Privacy Policy

Effective Date: February 16, 2026

At Secure Base Counseling, we believe your privacy is a foundational part of your "secure base." This policy explains how we collect, use, and protect your information across our Utah-based clinical therapy, global coaching, and community support groups.

1. Clinical Data vs. Coaching Data

We handle your information differently depending on the service you receive:

  • For Clinical Therapy (Utah Residents): Your Protected Health Information (PHI) is governed by HIPAA (The Health Insurance Portability and Accountability Act). You will receive a separate "Notice of Privacy Practices" specifically detailing your clinical rights.

  • For Coaching & Groups (Global): Your information is treated as private personal data. While we maintain high standards of confidentiality, coaching data is not considered "medical records" under US law.

2. Information We Collect

We collect only what is necessary to provide you with a supportive, attuned experience:

  • Identity Data: Name, date of birth, and location.

  • Contact Data: Email address and phone number for scheduling and reminders.

  • Financial Data: Payment information (processed securely through third-party encrypted processors like Stripe or SimplePractice; we do not store your full card numbers).

  • Clinical/Coaching Notes: Brief records of our sessions to track your progress through the Root, Repattern, Repair, and Reclaim phases.

  • Technical Data: Your IP address and "cookie" data when you visit our website (used only to improve site functionality).

3. How We Use Your Data

We use your information to:

  • Provide personalized attachment-informed therapy or coaching.

  • Send you updates, such as the launch of new services, products, groups, etc.

  • Process payments and manage your client portal.

  • Comply with legal obligations (e.g., if we are called to testify in court or have a "duty to warn" regarding safety).

4. Confidentiality & Third-Party Sharing

We never sell your data. We only share your information with:

  • Secure Service Providers: HIPAA-compliant platforms used for video sessions and record-keeping.

  • Legal Necessity: If there is a risk of imminent harm to yourself or others, or in cases of suspected child/elder abuse, we are legally required to break confidentiality to ensure safety.

5. Your Rights

Regardless of where you live, we respect your right to control your data. You may:

  • Access: Request a copy of the personal data we hold about you.

  • Correction: Ask us to fix inaccurate information.

  • Erasure: Request that we delete your coaching or marketing data (subject to clinical record-retention laws in Utah).

  • Opt-Out: Unsubscribe from our newsletter or interest lists at any time.

6. Data Security

We protect your "secure base" by using encrypted email, HIPAA-compliant video platforms, and multi-factor authentication on all systems where client data is stored. While no system is 10 to 100% impenetrable, we prioritize the highest industry standards for digital safety.

7. Changes to This Policy

We may update this policy as our forest grows. Any changes will be posted here with an updated "Effective Date."