In this document
This policy explains how Kyle W McEvoy MH Counseling PC (the "practice"), operated by Kyle W. McEvoy, handles personal information collected through this public website and its inquiry and newsletter features. It does not replace the practice's separate Notice of Privacy Practices for clinical health information.
Scope and responsible practice
This policy applies to the public website and information collected through it. It does not govern information collected directly through the client portal, during intake, in treatment, or through another clinical workflow. Those records are handled under the Notice of Privacy Practices, applicable federal and state law, and the practice's clinical policies.
The fact that information arrives through a public website does not, by itself, determine whether it is protected health information. The practice applies any privacy obligations that are legally applicable to information it receives. Questions about this policy may be directed to kyle@kylewmcevoy.com.
Information you choose to provide
When online delivery is available, the inquiry form is deliberately limited to contact and logistical information needed to review a preliminary inquiry. It asks for:
- Your name and email address
- A phone number, if you choose to provide one
- Whether the inquiry concerns therapy or professional advisory work
- Your current state or other location
- Your preferred service format
- Your confirmation that the inquiry is not urgent or an emergency
The form has no narrative field and does not accept attachments. Please do not submit diagnoses, symptoms, treatment history, medical records, or other clinical details. A hidden spam-detection field is also present; information entered into that field is used to identify likely automated submissions.
Online inquiry delivery is not currently enabled. The visible fields are inactive and are not submitted to the practice from this website.
Technical information processed automatically
When you visit the site, the hosting and network infrastructure may process standard request and device information, including an IP address, requested URL, date and time, browser or device characteristics, referral information, security signals, and routing or diagnostic data. This information is used to deliver, protect, troubleshoot, and maintain the site.
The site is hosted and delivered through Cloudflare. Cloudflare describes the information it processes for customers' end users in its privacy policy.
How the practice uses website information
The practice may use website information to:
- Review and respond to an inquiry
- Assess availability, requested format, and jurisdictional eligibility
- Arrange an initial consultation when appropriate
- Send the newsletter when a visitor affirmatively subscribes
- Operate, secure, diagnose, and improve the website
- Prevent spam, fraud, misuse, or other security incidents
- Maintain appropriate business records and comply with legal obligations
- Establish, exercise, or defend legal rights
The practice does not sell or rent website visitors' personal information, does not use it to build advertising profiles, and does not disclose it for cross-context behavioral advertising.
Service providers and other disclosures
Information may be disclosed only as reasonably necessary for the purposes described in this policy, including to the following categories of recipient:
- Cloudflare, which provides hosting, network delivery, and security services and processes site requests.
- Google Workspace, which hosts the practice's business email. The website's online inquiry-delivery connection is currently inactive. See Google's privacy policy.
- Buttondown, which manages newsletter subscriptions and delivery as described below.
- Professional advisers, insurers, regulators, courts, law enforcement, or other persons when disclosure is authorized, reasonably necessary to protect rights or safety, or required or permitted by law.
- A successor or participant in a merger, financing, reorganization, or sale of all or part of the practice, subject to applicable confidentiality and legal requirements.
Service providers may process information in the United States or other locations where they or their subprocessors operate, subject to their agreements and privacy practices.
Cookies, analytics, and tracking
As of the date above, the practice has not configured advertising pixels, session-replay software, or third-party behavioral analytics on the public site. The site does not intentionally set cookies for advertising or audience measurement.
Cloudflare may set strictly necessary cookies when particular security, challenge, rate-limiting, or traffic-management features are invoked. These are operational cookies, not practice advertising cookies. Cloudflare explains when its cookies may be used in its cookie documentation. You can manage cookies through your browser, although blocking necessary cookies may affect site access or security features.
Newsletter
Newsletter subscription is optional and separate from requesting care. When you subscribe, Buttondown processes your email address and subscription metadata, such as IP address, referral information, and subscription time. Depending on the newsletter settings and how you interact with a message, Buttondown may also process email-client information and open or link-click events. It describes these practices in its privacy policy and data processing agreement.
The practice uses subscription information to send occasional editorial and practice-related emails. Every marketing message must provide a working way to unsubscribe. You may opt out at any time; an opt-out does not prevent necessary one-to-one or service-related communication.
Security and sensitive information
The practice uses reasonable administrative and technical measures intended to protect website information. No internet transmission, email service, or storage system can be guaranteed to be completely secure, however. The inquiry form, when available, and ordinary email are not intended for medical records or detailed clinical communication.
For existing clients: use the Client Portal for forms, scheduling, and clinical communication. Do not use the public inquiry form for urgent or emergency concerns.
Retention
The practice retains inquiry information only for as long as reasonably necessary to respond, manage the potential or resulting relationship, maintain appropriate records, protect the practice and website, and meet legal obligations. The applicable period depends on the nature and outcome of the inquiry.
Newsletter subscription information is retained while the subscription is active and afterward only as reasonably necessary to honor an unsubscribe request, maintain suppression records, resolve disputes, or comply with law. Clinical records follow separate retention requirements and are not governed by this website policy.
Children and adolescents
The public site is directed to adults and is not designed to collect personal information directly from children under 13. A person under 18 should not submit the inquiry form or subscribe to the newsletter without the involvement of a parent or legal guardian. An adult inquiring about care for a minor should provide only the minimum contact and logistical information needed for an initial response. Consent, caregiver involvement, and confidentiality in treatment are addressed through the clinical intake process and applicable law.
Clinical privacy, telehealth, and location
Clinical intake, records, billing, and treatment communications are maintained through the practice's clinical systems, including SimplePractice, and are addressed in the Notice of Privacy Practices. A website inquiry does not create a therapist-client relationship.
Telehealth eligibility depends on the client's physical location at the time of each session, the provider's applicable licensure or other authorization, clinical appropriateness, and other legal requirements. Listing a state or service format on the site does not guarantee eligibility or availability.
Your choices, requests, and contact
You may choose not to submit a form, may unsubscribe from the newsletter at any time, and may ask the practice to access, correct, or delete website information associated with you. The practice may need to verify a request and may retain or decline to change information when permitted or required by law, needed for security, or necessary for appropriate records.
Depending on where you live, applicable law may provide additional rights. To make a website-privacy request or ask a question, email kyle@kylewmcevoy.com. Requests involving clinical records or protected health information are handled under the Notice of Privacy Practices. Material changes to this policy will be reflected by a revised date on this page.