Website Privacy Policy

Who operates this website

This website represents Therapeutic Journey Together and the counseling practice of Lori Hunter, LMFT (California license #101029), serving Roseville and clients online in California. The project does not identify a separate legal entity, so this policy does not assume one.

For a website privacy request, call or text Lori at 916-241-3144. Please say that your question concerns website privacy; do not include detailed clinical information in that first message.

Information submitted through forms

Consultation-request forms ask for first and last name, email address, phone number, type of therapy, a written description of how the practice may help, preferred availability, and payment or insurance questions. The written fields may contain sensitive health-related information. Share only what is needed to start a consultation conversation.

When you submit a form, your browser sends those fields directly to LeadConnector, the form-processing service configured by the practice. This project does not send form entries to Google or Meta advertising or analytics tags; no such tags are present in the website code. Form submissions are not stored in this website project’s database.

Because the form request goes from your browser to LeadConnector, that service also receives ordinary connection data such as your IP address, browser/device headers, and request origin or referrer. The website does not add a full referrer or device profile to the form payload. The hosting request itself may include the URL you opened, including any campaign query parameters; the project cannot verify what the hosting provider retains in its infrastructure logs.

The website does not set or control LeadConnector’s record-retention, deletion, security, or subcontractor settings. Their actual retention period and the practice’s deletion process have not been verified here. The practice should confirm whether the service is configured and contractually appropriate for any sensitive health information before collecting it.

Optional campaign attribution

If you allow optional campaign attribution, this browser may save whitelisted advertising and campaign parameters—such as Google click IDs, UTM values, campaign and ad-group IDs, keyword, match type, and device label—in local storage for up to 90 days. If you submit a consultation form while that permission is active, those saved details may be included with the form submission to LeadConnector.

Without that permission, campaign attribution is not saved or included with the form. The consultation form remains available. This preference does not recall information already sent to a service provider.

Browser storage and cookies

The website does not use an app-controlled advertising or analytics cookie. It uses local storage for the consent choice and, only with permission, campaign attribution. The separate Cookie Policy lists the storage names, purposes, and durations.

Service providers and technical information

The published website is hosted through Replit. Like other hosting and network providers, the service may process connection details such as an IP address, browser or device information, requested page, and referral information. The website code does not define the provider’s infrastructure logs or their retention period; those details should be confirmed with the provider.

A published-site audit found a hosting-injected Replit/Umami analytics script at i.replit.com/script.js sending page titles, full URLs (including query strings), browser language and screen dimensions to i.replit.com/api/send before a consent choice and after rejection. The site now includes a production browser security policy designed to block that script and its analytics connections regardless of campaign-attribution consent. These publishing protections take effect with the release containing them and must be checked on the live site after publishing. They do not disable the hosting provider’s own server-side logs or remove previously collected information.

The site’s typefaces are served from files hosted with this website. Thebooking page provides an external link rather than embedding LeadConnector’s calendar. No calendar scripts or frames are loaded here. Opening that link opens api.leadconnectorhq.com in a new tab without a browser referrer from this site. You may instead request a consultation here or contact Lori by phone.

The external calendar was observed contacting api.leadconnectorhq.com, backend.leadconnectorhq.com, stcdn.leadconnectorhq.com, link.msgsndr.com, storage.googleapis.com, fonts.googleapis.com and fonts.gstatic.com. Its session-attribution and booking-analytics requests included page URLs, session/user identifiers, browser and device information, and events such as page views and availability loading. Its own cookies and storage are described in the Cookie Policy. Those separate services are outside this website’s Cookie settings. Their retention, processing locations, contractual safeguards and privacy configuration remain subject to owner and provider confirmation.

Your choices and requests

Use the persistent “Cookie settings” control on this site to review or change campaign-attribution permission. You may reject it, withdraw a previous choice, or ask the practice about access, correction, or deletion of information, subject to applicable law and professional recordkeeping requirements. The practice should confirm which legal rights and response timelines apply to a particular request.

Withdrawing permission stops future campaign-attribution storage and removes the website’s stored campaign values when browser storage is available. It cannot remove information already sent to LeadConnector or storage controlled by that service.

Healthcare privacy

This website privacy policy is not the practice’s clinical Notice of Privacy Practices and is not an authorization to disclose protected health information. A cookie banner, a browser-only form, or the absence of a website database does not establish HIPAA compliance. The practice should have its legal and privacy professionals review vendor configuration, contracts and any required business-associate agreements, clinical record retention, and the separate Notice of Privacy Practices.

International processing

The project does not establish the processing locations or international transfer arrangements of Replit or LeadConnector. The practice should confirm those details with the providers and its legal adviser rather than relying on an assumption that all processing stays in one country.