
Privacy policy
Effective Date: March 1, 2026
Lotus Therapy is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy describes how information is collected, used, stored, and protected in a licensed mental health private practice located in California.
-
Commitment to Confidentiality Protecting your privacy is a fundamental part of therapy. As a licensed mental health professional in the State of California, I am legally and ethically required to maintain the confidentiality of your information in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA) and California privacy laws. Information shared in therapy is confidential and will not be disclosed without your written authorization, except in specific situations required or permitted by law.
-
Information Collected Lotus Therapy may collect the following types of information:
-
Personal identifying information (such as name, contact information, date of birth)
-
Clinical and mental health information shared during therapy
-
Appointment scheduling and payment information
-
Communications via phone, email, text message, or secure client portals Lotus Therapy is a private-pay practice and does not accept or bill health insurance.
-
-
How Your Information Is Used Your information is used solely for purposes related to providing mental health services, including:
-
Assessment, diagnosis, and treatment
-
Scheduling appointments and managing the therapeutic relationship
-
Payment processing and practice operations
-
Legal, ethical, and professional compliance
Your information is not used for marketing purposes and is never sold or shared with third parties for commercial use.
-
-
Confidentiality and Legal Exceptions While confidentiality is a core part of therapy, there are limits required by law. Information may be disclosed without your authorization in the following circumstances:
-
If there is a risk of serious harm to yourself or others
-
Suspected abuse or neglect of a child, dependent adult, or elder (mandated reporting)
-
Court orders, subpoenas, or legal proceedings requiring disclosure
-
Professional consultation or coordination of care, when permitted by law or with your written consent
-
-
Communication and Electronic Privacy Electronic communications such as email and text messaging are used for administrative purposes (e.g., scheduling) and may not be fully secure. While reasonable safeguards are used, confidentiality cannot be guaranteed for these forms of communication. By choosing to communicate electronically, you acknowledge and accept these risks. Clients may request alternative methods of communication at any time.
-
Telehealth Services and Consent Lotus Therapy offers telehealth services using HIPAA-compliant platforms, including the SimplePractice client portal and video services. Telehealth sessions are held to the same standards of confidentiality and professional care as in-person therapy. By participating in telehealth services, you acknowledge and consent to the following:
-
Telehealth involves the use of electronic communications to enable healthcare services
-
There are potential risks to confidentiality due to technology limitations or security breaches
-
You are responsible for ensuring privacy on your end, including using a private location and secure internet connection
-
Telehealth may not be appropriate for all clinical situations
-
You may withdraw consent for telehealth services at any time.
-
Client Portal (SimplePractice) Lotus Therapy uses SimplePractice, a secure, HIPAA-compliant electronic health record (EHR) and client portal system, to manage scheduling, documentation, telehealth sessions, forms, and billing. Information stored in SimplePractice is protected through encryption, secure servers, and access controls. While no system can guarantee absolute security, SimplePractice follows industry standards designed to protect client information. Clients are responsible for maintaining the security of their login credentials and for accessing the portal from secure devices.
-
Data Storage, Retention, and Security Client records are maintained securely in compliance with California law and professional standards. Safeguards may include:
-
Secure electronic health record systems
-
Password-protected and encrypted devices
-
Limited access to client information Records are retained for the length of time required by California law and licensing regulations and are then securely destroyed.
-
-
California Privacy Rights Under California law, you have additional privacy rights, including the right to:
-
Access and receive a copy of your health records
-
Request amendments to your records
-
Request restrictions on certain disclosures, when permitted by law
-
Receive an accounting of disclosures
-
File a complaint if you believe your privacy rights have been violated Lotus Therapy does not sell personal information and does not share personal data for commercial purposes.
-
-
Website Use and Cookies
-
This website may collect limited, non-identifying information such as browser type, pages visited, or general location for basic website analytics. This information is used solely to improve website functionality and user experience. Lotus Therapy does not knowingly collect personal or protected health information through the website without your consent.
-
-
Links to Other Websites This website may contain links to third-party websites. Lotus Therapy is not responsible for the privacy practices or content of external sites. You are encouraged to review the privacy policies of any linked websites.
-
Changes to This Privacy Policy This Privacy Policy may be updated as laws or practice policies change. Updates will be posted on this page with a revised effective date.
-
Contact Information If you have questions about this Privacy Policy or how your information is handled, please contact:
Lotus Therapy
949.881.9106
contact@lotustherapyca.com
This Privacy Policy is provided for informational purposes and does not replace the Notice of Privacy Practices required under HIPAA, which is provided to clients as part of the intake process.

