Privacy Policy
Last updated: July 21, 2026
Echo Canyon Therapy, LLC respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, contact us, request an appointment, or otherwise interact with our online services.
This Privacy Policy primarily applies to information collected through the public Echo Canyon Therapy website. Information collected or maintained as part of an established therapist-client relationship may be protected by additional federal and state healthcare privacy laws and is addressed in our separate Notice of Privacy Practices, informed-consent documents, and clinical policies.
By accessing or using the Website, you acknowledge the practices described in this Privacy Policy.
Interpretation and Definitions
Interpretation
Words whose initial letters are capitalized have meanings defined below. These definitions have the same meaning whether they appear in singular or plural form.
Definitions
For purposes of this Privacy Policy:
Clinical Services means therapy, counseling, consultation, assessment, telehealth, outdoor therapy, walk-and-talk therapy, and related professional services provided by Echo Canyon Therapy.
Company, also referred to as “Echo Canyon Therapy,” “We,” “Us,” or “Our,” means Echo Canyon Therapy, LLC, located in Phoenix, Arizona, United States.
Cookies means small files placed on your Device by a website that may store information about your preferences, Website activity, or Device.
Device means any device that can access the Website, including a computer, mobile phone, or tablet.
Personal Data means information that identifies, relates to, describes, or could reasonably be associated with an identified or identifiable person.
Protected Health Information or PHI means individually identifiable health information protected by applicable healthcare privacy laws, including the Health Insurance Portability and Accountability Act, when applicable.
Service Provider means a person or organization that processes information or provides services on our behalf, including website hosting, scheduling, communications, analytics, billing, payment processing, data storage, or record-management services.
Usage Data means technical, diagnostic, or activity information collected automatically when you access or interact with the Website.
Website means the Echo Canyon Therapy website available at echocanyontherapy.com, including its pages, contact forms, scheduling links, embedded tools, and related online features.
You means the person accessing or using the Website or the organization on whose behalf that person is acting.
Scope of This Privacy Policy
This Privacy Policy applies to information collected through:
The public Echo Canyon Therapy Website;
Website contact and inquiry forms;
Consultation and appointment requests;
Calendly scheduling pages or embedded scheduling tools;
Emails, telephone calls, text messages, or voicemails initiated through the Website;
Website analytics and security tools;
Google Analytics;
Cookies and similar technologies; and
Other online features linked directly to this Privacy Policy.
This Privacy Policy does not replace our Notice of Privacy Practices or other clinical privacy documents that apply after a therapist-client relationship has been established.
Third-party websites, applications, scheduling platforms, client portals, payment systems, maps, or social-media pages may have their own privacy policies. This Privacy Policy does not govern the independent privacy practices of those third parties.
Information We Collect
Information You Provide Directly
We may collect information you voluntarily provide when you:
Submit a contact or consultation-request form;
Request, schedule, reschedule, or cancel an appointment;
Use Calendly or another scheduling tool;
Communicate with us by email, telephone, text message, or voicemail;
Complete forms through a linked client platform;
Make a payment;
Request information about Clinical Services; or
Otherwise communicate with Echo Canyon Therapy.
Information you provide may include:
Your name;
Email address;
Telephone number;
Preferred communication method;
City, state, or general location;
Time zone;
Scheduling preferences;
Requested appointment date and time;
The general type of service you are interested in;
Referral information;
Payment or billing information;
Information included in your inquiry or message; and
Any other information you choose to provide.
Please limit the information you submit through a general Website contact form, standard email, text message, voicemail, or Calendly scheduling form. These communication methods may not be appropriate for detailed medical, mental-health, financial, or emergency information.
Information Related to Clinical Services
When you request or receive Clinical Services, we may collect information such as:
Contact and identifying information;
Demographic information;
Health and treatment history;
Current symptoms and concerns;
Emergency-contact information;
Insurance or payment information;
Intake and assessment information;
Appointment and attendance information;
Clinical records and treatment documentation; and
Communications relating to treatment, payment, or healthcare operations.
When this information qualifies as PHI, its collection, use, disclosure, retention, and protection are governed by our Notice of Privacy Practices, clinical agreements, and applicable law.
If this Privacy Policy conflicts with our Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices will control.
Usage Data Collected Automatically
When you access the Website, certain technical information may be collected automatically by our Website platform, hosting provider, Google Analytics, security tools, or other Service Providers.
Usage Data may include:
Internet Protocol address;
Browser type and browser version;
Device type;
Operating system;
Referring website or page;
Pages visited;
Date and time of access;
Time spent on particular pages;
General geographic area based on IP address;
Screen size or Device characteristics;
Links, buttons, or Website features selected;
Traffic source information;
Session information;
Cookie or online identifiers;
Error logs;
Performance information; and
Information used to detect fraud, abuse, or security threats.
We generally use this information to operate, secure, evaluate, and improve the Website.
Cookies and Similar Technologies
The Website may use Cookies, pixels, browser storage, tags, scripts, and similar technologies to support Website functions, remember preferences, measure Website activity, and protect the Website from misuse.
Cookies may be either:
Session Cookies, which are generally deleted when you close your browser; or
Persistent Cookies, which remain on your Device until they expire or are deleted.
Essential Technologies
Essential technologies are necessary for the Website to function properly. They may support:
Website security;
Form submissions;
Network management;
Accessibility;
Fraud prevention;
Cookie-preference settings; and
Basic Website functionality.
Because these technologies are necessary to provide the Website, they may not always be disabled through a Website preference tool. Blocking them through your browser could cause parts of the Website to function incorrectly.
Analytics Technologies
We use analytics technologies, including Google Analytics, to understand general Website traffic and how visitors interact with the Website.
Analytics technologies may collect information such as:
Pages viewed;
Time spent on pages;
Links or buttons selected;
Referral sources;
General Device information;
Approximate geographic location;
Browser and operating-system information; and
Website performance information.
We do not use Website analytics to diagnose visitors, provide therapy, or make clinical decisions.
Preference Technologies
The Website may use Cookies or browser storage to remember choices such as:
Cookie preferences;
Display settings;
Language settings;
Scheduling selections; and
Other Website preferences.
Third-Party Technologies
Embedded scheduling tools, maps, videos, social-media links, forms, or other third-party features may allow the third party to collect information through Cookies or similar technologies.
We do not control Cookies or tracking technologies independently placed by third parties.
Managing Cookies
Most browsers allow you to block, limit, or delete Cookies through your browser settings.
When available, you may also use our Website cookie-preference tool to accept or reject certain nonessential Cookies.
Blocking or deleting Cookies may affect Website analytics or prevent certain Website features, including embedded scheduling tools, from functioning correctly.
Google Analytics
We use Google Analytics, a Website analytics service provided by Google, to help us understand how visitors find and interact with the Website.
Google Analytics may collect information such as:
Pages viewed;
Website features used;
Date, time, and duration of visits;
Referral sources;
General Website traffic information;
Approximate geographic location;
Browser type;
Operating system;
Device information;
Internet Protocol address;
Cookie or similar online identifiers; and
Interactions with links, buttons, or Website content.
Google Analytics may place Cookies on your Device, including Cookies commonly used to distinguish visitors and sessions.
We use Google Analytics information to:
Evaluate Website traffic;
Understand which pages or content are useful;
Identify technical problems;
Measure Website performance;
Understand how visitors find the Website; and
Improve Website content and usability.
We do not intentionally provide Google Analytics with:
Contact-form message contents;
Calendly scheduling-question responses;
Client names;
Client email addresses;
Diagnoses;
Treatment information;
Clinical records;
Therapy notes; or
Other PHI.
Google processes information collected through Google Analytics according to its own privacy practices. Google may process information in the United States or other countries where it or its Service Providers operate.
You may limit Google Analytics collection by:
Rejecting analytics Cookies through our cookie-preference tool, when available;
Blocking or deleting Cookies through your browser;
Using browser privacy or tracking-protection settings; or
Using Google’s Analytics opt-out browser tool.
Blocking analytics Cookies should not prevent you from accessing the basic informational content of the Website.
Calendly Scheduling
We use Calendly to display appointment availability and allow visitors to request, schedule, reschedule, or cancel consultations and appointments.
Calendly may be displayed through:
An embedded scheduler;
A Website pop-up;
A scheduling button; or
A link to an external Calendly scheduling page.
When you use Calendly, Calendly may collect information such as:
Your name;
Email address;
Telephone number, when requested;
Time zone;
Selected appointment type;
Requested appointment date and time;
Responses to scheduling questions;
Calendar and appointment information;
Internet Protocol address;
Browser type;
Device information;
Operating system;
Referring Website page;
Cookies or browser-storage information; and
Information about your interactions with Calendly.
Echo Canyon Therapy receives the information you submit through Calendly and may use it to:
Manage appointment requests;
Schedule, reschedule, or cancel appointments;
Communicate about appointments;
Prevent double-booking;
Send confirmations or reminders;
Maintain administrative records; and
Respond to your request.
Calendly may connect with our electronic calendar, email provider, or other services to check availability, create calendar events, and send appointment communications.
Calendly may process scheduling information on our behalf as a Service Provider. Calendly may also process certain information for its own operational, analytics, security, and legal purposes according to its own privacy policy and terms.
Please do not enter the following information into Calendly:
A mental-health diagnosis;
Detailed symptoms;
Trauma history;
Medication information;
Clinical records;
Detailed reasons for seeking therapy;
Highly sensitive personal information; or
Emergency or urgent safety information.
Calendly is intended for scheduling. It is not intended to serve as a secure clinical intake system, client portal, therapy record, or emergency communication service.
Submitting a Calendly appointment request does not by itself establish a therapist-client relationship. A therapist-client relationship begins only after Echo Canyon Therapy agrees to provide Clinical Services and all required intake, informed-consent, privacy, and financial documents have been completed.
How We Use Personal Data
We may use Personal Data to:
Operate, maintain, and secure the Website;
Respond to questions, inquiries, or requests;
Determine whether we may be an appropriate provider for requested services;
Schedule consultations or appointments;
Communicate about scheduling, forms, policies, fees, or services;
Provide and administer Clinical Services;
Manage client intake;
Send appointment confirmations and reminders;
Verify or process payments;
Maintain business, administrative, and clinical records;
Comply with legal, professional, ethical, licensing, insurance, and regulatory obligations;
Prevent fraud, misuse, security incidents, or unlawful activity;
Troubleshoot technical problems;
Analyze general Website performance;
Understand how visitors find the Website;
Improve Website content, accessibility, and user experience;
Protect our rights, safety, property, clients, Website visitors, and others;
Carry out a merger, restructuring, sale, or transfer of business assets, subject to applicable confidentiality requirements; and
Fulfill another purpose disclosed when the information is collected or authorized by you.
We do not use information submitted through a therapy inquiry for unrelated promotional marketing without your permission.
Legal Bases for Processing
Where applicable law requires a legal basis for processing Personal Data, we may process information because:
You requested information or services;
Processing is necessary to take steps before entering into an agreement;
Processing is necessary to provide services under an agreement;
You provided consent;
Processing is necessary to comply with a legal or professional obligation;
Processing is necessary to protect a person’s vital interests; or
Processing is necessary for our legitimate interests, such as operating, securing, analyzing, and improving the Website, provided those interests are not overridden by your rights.
You may withdraw consent when processing is based on consent. Withdrawal does not affect processing that occurred before your consent was withdrawn.
How We Disclose Information
We may disclose Personal Data in the circumstances described below.
Service Providers
We may disclose information to Service Providers that support our Website, scheduling, communications, and business operations.
These Service Providers may include:
Framer, for Website hosting, design, operation, and related services;
Google Analytics, for Website traffic measurement and analytics;
Calendly, for appointment scheduling and related communications;
Calendar and email providers connected to Calendly;
Secure client portals;
Electronic health-record systems;
Telehealth platforms;
Online form providers;
Payment processors;
Data storage and backup providers;
Information-technology and cybersecurity providers;
Insurance providers;
Legal and accounting professionals; and
Other administrative or professional advisers.
Service Providers may receive only the information reasonably necessary to perform their functions.
When a Service Provider handles PHI on our behalf and applicable law requires it, we seek to use appropriate contractual protections, including a business associate agreement when required.
Legal and Safety Reasons
We may disclose information when we reasonably believe disclosure is necessary to:
Comply with applicable law, regulation, subpoena, court order, or lawful process;
Respond to a government agency or licensing authority;
Protect the rights, safety, or property of Echo Canyon Therapy or another person;
Investigate fraud, security threats, misuse, or unlawful conduct;
Prevent or respond to a serious and imminent threat when disclosure is permitted or required by law; or
Establish, exercise, or defend legal claims.
Additional rules apply to the disclosure of PHI and clinical records. Those rules are described in our Notice of Privacy Practices and clinical documents.
Business Transfers
Information may be disclosed or transferred in connection with a merger, acquisition, restructuring, financing, sale of assets, or transition of the practice.
Any transfer involving clinical records or PHI will remain subject to applicable privacy, confidentiality, record-retention, and professional requirements.
With Your Direction or Authorization
We may disclose information when you request, direct, or authorize us to do so.
Sale of Personal Data
Echo Canyon Therapy does not sell, rent, or trade Personal Data.
We do not exchange therapy inquiries, clinical information, or PHI for monetary compensation.
We do not sell PHI to data brokers or use PHI for targeted advertising.
Some privacy laws define “sale,” “sharing,” or targeted advertising more broadly than an exchange for money. Where applicable law provides an opt-out right, we will provide any legally required notices or controls.
Advertising and Marketing
We may use general Website analytics to understand how visitors find our Website and to evaluate the effectiveness of Website content or outreach.
We do not use detailed therapy inquiries, diagnoses, clinical information, treatment records, or PHI to create advertising profiles.
If our advertising, analytics, or tracking practices materially change, we will update this Privacy Policy and provide legally required notices or choices.
Retention of Personal Data
We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected, including to:
Respond to inquiries;
Manage scheduling;
Maintain administrative records;
Provide Clinical Services;
Meet clinical record-retention requirements;
Comply with legal, licensing, tax, insurance, and accounting obligations;
Resolve disputes;
Enforce agreements; and
Protect against fraud, security threats, or legal claims.
Retention periods may differ depending on the type of information and the reason it was collected.
Clinical records and PHI are retained according to applicable law, licensing requirements, professional standards, contractual obligations, and our record-retention policies.
Information may remain in secure backups for a limited period after it is removed from active systems.
Security of Personal Data
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Data from unauthorized access, use, alteration, destruction, or disclosure.
These safeguards may include:
Password-protected systems;
Access restrictions;
Encryption where appropriate;
Secure Website and client platforms;
Software and system updates;
Backup procedures;
Confidentiality requirements;
Vendor review;
Contractual privacy safeguards; and
Policies for handling sensitive or clinical information.
No Website, email system, mobile Device, storage system, or internet transmission can be guaranteed to be completely secure.
You are responsible for taking reasonable precautions when communicating electronically, including protecting your Device, email account, passwords, and account credentials.
Email, Text Messages, and Voicemail
Standard email, text messages, and voicemail may not be fully secure.
Electronic messages may be:
Delayed;
Misdirected;
Intercepted;
Stored by a third-party provider; or
Accessed by someone who has access to your Device or account.
By initiating communication through one of these methods, you acknowledge its privacy limitations.
Do not use email, text messages, Website contact forms, Calendly, or voicemail for emergencies. These communications may not be reviewed immediately.
Clients may receive additional communication policies as part of the informed-consent process.
Third-Party Platforms and Links
The Website may link to or integrate with third-party services, including:
Calendly;
Google Analytics;
Secure client portals;
Scheduling platforms;
Telehealth systems;
Payment processors;
Online forms;
Maps;
Social-media websites;
Professional directories; and
Other websites or resources.
Third parties may collect information directly from you and process it according to their own privacy policies and terms.
Echo Canyon Therapy does not control all aspects of a third party’s independent privacy, security, data-retention, or information practices.
We encourage you to review a third party’s privacy policy before submitting information or using its services.
Your Privacy Rights and Choices
Depending on your location and applicable law, you may have the right to:
Request information about the Personal Data we maintain about you;
Request access to Personal Data;
Request correction of inaccurate Personal Data;
Request deletion of certain Personal Data;
Request restriction of certain processing;
Object to certain processing;
Withdraw consent;
Request a portable copy of certain information;
Opt out of certain marketing communications;
Opt out of certain analytics, targeted advertising, sale, or sharing practices;
Appeal the denial of a privacy request; or
File a complaint with an appropriate regulatory authority.
These rights may be subject to legal exceptions.
For example, we may be required to retain clinical, billing, tax, insurance, legal, or business records even after receiving a deletion request.
Rights involving PHI and clinical records are described in our Notice of Privacy Practices.
To submit a privacy request, contact us through the contact information available on the Website. We may need to verify your identity before completing the request.
Browser Privacy Signals
Some browsers offer “Do Not Track,” Global Privacy Control, or similar privacy signals.
Because standards and legal requirements for these signals vary, the Website may not respond to every signal in the same way.
Where applicable law requires recognition of a valid browser-based opt-out signal, we will make reasonable efforts to honor it.
Children’s Privacy
The public Website is intended for a general audience and is not directed to children under 13.
We do not knowingly collect Personal Data through the Website from children under 13 without appropriate authorization.
If you are a parent or legal guardian and believe a child under 13 has submitted Personal Data through the Website, please contact us so we can review and, when appropriate, delete the information.
The provision of Clinical Services to a minor is governed by applicable law, informed-consent requirements, and separate clinical policies.
Visitors From Outside the United States
Echo Canyon Therapy is located in the United States.
Website information may be processed or stored in the United States or in other locations where our Service Providers, including Google or Calendly, operate.
Privacy and data-protection laws in those locations may differ from the laws in your country.
Where applicable law requires safeguards for an international transfer, we or our Service Providers may use contractual protections or another legally recognized transfer mechanism.
Echo Canyon Therapy provides Clinical Services only in jurisdictions where the treating clinician is legally permitted to practice. Accessing the Website from another jurisdiction does not mean that Clinical Services are available in that location.
Data Breach Notification
If we become aware of a data-security incident involving Personal Data, we will investigate and take reasonable steps to contain and address the incident.
When required by applicable law, we will provide notice to affected individuals, regulators, or other appropriate parties.
Incidents involving PHI will be handled according to applicable healthcare privacy and breach-notification requirements.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in:
Website features;
Information practices;
Service Providers;
Analytics or scheduling tools;
Clinical or business operations;
Technology;
Security practices; or
Applicable legal requirements.
The updated Privacy Policy will be posted on the Website with a revised “Last updated” date.
When legally required, we may provide additional notice of material changes.
Your continued use of the Website after an updated Privacy Policy is posted constitutes acknowledgment of the revised policy.
Contact Us
Questions, concerns, or privacy requests may be submitted through the contact form or contact information available on the Echo Canyon Therapy Website.
Echo Canyon Therapy, LLC
Phoenix, Arizona
Website: echocanyontherapy.com
For questions concerning clinical records, PHI, or your rights under healthcare privacy law, please refer to the contact information provided in our Notice of Privacy Practices.
Any further questions Contact Us.