Privacy Policy

Effective Date: September 16, 2025

Introduction

The Worcester Center for Expressive Therapies (“we,” “us,” or “our”) is committed to protecting the privacy of our minor clients and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard personal and health information in compliance with federal law, Massachusetts law, and best practices for children’s privacy. By engaging our services or providing us with information, you agree to the terms described herein.

Information We Collect

We collect information necessary to provide expressive therapy services to minors:

  • Personal and contact details (child’s name, date of birth, address, parent/guardian name and contact information).
  • Health and clinical information (medical history, mental health background, session notes, treatment plans).
  • Insurance and billing information.
  • Communications content when you contact us by phone, email, or in person.
  • Website usage data (IP address, browser type, pages viewed, cookies and similar tracking technologies) from parent/guardian interactions.

How We Use Your Information

We use your information to:

  1. Provide, manage, and document therapy services (scheduling, billing, clinical records).
  2. Communicate appointment reminders, follow-ups, administrative notices, and policy updates.
  3. Enhance and personalize our services and website experience.
  4. Comply with legal, regulatory, and accreditation requirements.

Massachusetts Data Security Program

In compliance with Massachusetts Data Privacy Law (201 CMR 17.00), we maintain a written information security program (WISP) to:

  • Identify and assess reasonably foreseeable risks to personal information.
  • Implement administrative, technical, and physical safeguards (encryption, secure networks, access controls).
  • Regularly test, monitor, and update those safeguards.
  • Train staff on data security policies and incident response.

Data Breach Notification

Pursuant to Mass. Gen. Laws ch. 93H and ch. 66A, if we discover unauthorized access to unencrypted personal information, we will notify affected individuals and the Massachusetts Attorney General, Office of Consumer Affairs and Business Regulation, and Division of Banks (if applicable) without unreasonable delay and no later than 60 days after discovery.

Sharing and Disclosure

We do not sell personal information.

  • We may share information: With service providers acting on our behalf (payment processors, IT support), under confidentiality obligations.
  • When required by law, court order, or to protect our rights.
  • With successors in interest if we merge with or are acquired.

Psychotherapy notes and other protected health information will only be disclosed with your signed authorization, except as permitted or required by law.

Children’s Privacy

Because our practice exclusively serves minors under 18, we adhere to the following:

  • Parental/Guardian Consent: We obtain verifiable consent from a parent or legal guardian before collecting any personal or health information. For minors aged 14 or older who can lawfully consent to mental health treatment under Massachusetts law, we will still notify the parent or guardian in accordance with state requirements.
  • COPPA Compliance for Online Interactions: Our website and online services are directed to parents and guardians, not children under 13. We do not knowingly collect personal information online from children under 13. If we inadvertently collect such information, we will promptly delete it.
  • Scope of Data Collection: We limit data collection to what is reasonably necessary for treatment, payment, and healthcare operations. We do not market to children.
  • Parental/Guardian Rights: Parents and legal guardians may access and review their child’s personal and health records, request corrections or amendments, and request deletion (subject to legal retention requirements). They may also withdraw consent for disclosures, understanding this may affect our ability to provide services.

Data Retention

We retain personal and health information for as long as necessary to:

  • Fulfill the purposes outlined in this policy.
  • Comply with legal, regulatory, and accreditation requirements.
  • Resolve disputes and enforce our agreements.

Thereafter, we securely dispose of or anonymize information.

Your Rights and Choices

Under Massachusetts law and HIPAA, you may:

  • Access and receive a copy of personal and health information.
  • Request correction or amendment of records.
  • Request deletion of personal information, subject to legal obligations.
  • Withdraw consent for certain disclosures (noting impact on services).
  • Opt out of marketing or non-essential communications.
  • Manage cookie and tracking preferences on our website.

To exercise these rights, contact us using the information below.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised policy with a new effective date. Continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Information

The Worcester Center for Expressive Therapies 8 Lumber Street Hopkinton, MA 01748
Email: KaylaDaly@WCETherapy.com
Phone: (508) 202-0633