This website does not use Google Analytics, advertising pixels, or behavioral advertising. Google Sites and embedded Google services may use cookies necessary to provide their features.
This website does not use Google Analytics, advertising pixels, or behavioral advertising. Google Sites and embedded Google services may use cookies necessary to provide their features.
Effective date: July 10, 2026
Yvette Lawhorn, PLLC (“the Practice,” “we,” “us,” or “our”) respects the privacy of visitors to www.yvettelawhorn.com (“the Site”). This Website Privacy Policy explains how information may be collected, used, stored, and disclosed when you visit or interact with the Site.
This policy applies only to information collected through the public Site, including information submitted through website contact, consultation, inquiry, or scheduling features.
This policy does not govern information maintained in a clinical record, client portal, billing record, insurance record, or psychotherapy record. Information maintained as part of a clinical relationship is governed by the Practice’s Notice of Privacy Practices, informed-consent documents, record-retention policies, and applicable law.
The Site and its general contact forms are not intended for emergencies, crisis communications, or the transmission of detailed or highly sensitive clinical information. Do not use the Site to request emergency assistance. In an emergency, call 911, go to the nearest emergency department, or call or text 988 to reach the Suicide & Crisis Lifeline.
The Site is created and hosted using Google Sites through Google Workspace.
The Site’s domain name is registered or managed through Squarespace. Squarespace’s role is generally limited to domain registration, domain-account administration, and Domain Name System (“DNS”) services. Squarespace does not receive website form submissions solely because it manages the domain.
Google and Squarespace may independently collect and process certain technical information when providing their services. Their handling of information is also governed by their respective privacy policies and terms.
When you visit the Site, Google and other service providers involved in operating or securing the Site may automatically receive technical information such as:
Your Internet Protocol address;
Approximate location derived from your IP address;
Browser type and version;
Device type;
Operating system;
Language and regional settings;
Date and time of access;
Referring website or page;
Pages or Site features accessed;
General website activity;
Cookie identifiers or similar technical identifiers; and
Information used to detect fraud, spam, abuse, or security threats.
The Practice may not have direct access to all technical information collected by Google, Squarespace, internet-service providers, DNS providers, or other infrastructure providers.
This information may be used to deliver the Site, maintain security, troubleshoot technical problems, prevent abuse, understand general Site operation, and comply with legal obligations.
Google Sites may use cookies or similar technologies that are necessary for website functionality, security, language preferences, accessibility, or other Google services.
The Practice does not currently use Google Analytics, Meta Pixel, advertising cookies, remarketing tags, or other tools intended to track visitors across unrelated websites for targeted advertising.
Embedded or linked third-party content may operate under the third party’s own privacy and cookie practices. Examples may include embedded maps, videos, forms, calendars, scheduling tools, or client-portal links.
You can control or delete cookies through your browser settings. Your browser may also allow you to block third-party cookies, clear browsing information, use private-browsing mode, or manage site-specific permissions. Blocking cookies may affect how certain Site features work.
The Practice does not control cookies or tracking technologies placed independently by Google or by a third-party service that you choose to access.
You may voluntarily provide information when you:
Send an email;
Complete a contact or consultation form;
Request information about services;
Ask to be contacted;
Request an appointment;
Join a waitlist;
Submit scheduling preferences; or
Use a scheduling or client-portal link.
Depending on the feature used, submitted information may include:
Your name;
Email address;
Telephone number;
Preferred method of contact;
General reason for contacting the Practice;
Scheduling availability;
Whether you are seeking individual, couples, or family services;
Insurance or payment-related questions;
Referral source; and
Any other information you voluntarily include.
Please provide only the information reasonably necessary for the Practice to respond. Do not submit Social Security numbers, payment-card information, copies of identification, detailed medical histories, extensive clinical information, or other highly sensitive information through a standard website form or ordinary email.
Information you submit through the Site may be used to:
Respond to your inquiry;
Determine whether the Practice may be able to provide the requested service;
Arrange a consultation;
Communicate about availability or a waitlist;
Provide referral information;
Schedule or administer an appointment;
Respond to questions about services, insurance, or payment;
Maintain reasonable records of communications;
Protect the Site and Practice from fraud, spam, misuse, or security threats;
Comply with legal, regulatory, licensing, insurance, or professional obligations; and
Establish, exercise, or defend legal claims.
Submitting an inquiry does not establish a therapist-client relationship. A clinical relationship begins only after the Practice confirms acceptance, completes the appropriate intake process, and obtains required consent documents.
Website inquiries sent by email are delivered to and stored in the Practice’s Google Workspace Gmail account. Text messages are stored in Google Voice.
When a Google Form is used, responses may be stored in Google Forms, Google Drive, and a linked Google Sheet. The Practice may also receive an email notification through Google Workspace when a response is submitted.
Access to these accounts and files is limited to the Practice and authorized individuals or service providers who need access to perform approved functions.
When you use an external scheduling or client-portal link, the information you submit is delivered to and stored by the platform identified on that page. As of the effective date of this policy, the scheduling or client-portal provider is:
Sessions Health
That provider processes information according to its own privacy policy, contractual obligations, and security practices. Appointment notifications or related communications may also be delivered to the Practice’s Google Workspace account.
The Site does not currently operate a newsletter or general marketing-email list. This policy will be updated before a separate newsletter or marketing platform is introduced.
Information may be processed by vendors that provide services necessary to operate the Site and respond to visitors. These vendors may include:
Google LLC, which provides Google Sites, Google Workspace, Gmail, Google Drive, Google Forms, Google Sheets, website infrastructure, and security or anti-abuse functions;
Squarespace, Inc., which provides domain-registration or DNS-management services;
Sessions Health, which provides appointment scheduling or client-portal services;
Paubox for HIPAA compliant email.
Internet, telecommunications, cybersecurity, or information-technology providers;
Professional advisers, such as attorneys, accountants, insurers, or compliance consultants, when reasonably necessary; and
Government agencies, courts, regulators, or law-enforcement authorities when disclosure is required or permitted by law.
Service providers are permitted to process information only as necessary to provide their services, satisfy their legal obligations, protect their systems, or perform functions authorized by the Practice.
The Practice does not sell or rent personal information.
The Practice does not provide website-form submissions to advertisers, data brokers, or social-media companies for targeted advertising.
The Practice does not use information submitted through the Site to create advertising profiles or to target advertisements based on activity across unrelated websites.
Information may be disclosed when reasonably necessary:
To operate the Site or provide a requested service;
To respond to your inquiry;
To vendors performing authorized services;
To protect the rights, safety, security, or property of the Practice, visitors, clients, or others;
To investigate suspected fraud, abuse, or security incidents;
To comply with a subpoena, court order, licensing obligation, regulatory request, or other legal requirement; or
In connection with a business reorganization, merger, transfer, or closure, subject to applicable confidentiality requirements.
Google or another platform provider may independently process technical information under its own privacy policy. Such processing is not a sale of information by the Practice.
The Practice retains website information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, administrative, security, and professional obligations.
Unless a longer period is required for a specific legal or business reason:
General website inquiries and consultation requests that do not result in services may be retained for up to three years after the last communication;
Waitlist information may be retained while the person remains on the waitlist and for up to three years after removal or the last communication;
Scheduling information is retained according to the Practice’s administrative needs, the scheduling provider’s settings, and applicable record-retention requirements;
Information relevant to an individual who becomes a client may be transferred to an administrative or clinical record and retained under the Practice’s clinical record-retention policies; and
Technical, security, DNS, and server logs are retained according to the retention practices of Google, Squarespace, and other infrastructure providers. The Practice may not control those provider-specific retention periods.
Information may be retained longer when necessary to comply with law, respond to a dispute, maintain required business records, protect against fraud or security threats, or establish, exercise, or defend legal claims.
When information is no longer reasonably necessary, the Practice will delete it, de-identify it, or allow it to be deleted through the ordinary retention and deletion processes of the applicable service provider.
The Practice uses reasonable administrative and technical safeguards appropriate to the nature of the website information maintained. These measures include:
Password-protected accounts;
Access restrictions;
Limiting access to individuals and vendors with an authorized business need;
Security and encryption features provided by Google Workspace, Google Sites, Squarespace, and other service providers;
Secure website connections where supported;
Account and device security settings;
Spam, fraud, and abuse-prevention tools; and
Procedures for reviewing and responding to suspected security incidents.
No website, email service, internet transmission, or electronic-storage system can be guaranteed to be completely secure. The Practice therefore cannot promise absolute security or guarantee that information will never be accessed, disclosed, altered, lost, or destroyed without authorization.
Ordinary email and general website forms should not be used to send urgent, highly sensitive, or detailed clinical information.
You may choose not to submit information through the Site. You may instead contact the Practice using the contact information listed below, although ordinary email also has privacy and security limitations.
You may request that the Practice:
Confirm whether it maintains website information about you;
Correct inaccurate contact information;
Delete website information that is no longer needed;
Stop nonessential communications; or
Explain how information you submitted was used.
Requests may be limited when retaining information is necessary to comply with law, maintain required records, protect legal rights, investigate security concerns, or meet professional obligations.
Cookie and browser choices must generally be managed through your browser, device, or Google privacy settings. The Practice cannot directly modify cookies or technical information controlled by Google, Squarespace, your browser, or your internet-service provider.
The Site may contain links to external websites, professional directories, insurance resources, scheduling systems, client portals, maps, videos, or other services.
The Practice does not control the privacy, security, accessibility, content, or data practices of external services. Visiting an external service is subject to that service’s own terms and privacy policy.
A link to another website does not mean that the Practice endorses all of that website’s practices.
The Site is not directed to children under 14, and the Practice does not knowingly use the Site to collect personal information directly from children under 14 without appropriate involvement from a parent or legal guardian.
Parents or guardians who believe a child has submitted information through the Site may contact the Practice to request review or deletion.
The Site is intended primarily for individuals located in the United States, particularly individuals seeking information about services available in Massachusetts.
The Site is not specifically directed to residents of other countries. Information may be processed in the United States or in other locations where the Practice’s service providers operate, subject to their privacy and security practices.
Availability of clinical services is determined by professional licensing requirements, the client’s physical location at the time of service, insurance requirements, and other applicable rules.
The Practice may revise this Website Privacy Policy when website features, vendors, legal requirements, or information practices change.
The revised policy will be posted on the Site with a new effective date. When a change materially affects how previously collected information is used, the Practice may also provide a prominent notice on the Site or communicate the change directly when reasonably appropriate.
Continued use of the Site after a revised policy is posted means that information collected after the new effective date will be handled according to the revised policy.
Questions, requests, or concerns about this Website Privacy Policy or website information may be directed to:
Yvette Lawhorn, PLLC
Massachusetts, United States
Email: yvette@yvettelawhorn.com
Website: www.yvettelawhorn.com
For confidentiality, please do not include detailed clinical information in an email concerning a website privacy request.