Privacy Policy

Effective Date: January 1, 2026
Practice Name: Allora Therapy LLC
Website: www.AlloraTherapy.com
Licensed In: Colorado and Washington, DC, USA

Data Controller: Christine Rufener, Licensed Psychologist

1. Introduction

Welcome to Allora Therapy LLC Protecting your privacy is important. This Privacy Policy explains how information is collected, used, stored, and protected when you visit this website.

This policy applies only to information collected through this website. It does not replace the Notice of Privacy Practices provided to psychotherapy clients under the Health Insurance Portability and Accountability Act (HIPAA).

If you are located in the European Union (EU), United Kingdom (UK), or another jurisdiction with data protection laws, this policy also explains your rights under the General Data Protection Regulation (GDPR) and similar laws.

2. Scope of Services

Psychotherapy services are provided only to individuals physically located in Colorado or Washington, DC, where the clinician is licensed.

Although this website may be accessed internationally, therapy services are not offered outside those jurisdictions.

Accessing this website or contacting the practice does not establish a therapist-client relationship.

3. Information Collected

A. Information You Voluntarily Provide

You may voluntarily provide:

• Name

• Email address

• Phone number

• Information submitted through contact forms

• Information included in email communication

Please do not include sensitive clinical or confidential information in website contact forms or standard email communications, as these methods are not guaranteed to be secure.

B. Automatically Collected Information

When you visit this website, certain technical data may be automatically collected:

• IP address

• Browser type

• Device type

• Pages viewed

• Date and time of access

• Referring website

This information may be collected through cookies or analytics tools.

4. Lawful Basis for Processing (GDPR)

If you are located in the EU or UK, personal data is processed under one or more of the following lawful bases:

• Consent – When you voluntarily submit information through contact forms.

• Legitimate Interest – To operate, secure, and improve the website.

• Pre-Contractual Steps – When responding to inquiries about potential therapy services.

• Legal Obligation – When required by applicable laws or professional regulations.

You may withdraw consent at any time by contacting [Your Contact Email].

5. How Information Is Used

Information collected through this website may be used to:

• Respond to inquiries

• Determine eligibility for services

• Communicate about consultations

• Improve website functionality

• Maintain website security

• Comply with legal and ethical obligations

Personal information is never sold, rented, or shared for advertising purposes.

6. International Data Transfers

This website is operated in the United States.

If you access this website from outside the U.S., including the EU or UK, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

By submitting information through this website, you acknowledge this transfer.

7. Data Retention

Personal information submitted through this website will be retained only as long as reasonably necessary to:

• Respond to inquiries

• Fulfill administrative purposes

• Comply with legal obligations

If you do not become a client, inquiry-related information is typically retained for no longer than [6–12 months] unless legally required otherwise.

If you become a client, record retention is governed by state licensing laws and HIPAA requirements, which will be outlined in a separate Notice of Privacy Practices.

8. HIPAA and Client Confidentiality

If you become a psychotherapy client, your protected health information (PHI) will be governed by a separate Notice of Privacy Practices in accordance with HIPAA and applicable state laws.

Website communications (including contact forms and email) are not secure clinical communication channels and do not establish a therapist-client relationship.

9. Cookies and Analytics

This website may use cookies and third-party analytics tools (such as Google Analytics) to understand website traffic and improve user experience.

Where required by law (including in the EU/UK), non-essential cookies will only be used with your consent.

You may disable cookies through your browser settings.

10. Your Data Protection Rights (EU/UK Residents)

If you are located in the EU or UK, you may have the following rights under GDPR:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent

To exercise any of these rights, please contact:
Christine@AlloraTherapy.com

You also have the right to lodge a complaint with your local data protection authority.

11. Data Security

Reasonable administrative, technical, and physical safeguards are used to protect information submitted through this website.

However, no method of internet transmission or electronic storage is completely secure, and absolute security cannot be guaranteed.

12. No Insurance Billing

This practice operates on a private-pay basis and does not submit claims to insurance providers. Insurance-related data is not collected through this website.

13. Emergency Notice

This website is not monitored continuously and is not intended for crisis communication.

If you are experiencing an emergency:

• Call 911 (U.S.)

• Call 988 (U.S. Suicide & Crisis Lifeline)

• Contact your local emergency services if outside the U.S.

14. Changes to This Policy

This Privacy Policy may be updated periodically. The updated version will be posted on this page with a revised effective date.

15. Contact Information

Christine Rufener, Ph.D.
Licensed Psychologist in Colorado and Washington, DC
Email: Christine@AlloraTherapy.com
Website: www.AlloraTherapy.com