Privacy Policy

Dr. Amanda Aguilera website is owned by Dr. Amanda Aguilera LLC, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by Dr. Amanda Aguilera, which also provides the reasons why we must collect certain personal data about you. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. It also includes disclosures required by the Colorado Privacy Act (CPA) for Colorado residents and summarizes additional HIPAA-related privacy practices for therapy clients. Therefore, you must read this Privacy Policy before using Dr. Amanda Aguilera website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Personal information we collect:

When you visit the Dr. Amanda Aguilera website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” We may collect personal information that you voluntarily provide to us, including but not limited to:

● Name and contact information (email address, phone number, mailing address)

● Information provided through contact forms, appointment requests, or consultations

● Payment and billing information for services

● Communication preferences and feedback

● Scheduling details, intake information, and session notes/records related to psychotherapy and/or coaching services

How we use your information:

We use the information we collect to:

● Provide and maintain our services (psychotherapy, coaching, consulting, speaking)

● Schedule and manage appointments, telehealth sessions, and client communications

● Deliver psychotherapy and/or coaching services, including maintaining client records and session notes

● Process payments and billing

● Operate, secure, and troubleshoot our website and online services

● Perform analytics to understand website usage and improve services

● Respond to your inquiries and provide customer support

● Send newsletters and marketing communications (with your consent)

● Comply with legal, ethical, and regulatory obligations

Why do we process your data?

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via hello@amandaaguilera.com.

HIPAA and Therapy Client Information

For therapy clients, we maintain strict confidentiality in accordance with:

● Health Insurance Portability and Accountability Act (HIPAA)

● Colorado state laws and regulations

● Professional ethical standards for registered psychotherapists

Therapy client information (protected health information or PHI) is subject to additional protections and is handled separately from general website visitor information. We use secure practice management and telehealth platforms subject to appropriate agreements, limit access to PHI, and follow HIPAA-related procedures for privacy and security. Limits to confidentiality apply where required or permitted by law (for example, suspected abuse or neglect, serious and imminent risk of harm to self or others, a valid court order, or as otherwise permitted by law). Detailed privacy practices for therapy clients are provided in our Notice of Privacy Practices.

Colorado DORA Compliance and Client Rights

● Provider status: Amanda Aguilera is a Registered Psychotherapist in Colorado; registration is not licensure under Colorado law.

● DORA Registration #: NLC.0013843

● Client rights under Colorado law include: the right to receive information about methods of therapy, techniques used, and fees; the right to consent to or refuse services; the right to a second opinion and to terminate therapy at any time; and the right to confidentiality with the legal exceptions noted above.

● Mandatory disclosure and confidentiality: You will receive information about credentials, services offered, and limits of confidentiality at or before the first session. Confidentiality may be broken only as required or permitted by law (e.g., when there is suspected abuse or neglect, imminent danger to yourself or others, or by court order).

● Grievances/complaints: You may file a complaint with the State of Colorado at:

Colorado Department of Regulatory Agencies (DORA) Division of Professions and Occupations 1560 Broadway, Suite 1350 Denver, CO 80202 Phone: (303) 894-7800 Website: https://dora.colorado.gov/professions/psychology

Your Rights and Choices

You have the right to:

● Confirm whether we process your personal data and access it

● Correct inaccuracies in your personal data

● Request deletion of your personal data

● Request a copy of your personal data in a portable format (data portability)

● Restrict or object to certain processing activities, including opting out of targeted advertising, sale of personal data, and certain profiling (where applicable)

● Opt-out of marketing communications

● Withdraw consent where processing is based on consent

● Appeal a decision if we deny your request

To exercise these rights, please contact us using the information provided below. For Colorado residents, we will respond to your request within 45 days and may extend the response period once by an additional 45 days when reasonably necessary. We may ask you to verify your identity before acting on your request. We will not discriminate against you for exercising your privacy rights.

Your rights- European Residents:

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.

Data Security

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. We implement appropriate technical and organizational security measures to protect your personal information, including:

● Secure data transmission (SSL/TLS encryption)

● Role-based restricted access to personal information

● Encryption at rest where available

● Use of reputable vendors and appropriate agreements for PHI

● Regular security assessments and updates

● Secure storage and backup procedures

● Staff training and incident response practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

● Remember your preferences and settings

● Analyze website traffic and usage patterns (analytics)

● Improve website functionality and performance

You can control cookie settings through your browser preferences or available cookie controls on our site. Disabling cookies may affect website functionality.

Third-Party Services

Our website may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Colorado Privacy Act (CPA) Notice

● Controller: Dr. Amanda Aguilera is the controller of personal data collected via this website and related services, except where HIPAA applies to therapy-related protected health information (PHI).

● Categories of personal data: names and contact details; scheduling and communications; session notes and records; billing and payment information; device and usage data; cookies/analytics data.

● Purposes of processing: scheduling and communications; providing psychotherapy/coaching and related services; billing and payments; website operation, security, and analytics; and legal compliance.

● Categories of third parties with whom data is shared: service providers and processors needed to run our business (e.g., payment processors; practice management/EHR and telehealth platforms; scheduling tools; web hosting, email/SMS, and analytics providers; and professional advisors). These third parties are subject to confidentiality and security obligations.

● Sale/targeted advertising: we do not sell personal data and we do not process personal data for targeted advertising as defined by the CPA.

● Retention: we keep personal data only as long as needed for the purposes above, to comply with legal obligations, and as allowed by professional standards.

● Appeals: If we deny your request, you may appeal by replying to our response or contacting [your email address] with "CPA Appeal" in the subject. If your appeal is denied, you may contact the Colorado Attorney General.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our website after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Dr. Amanda Aguilera

Email: hello@amandaaguilera.com,

Phone: 720-734-7311,

Address: 6275 Joyce Drive, Ste 221, Arvada, CO 80403

To submit a data/privacy request (including CPA requests), contact us using the information above and include "CPA Request" in your subject line or message.

For therapy-related privacy concerns or complaints, you may also contact: Colorado Department of Regulatory Agencies (DORA) Division of Professions and Occupations 1560 Broadway, Suite 1350 Denver, CO 80202 Phone: (303) 894-7800 Website: https://dora.colorado.gov/professions/psychology

Consent

By using our website and services, you consent to the collection and use of your information as described in this Privacy Policy.