Privacy Policy

Our Commitment to Your Privacy

Stephen DiCarlo, M.A., LPC, is committed to protecting your privacy. This Privacy Policy explains how Stephen DiCarlo Therapy collects, uses, and protects your personal information when you visit this website or contact us about services.

Information We Collect

Contact Form Information

When you submit the contact form for scheduling inquiries, we collect:

• Your name
• Email address
• Phone number (optional)
• Preferred contact method and best time to reach you
• The general area that brings you to therapy (e.g., anxiety, addiction and recovery)
• How you found the practice, if you choose to share it
• A brief message about how we can help

The website contact form is designed for scheduling and general inquiries only and is not a HIPAA-compliant communication channel for detailed health information. Please do not include sensitive clinical details in your submission.

Automatically Collected Information

Like most websites, certain technical information is collected automatically:

• IP address and browser type
• Pages visited and time spent on the site
• Referring website (how you found us)
• Device and operating system information

No third-party advertising or behavioral tracking tools are intentionally used on this website.

How We Use Your Information

We use the information you provide to:

• Respond to your inquiry and schedule your free 15-minute consultation
• Communicate with you about scheduling and services
• Understand how people find the practice and make it easier to reach out
• Maintain the security and performance of this website
• Comply with legal and professional record-keeping obligations

We do not sell or rent your personal information to third parties.

Third-Party Service Providers

This website relies on a small number of service providers to operate. Each receives only the information necessary to perform its function:

• Email delivery: Gmail (Google LLC). Data shared: name, email, phone, and message content from contact form submissions. Legal basis: legitimate business interest and consent.
• Website hosting. Data shared: technical website data such as IP addresses and page visits. Legal basis: necessary for service provision.
• Secure database storage. Data shared: contact form submissions. Legal basis: legitimate business interest.

Telehealth and Confidentiality

Telehealth sessions are conducted using HIPAA-compliant video platforms. Clinical information shared within therapy sessions is protected under separate confidentiality practices, which are reviewed with you before beginning therapy.

Communications via standard email or website forms are not fully secure. While reasonable precautions are taken, the security of information transmitted over the internet cannot be guaranteed.

Your Virginia Privacy Rights

Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the right to:

• Confirm whether we are processing your personal data and obtain a copy
• Request correction of inaccurate personal information
• Request deletion of personal data provided by or obtained about you
• Obtain a copy of your data in a portable, readily usable format
• Opt out of the processing of personal data for targeted advertising or profiling

To exercise any of these rights, contact us using the information below. We will respond within 45 days of receipt. If we need additional time (up to 45 additional days), we will inform you of the reason and extension period.

Data Retention

Contact form inquiries are retained for up to 2 years or until you request deletion, whichever comes first.

If you become a client, clinical records are retained as required by Virginia law and the regulations of the Virginia Board of Counseling, even if you request deletion of other data.

Children's Privacy

This website and practice serve adults. We do not knowingly collect personal information from children through this website.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when changes were made. We encourage you to review this policy periodically.

Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Stephen DiCarlo, M.A., LPC
207 Park Ave, Suite B-3, Falls Church, VA 22046
stephen@stephendicarlotherapy.com
703-495-3620