Shannon Duffy
MS Exercise Science + MA in Clinical Mental Health Counseling
The UpLevel Counseling
Privacy Policy
Effective Date: March 19th, 2025
​
Your privacy is important. Please read the whole of this statement carefully as it sets out what information we may collect from you, how we may use it and your rights in respect of our use and the key details of our privacy policy. Please read this Privacy Policy carefully before using the http:///shannonduffycounseling.com website (“Website”) operated by Transformative Growth Counseling, LLC (“us”, “we”, or “our”).​ We are committed to protecting your privacy in accordance with applicable state and federal laws, including the Health Insurance Portability and Accountability Act (HIPAA).
​
Shannon Duffy Counseling is a solo private counseling practice operated by Shannon Duffy, MA, LPC. All sessions are conducted online. We use Calendly for scheduling and Zoom for video sessions, both of which are configured to be HIPAA-compliant.
​
Information We Collect:
a. Information You Provide to Us Directly:
- Name, email address, and phone number
- Information submitted via contact or intake forms
- Health-related information necessary for counseling
- Payment information if relevant
b. Automatically Collected Website Information:
- IP address, browser type, and device information
- Cookies and usage data
​
How We Use Your Information
We use your information to:
- Provide individual counseling sessions online
- Schedule appointments and communicate with you via email
- Conduct video sessions securely via Zoom
- Maintain clinical records as required by law
- Respond to your questions or concerns
- Improve the quality and functionality of our services
We do not sell or share your information for marketing purposes.
​
How Your Information May Be Shared
We may share your information only in these circumstances:
- With your explicit consent (example: coordination with your healthcare providers)
- With service providers that assist us in operating the practice (e.g., Zoom, Calendly)—these providers are required to comply with HIPAA standards
- When legally required, such as mandatory reporting of abuse or court orders
​
Your Rights
Under HIPAA and Colorado law, you have the right to:
- Request access to your health records
- Ask for corrections or amendments to your records
- Receive a copy of this privacy policy and how your information is used
- Request restrictions on communications
- Choose how and where we contact you
You can request these by using the contact form.
​
Telehealth and Electronic Communication
All sessions are conducted via HIPAA-compliant Zoom. Scheduling is done through Calendly, and communication is done by email. By using these platforms, you acknowledge that while we take all appropriate precautions, no system is 100% immune to risk. You may request alternative methods of communication at any time.
Data Security
We use secure, encrypted platforms and follow industry best practices to protect your personal and health information. All data is stored and transmitted in accordance with HIPAA requirements.
​
Cookies and Website Analytics
If cookies or analytics tools are used on our website, you will be notified and given a choice to accept or decline. These tools collect only anonymized data and are used to improve website functionality.
​
Children’s Privacy
Services are intended for individuals 18 years and older. We do not knowingly collect personal data from minors without verified parental or legal guardian consent.
​
Policy Updates
This policy may be updated occasionally to reflect changes in technology, laws, or business operations. The current version will always be available on our website.
Contact Information
If you have questions or wish to exercise any of your rights under this policy, please use our contact form to reach out.