Purpose and Relationship to Other Policies

​

Purpose
This Cookie Policy (“Policy”) explains how cookies and similar tracking technologies are used on the website operated by Amy Calmann LCSW Psychotherapy (the “Site”) and the choices you have regarding such technologies.

 

Relationship to Privacy Policy
This Policy should be read together with the Website Privacy Policy and Terms and Conditions. While the Privacy Policy covers general data-handling practices, this Policy specifically addresses technologies that store or access information on your device.

​

Scope
This Policy applies solely to the public website located at https://www.amytherapynyc.com and its sub-pages. It does not govern the Practice’s secure Telehealth, Portal, or EHR systems, which are governed by HIPAA and the Practice’s Notice of Privacy Practices (NPP).

 

​

 

What Are Cookies?

​

Definition
Cookies are small text files placed on your computer or mobile device when you visit a website. They allow the website to recognize your device, store certain information, and improve performance and functionality.

 

Types of Related Technologies
For simplicity, this Policy uses “cookies” to include similar technologies such as web beacons, pixels, tags, SDKs, and local storage objects. These tools may perform similar functions, including analytics, authentication, and session management.

 

​

 

Categories of Cookies Used on the Site

 

The Practice uses or may use the following categories of cookies:

​

Strictly Necessary Cookies

These cookies are essential for the operation of the Site and enable basic functions such as page navigation, secure logins (if applicable), and form submissions. The Site cannot function properly without these cookies.

​

• Examples: session cookies that remember your progress when completing forms, or cookies maintaining server load balance.

• Legal basis: the Practice’s legitimate interest in providing a secure and functioning website.

• Duration: typically deleted when you close your browser.

​

Functional (Preference) Cookies

These cookies remember user choices (for example, preferred language or accessibility settings) to provide a customized browsing experience.

​

• These cookies are optional; disabling them may limit personalization features.

• Stored for up to 12 months unless cleared sooner.

​

Performance and Analytics Cookies

These cookies collect information about how visitors use the Site — for example, which pages are most frequently visited and where users encounter errors. The data are aggregated and anonymous.

​

• The Practice may use privacy-enhanced analytics (for example, Google Analytics 4 configured with IP anonymization and data retention limits).

• Legal basis: legitimate interest in understanding and improving Site performance.

• Duration: 14–26 months (subject to vendor retention settings).

​

Security Cookies

Used to authenticate users, prevent fraudulent use of logins, and protect against cross-site request forgery or other attacks.

​

• Duration: varies; may persist up to one year.

​

No Advertising or Social-Media Cookies

The Practice does not use cookies for targeted advertising, retargeting, or behavioral profiling. The Site also does notuse embedded social-media tracking pixels or plug-ins.

 

 

​

Cookies We Do Not Use

​

No Marketing or Behavioral Cookies
The Practice does not employ cookies to track individuals across websites or deliver targeted advertising.

 

No PHI Tracking
Cookies are never used to store or transmit Protected Health Information (PHI). Clinical communications and Telehealth sessions occur only within HIPAA-compliant systems that do not share cookie data with public analytics services.

​

No Third-Party Data Brokerage
The Practice does not sell, rent, or share cookie data with advertisers or data brokers.

 

 

​

Third-Party Service Providers and Analytics

​

Hosting and Security Vendors
Our hosting provider may use server-level cookies or logs to maintain performance, load balancing, and intrusion detection.

​

Analytics Vendors
If analytics tools (such as Google Analytics or equivalent privacy-enhanced alternatives) are deployed, the following apply:

​

• IP addresses are truncated and anonymized.

• “Ad personalization” and “data sharing for advertising” features are disabled.

• Analytics cookies track only aggregated, non-identifiable data.

• The Practice has disabled user-ID tracking and demographic reporting.

​

Consent to Analytics
Where required by law or best practice, the Site will display a cookie banner allowing users to consent or opt out of non-essential analytics cookies. Strictly necessary cookies will operate regardless of consent because they are required for Site functionality.

​

External Links
External links or embedded content (e.g., maps or scheduling tools) may use their own cookies, governed by their respective privacy policies. The Practice has no control over third-party cookies used on external sites.

 

 

 

Cookie Duration and Storage

​

Session Cookies
These expire automatically when you close your browser.

​

Persistent Cookies
These remain on your device until manually deleted or until their programmed expiration date, usually not exceeding 26 months.

​

Local Storage and Cache
Some browsers store data locally to improve load times. You may clear your browser cache at any time to remove locally stored content associated with the Site.

 

​

 

Managing Cookies and Consent

​

Browser Settings
Most browsers allow you to block or delete cookies through privacy settings. Doing so will not affect access to core content but may impact site responsiveness or personalization.

​

Consent Withdrawal
If you have previously consented to non-essential cookies (e.g., analytics) and wish to withdraw consent, you can delete existing cookies and adjust browser settings to reject future ones.

​

Opt-Out Mechanisms
You can use browser-based “Do Not Track” (DNT) settings, though the Site currently does not interpret DNT signals due to lack of a global technical standard.

​

Device and Platform Controls
Mobile devices may offer app- or browser-level privacy controls. If you access the Site from a mobile browser, adjust preferences directly within device settings.

 

​

 

Data Sharing and International Transfers

 

Data Sharing
Cookie data are shared only with vendors providing hosting, analytics, or website security services under strict contractual confidentiality obligations.

​

International Transfers
If analytics or hosting providers transfer cookie data outside the United States, such transfers occur under recognized safeguards (e.g., Standard Contractual Clauses) ensuring equivalent protection.

​

Vendor Accountability
The Practice monitors vendor privacy practices and ensures that no cookie data collected through the Site are combined with PHI or other sensitive records.

 

​

 

Security and Confidentiality

​

Integrity Measures
Cookies used on this Site are digitally signed or otherwise structured to prevent tampering.

 

Encryption
The Site operates under HTTPS with Transport Layer Security (TLS) encryption to protect cookies during transmission.

 

Limited Access
Only authorized personnel and contracted IT vendors have administrative access to cookie or analytics configurations.

 

Breach Notification
If cookie-related data were ever compromised and met the legal definition of a reportable event under the New York SHIELD Act or other applicable law, the Practice would notify affected individuals in accordance with statutory requirements.

 

​

 

Children’s Data and Cookies

​

No Child-Directed Cookies
The Site is not directed toward children under 13 years of age. Cookies are not designed to identify or track children.

 

Parental Requests
If a parent or guardian believes cookies have collected information from a child, contact the Privacy Officer. The Practice will delete such information promptly in compliance with the Children’s Online Privacy Protection Act (COPPA).

 

 

​

Changes to This Cookie Policy

​

Version Control
This Policy may be updated periodically to reflect legal, technical, or operational changes.

 

Notice of Changes
Material revisions will be indicated by updating the “Effective Date” above.

​

Archive and Recordkeeping
Previous versions of this Policy may be retained for compliance documentation.

 

 

​

Governing Law

This Cookie Policy, and any dispute arising from it, is governed by the laws of the State of New York, without regard to conflict-of-laws principles. Any action relating to this Policy shall be brought exclusively in the state or federal courts located in New York County, New York.

 

 

Contact Information

​

For questions, concerns, or requests regarding cookies or this Policy, please contact:

​

Amy Calmann LCSW Psychotherapy
Attn: Privacy Officer
1140 Broadway, Suite 204
New York, NY 10001
Email: amy@amytherapynyc.com
Phone: 347-948-4702 

 

Acknowledgment

By continuing to use the Site after the “Effective Date” of this Policy, you acknowledge that you have read and understood this Cookie Policy, and consent (where applicable) to the use of cookies in accordance with the choices and controls described herein.