Last updated July 28, 2026

Privacy Policy

Effective Date: July 25, 2026

Javier Rodriguez-Winter Therapies

Javier Rodriguez-Winter Therapies ("we," "our," or "us") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how information is collected, used, stored, and disclosed when you visit our website, communicate with us, or inquire about therapy services.

This Privacy Policy applies only to information collected through our website and online communications. It should be read together with our Notice of Privacy Practices (HIPAA Notice), which explains how protected health information (PHI) is used and disclosed after you become a client.

Information We Collect

Depending on how you interact with our website, we may collect:

Information You Voluntarily Provide

You may provide information including:

• Name

• Email address

• Telephone number

• Preferred appointment times

• Reason for seeking services (if voluntarily provided)

• Insurance information (if submitted)

• Any information you include in a contact form or scheduling request

Please avoid sending sensitive clinical or confidential information through website contact forms or standard email, as these methods may not be fully secure.

Automatically Collected Information

Like many websites, our website may automatically collect:

• IP address

• Browser type

• Device information

• Operating system

• Pages visited

• Date and time of visit

• Referring website

• Website usage statistics

This information is generally collected through cookies, analytics tools, server logs, and similar technologies.

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Improve website functionality

• Remember website preferences

• Analyze website traffic

• Improve user experience

• Monitor website performance

Most browsers allow you to disable cookies. Disabling cookies may affect certain website functionality.

If we use analytics providers such as Google Analytics, they may collect anonymized website usage information. Analytics providers maintain their own privacy policies governing their use of collected data.

Where required by California law, we will obtain consent before using non-essential cookies or tracking technologies.

Scheduling and Appointment Requests

Our website may allow visitors to request appointments or schedule consultations using secure scheduling software.

Scheduling platforms may collect:

• Name

• Email

• Telephone number

• Appointment preferences

• Insurance information (if requested)

• Limited intake information

Scheduling information is used solely to:

• Contact prospective clients

• Coordinate appointments

• Confirm or reschedule visits

• Maintain scheduling records

• Comply with professional recordkeeping obligations

Scheduling information is not sold or shared for advertising purposes.

If third-party scheduling software is used (such as SimplePractice or another HIPAA-compliant scheduling platform), your information is handled according to that provider's security and privacy practices, including applicable Business Associate Agreements (BAAs) when required under HIPAA.

How Information Is Used

Information collected through this website may be used to:

• Respond to inquiries

• Schedule appointments

• Provide requested information

• Improve website performance

• Maintain website security

• Comply with legal and ethical obligations

• Detect fraud or misuse of the website

We do not sell personal information.

California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), to the extent applicable to our practice.

Please note that much of the personal information collected in the course of providing healthcare services is exempt from the CCPA/CPRA because it is governed by HIPAA and California medical privacy laws.

Depending on applicable law, California residents may have the right to:

• Request information about categories of personal information collected

• Request deletion of certain personal information

• Request correction of inaccurate personal information

• Know whether personal information has been disclosed

• Limit use of certain sensitive personal information where applicable

• Be free from discrimination for exercising privacy rights

To exercise applicable privacy rights, please contact us using the information below.

HIPAA Compliance

If you become a client of Javier Rodriguez-Winter Therapies, your protected health information (PHI) will be protected in accordance with:

• The Health Insurance Portability and Accountability Act (HIPAA)

• The Health Information Technology for Economic and Clinical Health (HITECH) Act

• California Confidentiality of Medical Information Act (CMIA)

• Applicable California laws governing mental health records

Our HIPAA Notice of Privacy Practices describes how PHI may be used and disclosed after treatment begins.

Information Sharing

We do not sell or rent personal information.

Information may be disclosed only:

• With your written authorization

• As required by law

• To comply with court orders

• To prevent serious threats to health or safety when permitted by law

• To HIPAA-compliant service providers assisting with website hosting, scheduling, payment processing, secure communications, or electronic health records

• As otherwise permitted under HIPAA or California law

All vendors who receive protected health information are required, when applicable, to maintain Business Associate Agreements.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction.

While we strive to protect your information, no method of internet transmission or electronic storage is completely secure. Therefore, absolute security cannot be guaranteed.

Data Retention

Website inquiries and scheduling records are retained only as long as reasonably necessary for administrative, legal, ethical, or professional purposes.

Clinical records are maintained in accordance with California law and applicable professional licensing requirements.

Third-Party Websites

Our website may contain links to third-party websites, including scheduling platforms, payment processors, or informational resources.

We are not responsible for the privacy practices of those websites and encourage you to review their individual privacy policies.

Children's Privacy

This website is not intended for children under 13 years of age.

We do not knowingly collect personal information from children through this website without appropriate parental or legal guardian involvement.

Do Not Track

Some web browsers transmit "Do Not Track" (DNT) signals. Because there is currently no universally accepted standard for responding to DNT signals, our website may not respond to such requests.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Updated versions will be posted on this page with a revised Effective Date.

Contact Information

If you have questions regarding this Privacy Policy or your privacy rights, please contact:

Javier Rodriguez-Winter Therapies

1451 Quail Street, Suite 211

Newport Beach, California 92660

Phone: (562) 737-5007

Email: javier@innernauttherapies.com

Notice

This Privacy Policy describes how information is collected through this website. If you become a therapy client, you will receive a separate HIPAA Notice of Privacy Practices that governs your protected health information during treatment.