Privacy Policy

Intensive Recovery Healing

Effective Date: January 1, 2026  |  Last Updated: May 20, 2026 (rev. 2)

1) Introduction

Welcome to Intensive Recovery Healing ("IRH," "we," "us," or "our"). We respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information obtained through our website, including contact forms. By using this website, you agree to this Policy.

About Our Practice: We are a counseling practice specializing in treating sex and porn addiction, partner betrayal trauma, sex/porn addiction-related intimacy anorexia, and general trauma using evidence-based therapeutic approaches including EMDR, Brainspotting, accelerated resolution therapy, somatic experiencing, safe-and-sound protocol, and deep brain reorienting. We offer one-to-one counseling and coaching, recovery groups and workshops, disclosure guides, and 3-5 day therapeutic intensives.

Note: Our website may link to a separate practice management site operated by the provider. That system may collect and retain credit or billing information when you schedule services. It is isolated from this website and governed by its own privacy/security terms.

2) Information We Collect

We collect information you provide directly, including:

• Contact details: name, email address, optional phone number.
• Message content: information you include in the message field (please avoid sharing sensitive or confidential details).
• Phone call and voicemail data: When you call our practice phone number, our phone system automatically receives your caller phone number (caller ID) and, if provided by your phone carrier, your name (CNAM). If you leave a voicemail, the audio recording and a machine-generated text transcription are retained. This information is used solely to return your call and notify the appropriate staff member.
• Anonymous site usage data: We use a self-hosted, privacy-focused analytics platform (Umami) to understand how visitors use our website. See Section 3 — Cookies & Analytics for details.

Email Distribution: When you submit any contact form on the site, you will be added to our email distribution list. All emails will be sent from "Intensive Recovery Healing" and will include an opt-out link.

Form Data Usage: Information collected via contact forms is securely stored for up to 30 days to support staff follow-up, then automatically deleted. It is used solely to inform the relevant Intensive Recovery Healing staff members and will not be shared or retained beyond that period.

We do not collect payment information on this website under any circumstances. We do not collect, store, or process credit card information. If you schedule services, you may be redirected to a separate practice management system that handles payment data independently.

3) Cookies & Analytics

Cookies

Our website uses a small number of cookies that are strictly necessary for security and basic functionality. We do not use advertising cookies, marketing cookies, or third-party tracking cookies.

All cookies are set as HttpOnly (not accessible to JavaScript) and Secure (transmitted only over HTTPS). They are scoped to this site only and do not follow you across other websites. None contain personal information.

Because all cookies on this site are strictly necessary for security and functionality, no cookie consent banner is required or displayed. You may disable cookies in your browser settings; doing so may prevent contact forms from functioning correctly.

Analytics

We use a self-hosted instance of Umami, a privacy-focused, open-source web analytics platform. Key privacy characteristics:

• No cookies set by the analytics script.
• No personal information collected. Umami does not track individual users across sessions or sites.
• IP addresses are not stored. Your IP address is used only to derive an approximate city and country, then immediately discarded.
• Data stays on our servers. We self-host Umami; your data is never sent to Google, Meta, or any third-party analytics provider.
• No age or gender data collected. Umami is designed as a privacy-first tool and does not collect demographic profiles.

Anonymous data Umami records includes: page URL, referring URL, browser type, device type (desktop / mobile / tablet), operating system, approximate city and country (derived from IP, which is then discarded), and session duration. This data is used to understand how visitors use our site and to improve its content and performance.

4) How We Use Information

• Respond to inquiries, provide information about our counseling services, workshops, groups, therapeutic intensives, and other resources, and operate our website.
• Route and return phone calls, notify the appropriate staff member of incoming calls and voicemails, and manage our phone system.
• Send professional updates and marketing for future events (e.g., new groups, workshops, therapeutic intensives). All emails will be sent from "Intensive Recovery Healing" and include an opt-out link. You may opt out at any time by replying STOP or using the unsubscribe instructions in our emails.
• Understand website usage and improve content and performance using anonymous analytics data.
• Maintain internal records, security, fraud and bot prevention, and compliance with law.

We will never sell your contact information to any outside party.

5) Legal Bases (for visitors where applicable)

Where required by law, we rely on one or more of the following: consent; our legitimate interests in communicating with you and operating the website; and contract performance or steps prior to a contract where applicable.

6) Disclosures of Information

We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising as defined under the California Consumer Privacy Act, as amended by the CPRA (CCPA/CPRA).

We may disclose information:

• Service providers: vendors that help us host the site, send emails, or store data (bound by contractual confidentiality and use limits). Our analytics platform is self-hosted and does not involve a third-party analytics vendor. Our phone carrier (Telnyx) transmits call data and temporarily processes voicemail recordings on our behalf in accordance with HIPAA Business Associate requirements.
• Legal/compliance: to comply with law, legal process, or protect rights, safety, or security.
• Corporate events: if we undergo a business transition (e.g., merger or reorganization), subject to applicable law.

7) Data Retention

We retain personal information only as long as needed for the purposes described or as required by law. We apply reasonable criteria (e.g., inquiry resolution, applicable limitation periods, legal obligations). You may request deletion—see Your Privacy Rights.

8) Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information, including HTTPS encryption, CSRF protection on all forms, and bot-detection measures. Voicemail recordings, voicemail transcriptions, and call records containing personal information are encrypted at rest using AES-256-GCM authenticated encryption; voicemail audio is accessible only to authenticated staff members. No method of transmission or storage is 100% secure.

9) Children's Privacy

This website is not directed to individuals under 21, and we do not knowingly collect personal information from them. If you believe a child under 21 has provided us personal information, please contact us and we will delete it.

10) Links to Other Sites

Our site may contain links to third-party websites (including the separate practice management system). Their privacy practices are governed by their own policies. We encourage you to review those policies.

11) Your Privacy Rights (U.S. State Laws)

Depending on your state (e.g., CA, CO, CT, VA, UT, and others), you may have rights to:

• Know/Access the categories and specific pieces of personal information we collected about you.
• Delete personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of certain processing (e.g., targeted advertising, sale, or profiling for significant decisions). We do not sell or share personal information for cross-context behavioral advertising.
• Non-discrimination for exercising your rights.

Do Not Track (DNT): We do not respond to browser DNT signals. Our analytics platform (Umami) does not track users across sites regardless of DNT settings. We will honor legally required opt-out preference signals if/when our processing falls within applicable requirements.

12) Email Marketing Opt-Out

You can opt out of marketing emails at any time by replying STOP or following the unsubscribe instructions provided in the email. We may still send non-marketing messages (e.g., responses to your inquiries).

13) Website Resources

Our website contains resources such as blogs, podcasts, video replays, and other related materials. These resources are provided for informational purposes only and do not constitute professional advice or create a therapeutic relationship. For specific guidance related to your situation, please contact us directly.

14) International Visitors

We are a U.S.-based provider. If you access the site from outside the U.S., you understand your information may be processed in the U.S. and other jurisdictions, which may have different data protection laws.

15) Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above indicates the most recent revision. Material changes will be posted on this page.

16) Contact Us