Privacy Policy

Last updated August 15, 2026

This Privacy Policy explains how I collect, use, and protect information through this website. It’s operated by Kate McNulty, LCSW, and Kate McNulty LCSW, PC (“I,” “me,” or “my”).

How This Policy Fits With My Other Privacy Documents

‍This policy covers the website itself: what happens when you browse it, fill out a contact form, or otherwise interact with it before becoming a client. It's separate from two other documents:‍ ‍

  • Washington Consumer Health Data Privacy Policy. If you’re a Washington resident, a separate, standalone policy required under Washington’s My Health My Data Act governs my collection and sharing of consumer health data specifically. You can find it linked in the site footer, and where it applies, it controls over this general policy for that category of information.

  • HIPAA Notice of Privacy Practices. Once you become a client, a separate federally required document explains how I use and protect the protected health information (PHI) I collect during treatment. This notice is part of the informed consent packet you receive at intake.

Information I Collect

Through this website, I may collect:

  • Contact form submissions, including your name, email address, phone number, and any message you write.

  • Information you provide if you call or text the practice line.

  • Basic technical information, such as your browser type, device type, and how you found the site, collected automatically through Squarespace’s built-in site analytics.

I don’t collect clinical or treatment information through this website. Clinical information is collected separately, after intake, through Simple Practice, and is governed by my HIPAA Notice of Privacy Practices rather than this policy.

How I Use This Information

I use the information collected through this site to:

  • Respond to inquiries submitted through the contact form or by phone or text.

  • Understand how visitors use the site, so I can improve it.

  • Meet legal and record-keeping obligations.

I don’t use this information for targeted advertising, and I don’t sell it.‍ ‍

How I Share This Information

I don’t sell your information to anyone. I may share it with:

  • Service providers who help run this website or my practice operations, such as my website host (Squarespace), email provider, and scheduling platform (Simple Practice), each of whom accesses only what they need to provide their service.

  • Legal authorities, if required by law, court order, or to protect someone’s safety.

‍Cookies and Similar Technologies

This site uses cookies through its Squarespace platform to support basic site functionality and analytics. You can control cookies through your browser settings; blocking them may affect how parts of the site function.

Data Security

I take reasonable steps to protect the information collected through this site, consistent with the security obligations that apply under Oregon and New York law for businesses that hold personal information of their residents. No method of transmission or storage is completely secure, and I can’t guarantee absolute security.

How Long I Keep This Information

Contact form submissions and inquiry records are generally kept for 7 years for business and legal record-keeping purposes, after which they’re deleted. Clinical records, once you become a client, are retained according to the requirements of my licensing board and are addressed separately in my HIPAA Notice of Privacy Practices and treatment agreement.

Your Choices and Rights‍ ‍

You can ask me at any time what information I have collected through this website and request that I delete it, using the contact information below. If you’re a Washington resident, additional rights specific to consumer health data are described in the Washington Consumer Health Data Privacy Policy. If you’re a New York resident, and there’s ever a security breach involving your information, I’ll notify you as required under New York’s data security law (the SHIELD Act).

Children’s Privacy

This website isn’t directed to children, and I don’t knowingly collect information from anyone under 13 through this site.

Changes to This Policy

I may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. ‍

Contact

Questions about this Privacy Policy can be sent to kate@katemcnulty.com.