Healing Together with Grace
Grace Enough Therapy (“we,” “our,” “us”) provides mental health counseling in Rhode Island, with in-person sessions in Cranston and secure Telehealth statewide.
This Privacy Policy explains how we collect, use, and protect information when you visit our website, contact us, or use our services. Certain information related to your care may be Protected Health Information (PHI) and is governed by HIPAA
We collect information in three main ways:
You provide it
Contact details (name, email, phone), appointment requests, intake forms, messages you send us.
Insurance details and payment information (if you choose to share for billing).
Any information you voluntarily include in form fields or questionnaires.
Collected automatically (website/telehealth)
Device and usage data (IP address, browser type, pages viewed, time on page).
Cookies and similar technologies (see Cookie Policy).
Telehealth session metadata (connection status, technical logs)—not your private session content.
From third parties (with your consent or as allowed by law)
Referrals from providers, EHR/telehealth vendors, payment processors, scheduling platforms, and analytics tools.
Provide care and run our practice: schedule appointments, respond to inquiries, coordinate care (with consent), process payments.
Improve our website and services: troubleshoot, analyze usage, enhance accessibility and security.
Communicate with you: confirm appointments, send instructions and policy updates.
Legal and safety: comply with law, enforce terms, prevent fraud or abuse.
For PHI, we use and disclose only as allowed under HIPAA and our Notice of Privacy Practices.
We do not sell your personal information. We share limited data with service providers who help us operate our practice and site, under confidentiality and security obligations. Examples:
Telehealth/EHR/scheduling providers (HIPAA-aligned BAAs for PHI).
Payment processors (HSA/FSA cards, credit/debit).
Analytics/security tools for site performance and fraud prevention.
We may disclose information if required by law or to protect rights, safety, and security.
Access, update, or delete certain personal data by contacting us at [email].
Marketing/preferences: we don’t send marketing emails without consent; you can opt out anytime.
Cookies: control via our cookie banner and your browser settings (see Cookie Policy).
California (CPRA/CCPA): you may request access, deletion, correction, and opt out of sharing for cross-context behavioral advertising. We do not “sell” personal information as defined by CPRA. Submit requests at [email or webform].
HIPAA/PHI rights: see our Notice of Privacy Practices for rights to access, amend, restrict, and receive an accounting of disclosures of PHI.
We keep information only as long as necessary for care, operations, legal, and compliance requirements. PHI retention follows healthcare record keeping laws.
We use reasonable administrative, technical, and physical safeguards (encryption in transit for telehealth, access controls, least-privilege policies). No method is 100% secure; please contact us immediately if you suspect unauthorized activity.
Our website is not directed to children under 13. We do not knowingly collect personal information from children online without appropriate parental/guardian consent as required by law.
Some browsers send “DNT” signals. Because there is no industry standard, we do not respond to DNT at this time. You can manage cookies in your settings or via our cookie banner.
If you access our site from outside the U.S., you understand your information may be processed in the U.S., where privacy laws may differ from your country.
We may update this policy to reflect changes to our practices. We will revise the “Last updated” date and, where appropriate, notify you.
Questions or privacy requests:
Email: admin@graceenoughtherapy.org
Phone Number: 401-943-2403
Compassionate, evidence-based care for eating disorders, trauma, and relationships.
