities

  • Nevada Revised Statutes § 629.061: Prohibits unauthorized disclosure of health records by healthcare providers

  • California Evidence Code §§ 1010–1027: Establishes the psychotherapist-patient privilege in California

  • Nevada Revised Statutes § 49.225: Establishes the psychologist-patient privilege in Nevada

6. California Privacy Rights (CCPA / CPRA)

Plain English Summary: If you're a California resident, you have specific rights under California privacy law. This section covers those rights for non-clinical data we collect through this website. (Your health records are separately protected under HIPAA and CMIA.)

All Good Things Psychological Services PC is a HIPAA Covered Entity. As such, protected health information (PHI) collected in connection with clinical services is exempt from the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) per Civil Code § 1798.145(c). However, the CCPA/CPRA may apply to other personal information collected through this website (such as analytics data and advertising data not tied to PHI).

As a California resident, you may have the following rights with respect to non-PHI personal information we collect:

  • Right to Know: The right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the third parties with whom we share it.

  • Right to Delete: The right to request deletion of personal information we have collected about you, subject to certain exceptions.

  • Right to Correct: The right to request correction of inaccurate personal information.

  • Right to Opt Out of Sale or Sharing: We do not sell your personal information. We do use Google Ads, which may constitute "sharing" under CPRA. You may opt out of this sharing via adssettings.google.com or by using a global opt-out signal such as a browser-based Global Privacy Control (GPC).

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

  • Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information as defined under CPRA, you have the right to limit its use to purposes permitted by law.

To exercise your CCPA/CPRA rights, please contact us at admin@allgoodthingsps.com. We will respond to verifiable consumer requests within 45 days, as required by law.

7. Nevada Privacy Rights
Plain English Summary: Nevada residents have the right to opt out of the sale of their personal information. We don't sell personal information, but we want you to know your rights.

Under Nevada Revised Statutes Chapter 603A (Nevada Privacy of Information Collected on the Internet from Consumers Act), Nevada residents have the right to opt out of the sale of covered information. We do not sell personal information collected through this Site.

If you have questions about our Nevada privacy practices, please contact us at admin@allgoodthingsps.com.

8. Data Retention

Website analytics data collected through Google Analytics is retained according to Google's standard retention periods. Contact form inquiries are retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter, consistent with our legal obligations.

Clinical records are retained in accordance with HIPAA minimum requirements and applicable state law:

  • California: Minimum 7 years from the date of service, or until the minor patient reaches age 21, whichever is later (California Health & Safety Code § 123111)

  • Nevada: Minimum 5 years from the date of service (NRS § 629.051)

9. Data Security

Plain English Summary: We take reasonable steps to protect your information, but no system is perfectly secure. We use HIPAA-compliant tools for clinical records. Please don't send sensitive health information through unsecured email or contact forms.

We implement reasonable administrative, technical, and physical safeguards to protect the information collected through this Site. Clinical records are maintained in HIPAA-compliant systems (SimplePractice). However, no method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Do not transmit sensitive health information through unencrypted email or contact forms on this Site.

10. Children's Privacy

This Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at admin@allgoodthingsps.com and we will take steps to delete it.

11. Links to Third-Party Sites

This Site may link to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated by a prominent notice on the Site or, where feasible, by email to individuals who have contacted us. Continued use of the Site after changes constitutes acceptance of the revised Policy.

13. Contact Us

For questions or concerns about this Privacy Policy, or to exercise your privacy rights:

All Good Things Psychological Services Professional Corporation Dr. Norma Ramirez, Licensed Clinical Psychologist 📧 admin@allgoodthingsps.com

For concerns related to your clinical records or HIPAA rights, please refer to your HIPAA Notice of Privacy Practices or contact us at the above address.

This Privacy Policy applies to the website at allgoodthingsps.com. It does not modify or replace your HIPAA Notice of Privacy Practices or any clinical informed consent documentation.